Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
File:                     kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json)
Hash identifier:          H1S0mZbJXYxLaa7r/AibBZCpMPEHjbnZ9bM81z8hnQQ=
Subject key identifier:   C8:61:DA:89:7F:41:28:47:DC:CF:22:0A:19:5E:C0:DE:24:AE:54:1F
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Certificate issuer:       /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial:       01A0E7E4224384A2993262EE38A2B5F2D013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
Manifest number:          1A79
Signing time:             Mon 28 Sep 2026 12:01:22 +0000
Manifest this update:     Mon 28 Sep 2026 12:01:22 +0000
Manifest next update:     Tue 29 Sep 2026 12:01:22 +0000
Files and hashes:         1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: ls9WTNZEozTZraB1tOM0BemaA8MqhzGc4DPwi0Y/dL0=)
                          2: xpFzvNysauejwNurSrVoomGPi2g.roa (hash: ZWen67CGabL9A0ahpVR1yOAZANbCjCBbSuhLawAwcs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:e4:22:43:84:a2:99:32:62:ee:38:a2:b5:f2:d0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
        Validity
            Not Before: Sep 28 12:01:22 2026 GMT
            Not After : Sep 29 12:01:22 2026 GMT
        Subject: CN=c861da897f412847dccf220a195ec0de24ae541f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:b5:29:11:76:f9:3a:a5:39:52:bc:ff:cc:
                    9c:d9:b9:f5:f7:48:a7:eb:e2:a2:c8:ef:9d:fa:2d:
                    f9:28:24:e4:26:03:34:93:c3:1b:25:e8:16:18:14:
                    09:44:ae:11:0d:30:2e:ef:2a:82:31:06:17:6e:39:
                    49:71:95:c9:ec:b8:70:9b:0f:15:bd:15:12:3f:1a:
                    57:f9:b1:c7:27:d8:fb:49:a6:22:63:22:ee:e4:c9:
                    e3:d7:86:f2:49:94:6e:1c:15:2a:04:fa:5b:ab:4b:
                    fb:66:ea:b1:63:ba:de:37:95:8d:c3:6c:39:cc:fc:
                    94:87:f9:12:25:eb:fb:29:66:32:1d:aa:f0:09:34:
                    ed:5a:56:9f:21:8d:48:6e:ce:a4:26:1a:80:37:44:
                    0f:cf:08:29:47:b2:fb:57:ac:a2:26:77:c8:18:fd:
                    b6:52:7b:3a:46:62:9f:56:66:82:07:2f:bd:d3:f9:
                    85:63:dd:b6:43:b8:70:58:5b:33:62:dd:ac:69:54:
                    c5:ef:f6:59:9f:6e:47:e9:8d:94:2e:16:0b:34:36:
                    53:78:98:d5:21:15:6a:53:92:79:22:1d:69:d4:e5:
                    c7:96:bf:e6:a8:6e:bd:a4:b0:bf:57:c0:11:5a:cc:
                    32:38:8c:bb:41:1a:a1:75:8f:3f:43:76:3e:8a:df:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:DA:89:7F:41:28:47:DC:CF:22:0A:19:5E:C0:DE:24:AE:54:1F
            X509v3 Authority Key Identifier:
                keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:23:de:9a:38:fb:ee:17:d3:06:05:65:5a:3e:ec:b3:b0:4e:
         d5:c8:7b:79:b1:59:be:f4:3b:18:d1:b0:bf:d4:67:7b:d4:c8:
         3d:19:32:08:89:ac:7a:39:d0:20:21:c6:b0:fb:38:c0:a2:8a:
         fa:d4:35:73:f0:86:92:98:92:7b:3c:01:d8:8d:18:b3:3f:d4:
         8d:e3:52:5c:13:ed:b2:79:c2:8f:7c:f4:04:e0:e9:ff:ff:67:
         ef:2c:89:68:06:80:60:94:c8:e7:80:17:39:d9:fc:1b:e0:55:
         03:bd:e0:15:25:3a:67:58:2b:3a:b6:14:af:39:4a:1d:13:84:
         39:84:76:59:2c:21:1e:3c:69:b9:f8:32:c2:19:dd:02:58:d6:
         7d:90:aa:99:ea:71:6f:44:13:67:51:2a:83:d2:59:b8:f9:2e:
         9a:04:68:d2:77:69:64:2a:99:ce:07:6a:68:f9:07:b1:2e:f7:
         f9:03:75:bd:01:df:6a:11:1d:73:96:85:7f:f8:53:56:a2:81:
         1e:84:f6:72:62:6b:25:1b:37:09:ec:4f:94:74:fd:e3:f6:d7:
         ee:ae:e9:57:12:25:91:fe:37:5a:6b:36:7d:bb:a3:86:4d:b1:
         aa:b1:f8:16:a7:e8:d6:72:96:ff:88:32:65:73:73:ee:89:37:
         78:6f:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:16:12 2026 by rpki-client