Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File:                     K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier:          TvORll+9ofS5ZXDOh7aO800Tm3xWn2zyQHUiFgTmyHo=
Subject key identifier:   C4:55:72:F6:F6:67:5D:E9:8D:55:7D:EF:B7:B2:D9:7C:95:1F:31:B5
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer:       /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial:       01A0D9F1E0BFBF43E090F682D41B34712590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number:          1907
Signing time:             Fri 25 Sep 2026 19:01:42 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:42 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:42 +0000
Files and hashes:         1: 1llWNK65NedtiWi8qyia848ELaA.roa (hash: 0oTSLbXlh3Ln2/Z2bu7ijN1NRwtM3qIsyO0kzqAkxPw=)
                          2: 8SP8wrXr1dy02TJk430AwSvMFTE.roa (hash: /PIJ3E7I+I9m0ncOt8+A4jxLk/g73oMVaRRE/eZXcGo=)
                          3: Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa (hash: G5PDsg/wG8I5/QaFUvVe7A5FW81hq3JrSXknwZ7dvi0=)
                          4: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: 9Mv51T3hKvaeA/2INOi9sYTJQjADPVVqGk1zqWcv80g=)
                          5: lWNFxd1Gj0MT4veUOTu-eVVA-80.roa (hash: 85lL7kKUinH67VqupmaYwZZaBJjLm6Q1ocKj+e+bV0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:e0:bf:bf:43:e0:90:f6:82:d4:1b:34:71:25:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
        Validity
            Not Before: Sep 25 19:01:42 2026 GMT
            Not After : Sep 26 19:01:42 2026 GMT
        Subject: CN=c45572f6f6675de98d557defb7b2d97c951f31b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:77:ed:df:35:f9:64:74:19:13:3d:00:92:0e:
                    e8:aa:20:b6:f4:1f:1c:d9:c4:3c:d3:68:46:c2:34:
                    33:f3:ba:f3:ea:d1:c8:32:63:94:13:fa:e5:1d:b5:
                    e1:d3:24:50:1f:af:26:d6:9b:d7:15:e4:8e:d1:3a:
                    b1:4c:ad:eb:00:fc:22:7f:0e:13:a3:94:a6:15:09:
                    10:5e:06:08:15:ed:d3:a6:61:cb:61:5c:12:9c:0f:
                    31:3f:c3:d5:14:83:19:6e:69:bb:a9:5f:f6:27:f7:
                    ae:51:ca:c6:73:f0:e1:d6:4b:76:34:9c:0f:69:8a:
                    fa:8a:6e:10:bc:74:18:54:61:1b:2e:57:50:40:ba:
                    89:e4:77:22:94:b6:be:bd:ef:81:9d:5c:4f:8a:5b:
                    1a:52:92:ba:f7:02:0d:7b:65:e6:09:23:45:00:b0:
                    ac:de:80:6a:df:97:5e:d7:d2:73:e7:bd:c1:3c:c7:
                    a4:65:d9:20:ab:20:47:08:ae:f4:46:cf:60:d1:a0:
                    d1:54:5f:12:22:03:28:85:73:66:0e:4d:c6:0c:e4:
                    0e:d6:94:fe:71:6d:15:9f:7a:91:05:0d:fc:3f:5c:
                    89:2d:60:fe:a7:97:9b:54:46:21:13:a6:80:32:d0:
                    48:f5:a2:2f:e0:ff:69:48:9c:52:27:40:80:c5:36:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:72:F6:F6:67:5D:E9:8D:55:7D:EF:B7:B2:D9:7C:95:1F:31:B5
            X509v3 Authority Key Identifier:
                keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4b:ea:b4:0e:e0:a6:a1:5c:7f:86:e2:f8:d1:a2:ff:31:4a:
         f1:5f:93:a8:1e:39:58:fb:d6:a9:59:50:3e:e3:60:e3:3b:82:
         87:24:8e:19:6a:ce:98:80:0a:f6:a0:53:63:4e:e9:63:8f:de:
         cb:17:49:c2:b5:4e:2a:c5:ba:c1:aa:5c:50:d2:fc:5e:b5:b0:
         ed:2a:30:02:22:06:43:67:73:98:ad:26:b3:a8:98:f1:93:a6:
         4e:19:09:e1:c9:b5:53:b0:89:22:3c:f2:4f:b4:74:78:e9:87:
         d9:c5:7d:d3:80:88:2c:b3:45:fd:5c:81:18:45:ab:d1:11:5c:
         c9:18:26:5d:57:64:ce:c2:b4:9a:6b:f1:b9:4e:06:b8:01:df:
         ab:0c:f1:45:77:b3:bb:3f:83:96:13:05:c6:51:3a:68:a9:f7:
         99:92:1a:6e:ee:8a:9b:d3:70:e5:25:93:fc:3f:50:93:15:b8:
         a4:b8:5e:eb:4a:de:b7:ac:00:6a:ad:af:17:6a:17:aa:8e:ee:
         b7:f8:d3:60:22:37:a1:33:a2:87:dc:ed:4b:22:81:4d:b2:2a:
         d9:1d:9b:ca:2c:9b:c5:e8:79:b2:66:a8:d5:a2:b1:c2:21:84:
         35:9c:15:00:c6:9b:e6:4e:8c:44:3f:16:74:cc:86:84:09:5a:
         3f:d3:c8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:13:48 2026 by rpki-client