Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File:                     k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier:          xqkXv46Xxgj3wUUg/rZa1AAj8EHMvPnX4qN4WQt/93Q=
Subject key identifier:   ED:66:D8:2B:BC:EC:DE:53:84:84:E1:1A:68:C9:A4:FC:57:B4:2E:5D
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer:       /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial:       01A12F58052F4C46B579EA5DEA6A1B5A2BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number:          18EC
Signing time:             Mon 12 Oct 2026 09:00:59 +0000
Manifest this update:     Mon 12 Oct 2026 09:00:59 +0000
Manifest next update:     Tue 13 Oct 2026 09:00:59 +0000
Files and hashes:         1: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: EnLmoKudfUJpbAvXxFzt8F/jWg4Egq+jnUtA4GfaIZ0=)
                          2: xrChCZKPpUH_V3yyUorXAC7-wuI.roa (hash: mu02wWY4fhbPfdL9W27X+rqqcQR4ghwCDLbVsERFcxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:58:05:2f:4c:46:b5:79:ea:5d:ea:6a:1b:5a:2b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
        Validity
            Not Before: Oct 12 09:00:59 2026 GMT
            Not After : Oct 13 09:00:59 2026 GMT
        Subject: CN=ed66d82bbcecde538484e11a68c9a4fc57b42e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:60:e9:a5:e6:f7:1f:f9:2a:5e:33:10:ef:68:
                    04:d3:5e:e0:06:9a:36:8f:7c:89:3e:f0:1a:f0:c9:
                    0b:48:75:f3:30:fe:09:ec:b5:79:09:25:66:be:0f:
                    d1:69:4f:a5:7c:02:9d:96:23:f8:d3:ba:62:6d:5c:
                    24:48:18:3f:07:a5:93:3f:15:01:7d:e5:2c:2f:98:
                    3d:a2:ff:4f:8a:fc:da:81:ec:79:2b:55:57:4d:87:
                    81:3e:88:3c:d2:1f:37:2d:51:75:2c:58:6b:6b:1e:
                    e2:5c:7d:37:a3:a4:8c:31:0a:b1:df:61:75:e8:9e:
                    ed:10:fa:75:fb:ba:e1:92:2e:10:21:cf:0c:71:cf:
                    a2:bd:ec:3e:79:5a:92:ad:a5:15:4c:29:2b:6f:fd:
                    c9:67:a6:2c:a0:29:39:96:df:27:8b:0c:a6:4b:41:
                    6b:5d:cb:29:21:dd:7c:45:38:9c:26:c7:d1:57:85:
                    28:49:11:73:f4:6a:97:2c:ba:b1:05:10:f3:3c:0d:
                    6b:de:64:cb:23:ac:fb:21:be:81:db:c1:91:dc:05:
                    d7:bc:79:11:47:f7:14:45:3d:20:9a:07:a3:b3:60:
                    2e:44:46:18:16:bf:05:82:4f:ad:ba:3e:82:1b:2d:
                    31:d9:f0:7c:0c:c6:e2:ba:cc:9e:3a:3d:6c:cb:83:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:66:D8:2B:BC:EC:DE:53:84:84:E1:1A:68:C9:A4:FC:57:B4:2E:5D
            X509v3 Authority Key Identifier:
                keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:9a:3a:65:3e:c5:41:08:db:52:45:f9:51:d0:a4:d9:2c:91:
         05:19:8e:43:d4:bd:7c:31:e5:1a:4f:a2:80:e6:cd:cb:be:8d:
         1f:77:e7:cc:47:de:44:34:ea:b5:68:03:d9:9f:0c:0a:72:7d:
         51:06:cc:d1:c3:ae:49:1b:3e:71:7b:c6:7a:03:84:ac:f6:45:
         34:e8:45:64:b1:2f:00:67:9f:20:0f:78:c5:5e:bb:14:dd:e0:
         42:8f:8c:cc:fe:47:9c:59:07:9c:11:ab:66:48:e0:f3:33:3c:
         f0:38:66:f7:b1:50:74:b8:bb:76:1f:7f:1e:8f:90:cb:f2:e1:
         17:8d:e8:68:22:8b:d6:5b:39:ee:cf:0d:97:ab:25:2f:5a:71:
         7b:87:8f:de:8a:d8:c7:db:06:ed:a8:6e:d2:ae:6a:4c:61:40:
         8c:1d:cd:a3:91:c3:83:31:75:d0:88:d0:1d:fa:0a:89:64:7d:
         d8:91:7e:b2:0b:7d:f6:33:02:d5:eb:f0:a2:b2:f9:ee:61:54:
         4c:9f:27:24:b9:24:ae:93:86:52:9a:6e:e5:1b:17:2b:c9:67:
         1c:43:af:c4:ec:ba:51:a6:55:58:2d:d2:19:77:82:5c:9f:f4:
         da:70:8b:cd:e5:fd:67:16:1a:2f:32:cf:2e:1c:a8:30:70:4d:
         ac:ef:8f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:33:42 2026 by rpki-client