Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File:                     krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier:          8ZNqDMBcFPfyLEr/zaPSdgPhQloiXFeVuaflCdoJ/Pg=
Subject key identifier:   FD:7E:04:97:97:96:48:C3:9F:07:66:14:BA:42:AD:00:9B:AD:BD:07
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer:       /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial:       01A0F41FD82C00BD9AB49DB60ACADC0DE106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number:          19A4
Signing time:             Wed 30 Sep 2026 21:02:02 +0000
Manifest this update:     Wed 30 Sep 2026 21:02:02 +0000
Manifest next update:     Thu 01 Oct 2026 21:02:02 +0000
Files and hashes:         1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: Qo+wrz6JNc7JND2CQe6RBYPvyIrByFe82PXAgZdEbWA=)
                          2: zOvOdvEFDu9Mo4Hd8BTTn_Gseog.roa (hash: i7r8dEO0PV70SWBxos0ykVviEGzZou2X66tLzrHIOKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f4:1f:d8:2c:00:bd:9a:b4:9d:b6:0a:ca:dc:0d:e1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
        Validity
            Not Before: Sep 30 21:02:02 2026 GMT
            Not After : Oct  1 21:02:02 2026 GMT
        Subject: CN=fd7e0497979648c39f076614ba42ad009badbd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:72:bf:b0:24:7d:ed:ff:34:ad:f3:28:92:
                    d4:98:71:00:e8:ac:08:7f:73:8c:7f:cf:10:ee:88:
                    b6:10:37:d6:e4:16:1f:90:7d:9a:7e:63:f9:6e:7d:
                    db:a8:06:9a:60:24:99:8a:67:66:ec:86:4c:5c:bc:
                    56:3b:7b:2c:05:ab:4c:05:03:d1:48:49:85:84:22:
                    a5:91:3b:83:31:5c:4e:43:34:aa:10:f9:1f:ba:b3:
                    a5:38:ca:7a:7b:87:c2:6a:5b:a3:41:54:dd:87:4e:
                    ca:9f:46:14:21:f2:cf:65:33:2d:84:ac:98:eb:4f:
                    f5:9a:7d:7b:ad:fc:ba:c4:7b:ad:63:aa:a6:77:0c:
                    33:8f:a1:94:10:83:19:11:77:5f:e8:ad:43:61:0e:
                    a4:03:28:71:25:8d:54:61:f9:6f:bd:93:a3:45:21:
                    2b:fe:da:18:b1:d7:cd:3c:c0:16:d0:ac:e7:49:81:
                    8d:69:85:94:70:45:e2:49:08:a3:61:26:53:cc:69:
                    26:52:cc:48:87:98:7c:27:82:d6:25:27:d3:f1:5c:
                    4e:37:50:9a:b3:c6:c0:e0:73:1b:ff:a9:57:6b:61:
                    6b:6a:ad:66:7d:cb:5a:22:18:76:ca:39:90:3e:0a:
                    5e:70:08:00:90:c6:8e:1c:8e:1c:a1:0c:a9:62:c5:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7E:04:97:97:96:48:C3:9F:07:66:14:BA:42:AD:00:9B:AD:BD:07
            X509v3 Authority Key Identifier:
                keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:46:51:3f:bb:5b:f2:8b:9d:b9:6e:90:03:28:79:62:7f:2c:
         41:f3:04:07:16:30:4e:6b:4c:96:7d:45:69:f7:ba:b3:19:91:
         54:86:15:b5:f5:30:a6:1a:ec:0b:f4:71:c1:7c:f7:7e:ae:b3:
         92:c8:fd:bb:bd:de:b4:6f:d3:fd:8d:94:c2:8d:d0:47:4b:98:
         a0:51:3e:8e:0d:eb:46:b8:17:76:77:7d:e7:f4:e1:46:33:04:
         f5:b5:20:60:56:6f:44:10:93:ff:c3:ed:15:c3:5b:bb:20:f5:
         ff:4b:ac:ce:97:6b:e1:64:2f:2d:11:6e:1e:fe:de:2f:9f:3d:
         00:d5:93:4e:ba:c0:b6:7f:6a:95:2e:ba:23:d4:95:f7:b1:32:
         a5:14:d1:d3:20:65:0a:74:5e:4a:41:0c:29:1a:97:3f:d2:a5:
         f6:32:56:a9:5f:3f:e4:92:73:3a:c9:82:38:f3:44:29:2a:35:
         d3:96:ad:90:a3:42:2f:8d:0f:48:8d:36:7c:8a:95:1b:40:4d:
         75:fc:d2:94:32:11:40:d6:d0:09:1d:08:76:24:4f:0e:f1:89:
         8d:ed:64:f7:9a:c8:cb:0c:f9:68:77:7f:5f:a4:fd:5d:ea:80:
         fa:0b:3d:e9:05:fb:ef:19:ef:7b:72:51:a0:97:48:33:27:a5:
         5a:c6:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:17:43 2026 by rpki-client