Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          ZRia7JWYgfgZzUJuPPx5wOXn5DXjUEtYnKAxX5UOD2c=
Subject key identifier:   3C:E6:75:FA:FB:B6:29:FA:C8:B4:97:91:9B:8D:FC:ED:8B:6A:96:36
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       01A0C4E936163ED37C473A4C7F128E8146AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          17C7
Signing time:             Mon 21 Sep 2026 17:00:13 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:13 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:13 +0000
Files and hashes:         1: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (hash: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM=)
                          2: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (hash: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo=)
                          3: DSzDYKP0Eliter60MSyPBC3uoBo.roa (hash: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY=)
                          4: K7pjnPK8S24idyOMea3NYin5SO8.roa (hash: YckTf9iIpdd+XsvzzovN9f+k8o5y12iUYrJM+OVIcPk=)
                          5: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: s2zMYXPDgJvouJ7y7VMNPWvjD2QGoHLalegqHMcrjKA=)
                          6: o-d6O05K7BPSIDagH_dA7QNFluU.roa (hash: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:36:16:3e:d3:7c:47:3a:4c:7f:12:8e:81:46:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Sep 21 17:00:13 2026 GMT
            Not After : Sep 22 17:00:13 2026 GMT
        Subject: CN=3ce675fafbb629fac8b497919b8dfced8b6a9636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:20:16:ce:48:bb:c5:37:35:5c:62:6f:78:
                    4a:51:48:a4:12:20:a3:0a:ff:74:28:48:64:cd:10:
                    c9:97:9b:28:cb:b7:21:fc:34:0f:26:81:84:54:a6:
                    e6:ff:d3:b1:07:0d:53:dd:73:1f:ab:99:c7:72:b8:
                    de:56:47:4b:b5:ec:78:ae:ea:1f:7e:23:fc:60:19:
                    6b:d8:c9:23:b3:1d:2a:24:16:ff:8a:cd:d0:7c:47:
                    8f:e1:bc:2b:de:f8:dc:a0:45:1d:14:0b:87:a1:e3:
                    00:04:53:b0:ec:32:c8:44:17:6e:c1:ef:5e:34:91:
                    d2:19:83:17:8b:73:2f:89:46:40:50:a3:91:45:f1:
                    43:4b:9c:04:9a:09:b9:71:67:45:7d:b3:a8:45:b7:
                    79:a4:77:7a:f7:cf:87:e1:f0:d7:10:02:ff:1a:b7:
                    b5:16:2f:b7:79:b7:4a:a3:93:91:df:70:67:18:45:
                    24:0a:75:ab:31:a4:99:cb:5e:ef:d1:d3:f2:94:e5:
                    a1:b4:49:c3:02:69:45:d6:12:37:8b:c8:8a:63:81:
                    d8:36:07:17:c9:06:8d:94:b1:c9:58:e8:1e:ec:36:
                    a6:05:05:87:4a:b1:33:f6:49:e6:91:e6:7b:2e:2d:
                    fa:d8:ab:7c:88:07:e7:da:6e:17:9f:13:d0:3a:76:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E6:75:FA:FB:B6:29:FA:C8:B4:97:91:9B:8D:FC:ED:8B:6A:96:36
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9d:b0:11:9b:e1:28:4d:ae:15:ab:6e:36:4c:b0:51:65:7e:
         ff:38:f8:9e:61:53:78:d9:7b:29:6a:1b:9f:06:46:b8:f5:de:
         4b:2a:db:5a:ad:a9:43:49:38:34:65:fd:69:cc:9f:1f:b2:3c:
         f0:33:20:3a:19:cf:38:2f:c1:66:51:d4:aa:76:41:a5:6b:02:
         6d:c7:48:c7:72:3c:f6:ea:3e:80:b6:7e:a9:67:c6:f2:1f:71:
         0a:7a:33:ec:2d:2c:a3:f5:b6:8e:dd:43:f6:30:14:08:da:3a:
         70:b3:f7:2d:fa:f3:10:d1:d7:39:1f:07:d3:9e:c2:1e:9f:68:
         03:b9:8b:58:75:8d:40:e6:9a:59:b6:08:35:90:a1:93:ff:6c:
         5d:a4:4e:65:90:51:1f:d6:b4:37:6d:dd:9f:51:30:50:97:4a:
         3b:29:db:bf:76:13:f2:35:b9:11:d4:2e:55:5d:e0:d0:3b:03:
         0a:e4:e5:f9:6f:f7:45:9e:ca:ed:4b:2e:54:a0:9b:60:b8:60:
         22:ab:e7:10:fc:2f:46:d8:2a:7e:ec:d2:90:43:e2:14:b0:e0:
         c6:7f:9f:a9:13:cf:1a:ec:34:33:66:a6:27:27:ff:86:65:42:
         63:e2:b7:61:67:4a:fb:15:0c:f8:13:9d:00:db:5d:99:95:93:
         7e:7b:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:47:29 2026 by rpki-client