Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
File:                     Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json)
Hash identifier:          dJGiRk6caWOH2R4OTHZcqkaaGbqaHAh/GQdRO5A4i8o=
Subject key identifier:   FC:E0:73:A6:89:F0:5C:BD:EB:1B:3F:E0:1F:06:3E:D5:B4:AC:50:D3
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Certificate issuer:       /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial:       01A0BD672FC2E4ABFC89425F711347AD8187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
Manifest number:          0913
Signing time:             Sun 20 Sep 2026 06:00:51 +0000
Manifest this update:     Sun 20 Sep 2026 06:00:51 +0000
Manifest next update:     Mon 21 Sep 2026 06:00:51 +0000
Files and hashes:         1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=)
                          2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=)
                          3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=)
                          4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=)
                          5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=)
                          6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=)
                          7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=)
                          8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: 0HwbRZXUJ+M1Wo5KsZrlPUeo2N0pqjvmBnHSDg16xL8=)
                          9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=)
                          10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=)
                          11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=)
                          12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=)
                          13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=)
                          14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=)
                          15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=)
                          16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=)
                          17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:67:2f:c2:e4:ab:fc:89:42:5f:71:13:47:ad:81:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
        Validity
            Not Before: Sep 20 06:00:51 2026 GMT
            Not After : Sep 21 06:00:51 2026 GMT
        Subject: CN=fce073a689f05cbdeb1b3fe01f063ed5b4ac50d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:44:ed:43:d9:e7:7d:5d:b0:11:80:83:c6:5c:
                    07:73:2f:3e:f9:1d:a5:e9:3d:78:26:fc:2a:de:e3:
                    87:56:ab:1e:fe:79:32:bb:80:38:a2:4d:4e:41:58:
                    23:ed:ef:7f:32:88:7b:4c:44:5f:c8:14:2b:dc:27:
                    2a:96:bc:f3:4b:5a:5a:6f:d4:87:ce:48:5d:21:5b:
                    eb:4c:40:73:dc:49:3f:0b:f2:a7:e0:33:51:37:80:
                    76:a6:40:34:86:de:de:0d:d5:b1:0c:f4:d3:4b:6e:
                    2b:7c:d9:05:f3:f8:42:3d:36:01:51:ec:8c:23:c5:
                    42:9a:6d:70:f2:ae:e4:5c:40:30:e1:da:4b:7a:52:
                    b4:c1:d9:65:53:10:00:b6:b2:8e:8a:31:2a:da:f5:
                    8d:64:a7:9b:fd:a4:88:7d:d9:78:98:48:51:28:f8:
                    4a:ee:66:9e:4b:20:e0:d7:22:cc:c8:2f:30:6b:48:
                    ac:b6:df:9d:17:0c:4b:1f:7b:3f:91:a9:b2:ff:a8:
                    13:33:7f:01:85:98:49:3b:03:78:48:fe:87:73:e5:
                    a4:ae:50:3f:46:f9:e0:c4:d7:22:b4:3f:63:8d:3a:
                    70:d1:ea:5a:06:ac:a6:a4:ee:64:22:4e:8d:b7:5f:
                    d6:7b:ad:33:91:e8:89:98:5c:fd:e1:85:63:fa:33:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E0:73:A6:89:F0:5C:BD:EB:1B:3F:E0:1F:06:3E:D5:B4:AC:50:D3
            X509v3 Authority Key Identifier:
                keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:58:4d:4c:01:9d:a2:d6:cb:ac:d5:8a:2d:cf:ab:ea:f9:90:
         94:6c:29:b4:2b:c2:89:5f:90:08:bb:87:48:0d:ef:d7:a6:ab:
         27:52:8b:39:4d:d7:47:51:24:19:39:33:e5:dd:74:e5:45:90:
         27:77:89:22:28:c5:1e:22:56:dd:2d:07:27:36:51:71:44:57:
         c0:f5:a1:54:cf:11:87:9b:60:c2:86:3f:a7:cc:aa:44:4d:86:
         cc:ff:4a:82:a7:c4:77:60:d2:62:76:a8:7b:78:c0:8a:43:01:
         13:64:dc:5a:04:c2:6d:f6:a1:42:fb:49:68:69:fd:09:26:ea:
         e0:c6:ba:53:78:9e:05:54:89:31:6d:f6:e5:cd:b6:ec:cf:9a:
         89:f8:cc:f6:07:ae:2e:e7:4d:7e:88:16:b4:56:39:90:f5:4f:
         1a:25:a3:61:35:24:8b:bf:2d:72:f3:3f:7b:96:9a:c9:52:58:
         3e:a3:0e:e7:6e:a4:0d:cf:60:02:f9:a0:ee:0a:43:10:8f:a0:
         58:39:59:79:73:2c:b1:37:ab:c3:2c:7c:8b:8a:1a:25:f6:46:
         29:ed:65:f2:27:34:19:04:48:c8:d1:4e:11:40:31:4f:47:e8:
         82:90:07:a5:19:97:ca:91:ad:9d:ee:d3:8a:f0:a8:47:7d:30:
         00:74:b0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:44:57 2026 by rpki-client