Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          y4rSS8q4t3OpbfaD7Oib+c9GskSz0fGaPJV68lUzpKU=
Subject key identifier:   06:E9:1C:4C:98:5B:1A:03:0D:F0:73:80:4A:39:94:94:5C:B6:E3:17
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       01A0C47C116FC97B7439304643D7E86C0B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          1A81
Signing time:             Mon 21 Sep 2026 15:01:00 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:00 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:00 +0000
Files and hashes:         1: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
                          2: 44tbRBm3zSZMoCst6WkxTKufMIE.roa (hash: 5gCjJr0c5JiHRvqLpZ00s+SrgcQffTqmoJaDyLE8c74=)
                          3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
                          4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
                          5: 8hx1gAb9JQ9Jt_adfPfauV83-lw.roa (hash: 5Yu25cs4dK7+vmfRVz+5LCQcuI9l90lTLui83bcVIAU=)
                          6: ECR02Lvma0Akqx8_eko_IQ3lvNk.roa (hash: WYbPrDTPpGPZPcdOFkDj0vuliDTMuVhh8dLndPv7htw=)
                          7: KUG1dAS56WFyM7HpXaZJm_9NZcI.roa (hash: bDHk7s2ypHa/VmIhy+huenZ6Yha/61UKd4WW960McEc=)
                          8: NIP6OMbGVO_LoBDEsbJ6LixxNnc.roa (hash: ZLVjxa/g6JD46/uf8XHrDkESKrByzEppqfl3vJn4wSg=)
                          9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
                          10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
                          11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
                          12: f0fB3ZCLspEHf4xo9ont5Ruj-yU.roa (hash: s3KQRvgs0uMJaKxlqnyZSS+058EdiVidz4VTBoWLKeU=)
                          13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: 0jTAZp6ZNPscKQ+k5csbPH56cJxhOj2nEsmnK6H1Wro=)
                          14: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
                          15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
                          16: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
                          17: yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa (hash: 1r231ZIpUKsAJqSZVFd8j4Zxh9itylhnPaX/Hsb0udk=)
                          18: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
                          19: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:11:6f:c9:7b:74:39:30:46:43:d7:e8:6c:0b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Sep 21 15:01:00 2026 GMT
            Not After : Sep 22 15:01:00 2026 GMT
        Subject: CN=06e91c4c985b1a030df073804a3994945cb6e317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:77:35:4c:4b:78:f7:df:20:7e:8b:60:a2:11:
                    ca:8f:48:74:1e:b2:33:6b:1e:49:14:c4:85:38:f1:
                    48:be:e4:2f:f3:cf:e9:ee:a3:7c:b4:e1:6c:60:54:
                    f6:70:3c:e9:46:9b:f6:26:cd:01:0b:b5:af:4b:f7:
                    38:9a:a6:b0:11:4f:df:c6:f3:fb:e9:01:de:e0:81:
                    24:ff:88:17:2b:82:7b:fe:66:fa:af:2b:2c:81:99:
                    41:46:8f:66:af:08:d0:b2:e5:a8:f1:cc:48:bd:71:
                    6d:35:c6:25:28:16:eb:a1:53:0a:31:98:7c:6e:8a:
                    92:dc:98:09:6a:23:9a:86:3a:4a:d9:70:ea:1c:c9:
                    90:27:c2:e9:b5:2c:8f:a6:e2:d7:6c:e7:ad:6a:06:
                    c8:4a:b7:d2:54:e7:ef:27:ca:da:42:b6:90:90:8e:
                    1e:98:c1:3f:09:10:b8:59:ba:84:f2:2f:dc:4e:19:
                    24:1d:49:b0:f8:e4:15:1b:60:74:62:f4:63:11:40:
                    d8:e5:38:13:a7:16:3b:4c:99:c0:96:eb:b6:22:b3:
                    64:01:5b:e3:bd:0e:97:84:06:f9:e3:1f:62:97:67:
                    73:b5:34:cc:16:ef:c8:cc:b2:b6:6b:69:6e:e5:77:
                    bb:32:e3:c7:30:ee:59:75:ff:b1:6b:b5:13:c3:ec:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E9:1C:4C:98:5B:1A:03:0D:F0:73:80:4A:39:94:94:5C:B6:E3:17
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f2:b1:9d:d1:3e:da:df:52:1a:cc:d4:5d:fb:fb:67:ec:37:
         98:db:59:3c:b2:11:04:5e:3b:98:9b:85:fb:bd:0b:d3:56:98:
         e9:6d:66:78:af:f1:67:9a:1b:01:2e:59:c9:b9:30:b6:69:67:
         83:ae:82:5b:ad:9a:22:61:62:5a:b4:ac:b7:01:69:3c:57:bb:
         23:3c:42:86:39:83:eb:ed:41:61:31:76:92:10:85:8e:55:64:
         2d:78:b6:e8:b5:98:6a:60:7f:f2:41:27:49:25:04:6e:28:89:
         5f:b2:95:98:b9:e8:d9:d0:ed:14:d6:a0:2a:5d:39:3d:d1:c4:
         54:d8:af:ea:ab:37:7f:0a:33:c5:27:23:dc:b2:9f:5f:30:23:
         3c:bd:9d:2b:b3:58:04:f8:fc:27:8d:80:28:52:c4:f1:cd:07:
         a7:30:40:47:7e:2d:1b:43:ec:08:a9:c7:37:72:33:b6:48:ad:
         c0:db:da:8f:93:ef:10:e1:85:f0:98:87:3e:4b:91:0d:1f:3a:
         f9:ec:13:bb:0d:62:0d:90:a4:c9:d2:61:b3:55:89:85:0b:c4:
         12:42:6a:88:d4:c5:a1:1f:ee:e4:0b:03:52:0f:21:2c:c2:fa:
         6b:71:d2:8d:4d:5a:f0:97:05:fe:af:a5:04:c3:2d:6f:3b:46:
         32:da:3a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:23:40 2026 by rpki-client