Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          5p4BiMJc4XH78IBH/gwZrI3U2e/4Ygqd5wJh/Ev9BNk=
Subject key identifier:   63:B1:AC:28:BF:E7:AF:38:EB:F3:D6:EA:2C:F9:A5:57:3C:69:16:59
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       01A0C4E91EA21118631FCDCF400900225FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0EE7
Signing time:             Mon 21 Sep 2026 17:00:07 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:07 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:07 +0000
Files and hashes:         1: NLxAAvM0yrk_gaW8UTYZlpD_aSU.roa (hash: koZQTWGtu/yZU8GbkdRNcGGY7bBAtyvzqtTowhwY4EE=)
                          2: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: PThRK5ZhimEJZd1P0Eq7t7jBiFXzrLWIoAXBL+/RbiY=)
                          3: oyIHnleaxdQmed-d8OgAoabLOCk.roa (hash: SzJ8FmuzjIl9sC++X+hnrkenbzU5J/9NekanXVA8b6o=)
                          4: pqVBy_JjEYGo9euG10lbD9kfoPc.roa (hash: RPXgn9O4fhCi6PomLx2N6apcSA2xga46Z6S9gI5YVpU=)
                          5: vYxJpv5POvG_3gvqhMqXcCuX_hM.roa (hash: wpDWTjfQBDPG5OjIvThUgTmIIfXP/UypeEU6fjlCrZU=)
                          6: yEbtzhh5wc4rY7MHu27W_dwYhu8.roa (hash: h2s6dV+bwm8ecYVBUiiK45LeIcpS1pxSfpxppjXQ+aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:1e:a2:11:18:63:1f:cd:cf:40:09:00:22:5f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Sep 21 17:00:07 2026 GMT
            Not After : Sep 22 17:00:07 2026 GMT
        Subject: CN=63b1ac28bfe7af38ebf3d6ea2cf9a5573c691659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:c8:41:da:57:fb:12:23:4a:6a:da:77:64:
                    2e:7c:33:ae:a0:fa:0d:1b:25:e0:1c:bb:26:9a:e8:
                    8c:56:ad:ff:7a:00:62:b2:cc:27:4a:4a:04:44:61:
                    c3:d8:93:ce:8b:c7:95:bd:11:73:3a:9a:11:95:15:
                    33:03:d7:d8:60:b3:3d:6d:9e:60:42:b5:94:9a:aa:
                    cf:08:90:ec:26:eb:ef:d1:ce:5b:f0:ba:c3:63:86:
                    58:10:81:ad:75:11:13:6a:78:ba:ef:b1:3c:15:c8:
                    74:a7:24:1b:7e:20:f1:f7:96:9d:1c:82:3b:60:03:
                    fd:4d:b1:3a:9e:aa:94:0c:10:60:5d:6e:66:92:7d:
                    1e:d6:0c:f8:23:04:c1:89:f0:dc:85:70:7b:74:a3:
                    7c:66:2e:bb:d9:de:99:7e:ff:c5:e5:af:9e:3c:92:
                    43:6b:59:4b:4c:8f:02:e9:9a:92:9f:c8:0d:c3:80:
                    ff:e8:8f:bf:fd:af:59:b8:44:76:c5:36:58:45:42:
                    e9:f9:57:f8:52:e2:36:5b:85:44:96:7d:83:02:2e:
                    65:c0:a6:d8:1f:a9:a0:fa:d0:6d:ca:b2:14:a6:50:
                    65:4c:f2:6c:a5:70:df:b2:78:77:6a:03:db:9e:72:
                    bb:f1:07:d0:33:1d:06:fe:36:52:76:6f:f2:fc:48:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B1:AC:28:BF:E7:AF:38:EB:F3:D6:EA:2C:F9:A5:57:3C:69:16:59
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a2:79:a3:9f:f4:33:3e:92:80:2d:b3:19:f8:50:c6:d7:2b:
         e0:32:67:d0:de:fe:5c:86:8a:69:e9:c8:3c:3a:f2:37:a6:74:
         b0:11:3c:c3:91:c4:8c:5e:4a:7f:f0:cf:74:fb:fd:00:6d:ae:
         54:ea:47:40:93:9b:4b:74:1b:46:50:45:4a:59:21:2c:05:5c:
         54:92:b1:b0:85:43:49:c7:e2:bc:c1:aa:ab:ee:5d:1c:da:5b:
         c6:9a:b7:15:26:67:bb:6b:fc:a4:23:00:94:dd:21:5b:05:54:
         0e:4c:12:2e:71:dd:ab:36:8d:2a:dc:2e:91:17:43:9f:b6:d5:
         26:b7:24:1e:32:69:0f:25:7b:39:0d:d2:28:fb:84:44:37:d1:
         c7:9f:b9:91:e8:b5:24:6c:27:08:a9:70:2c:35:ff:ac:d6:1a:
         66:7f:72:99:94:e8:80:ff:d2:1c:00:62:fb:29:a2:eb:ea:cc:
         1c:27:02:15:13:38:f7:dd:37:ca:ed:35:b3:23:d5:32:82:d9:
         ce:b9:90:b7:84:09:64:63:4c:18:78:ab:5c:0f:b2:ae:93:35:
         7c:12:c4:87:5c:24:60:b5:47:31:a5:5c:9b:99:a7:1d:3d:82:
         a9:af:7d:6a:87:00:9a:86:bb:c2:9d:0e:04:dd:3e:de:3a:99:
         94:0a:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:23:16 2026 by rpki-client