Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File:                     kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier:          oBCYDHkE7QTpqwEPbOMZgVhNxggThCGNZYVoyGPVuzI=
Subject key identifier:   4D:D7:62:C2:7C:48:77:AF:B9:D2:1F:49:ED:0D:B3:A9:A9:C1:BF:FB
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer:       /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial:       01A0D2003453C0EDA8AC09FBE412290307AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number:          0AB9
Signing time:             Thu 24 Sep 2026 06:00:23 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:23 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:23 +0000
Files and hashes:         1: MXA3c8QX3g7YwiQOnrLTeGWh5fs.roa (hash: E7jF1me4KBNOx1U7XGJgq5UdFci6SFszrBrpba8pjPc=)
                          2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: Q9p1SzvCaCs/ft1N3c4nJ0Jd/snjVqnlABn7K3FeCNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:34:53:c0:ed:a8:ac:09:fb:e4:12:29:03:07:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
        Validity
            Not Before: Sep 24 06:00:23 2026 GMT
            Not After : Sep 25 06:00:23 2026 GMT
        Subject: CN=4dd762c27c4877afb9d21f49ed0db3a9a9c1bffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:81:07:38:cc:85:ec:f9:e8:fe:d6:f3:5a:
                    a7:57:1f:07:26:a1:65:bb:a2:f1:81:1b:a4:0d:28:
                    f1:60:d0:ca:70:91:4e:4c:6a:f2:17:5a:9a:74:1d:
                    78:a3:8c:c0:6f:be:0e:ab:34:3c:df:03:2a:02:93:
                    57:78:86:6d:34:90:61:d3:12:48:57:36:49:2d:53:
                    09:a5:3e:39:20:62:0a:83:02:3b:42:3a:32:fd:8b:
                    92:76:93:be:06:3d:32:97:c1:70:fe:84:56:84:ae:
                    78:e6:ec:2e:38:aa:42:ef:73:e4:20:a5:22:5f:aa:
                    c5:32:a7:ca:af:ed:90:10:c4:11:f8:49:c9:fd:4b:
                    ca:54:94:2e:f1:53:8b:9f:02:20:4b:b2:26:ef:fc:
                    45:99:61:ca:eb:c0:ac:f7:fd:03:de:2a:21:72:72:
                    d5:93:fa:52:0f:36:3c:d2:1b:30:7b:38:35:1e:f3:
                    e3:e6:9f:f8:1f:51:55:57:4a:23:6e:22:0e:27:f6:
                    ec:6a:c4:4d:6e:10:6f:9d:13:52:4b:c2:01:61:d9:
                    ac:f3:25:3f:56:72:d1:88:a2:ef:5d:ce:56:7e:d0:
                    8e:7b:a8:32:93:11:0c:d3:a5:d3:0a:9f:67:55:8f:
                    a7:b2:e2:0c:8d:3c:45:dd:73:a8:b5:b0:e5:eb:2c:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D7:62:C2:7C:48:77:AF:B9:D2:1F:49:ED:0D:B3:A9:A9:C1:BF:FB
            X509v3 Authority Key Identifier:
                keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:d3:cf:ec:d9:16:59:ba:56:14:c5:bd:55:ce:22:fb:cc:
         7a:ef:7d:66:37:7e:dc:c3:c4:ee:36:6c:46:c0:04:20:48:8a:
         47:ed:80:78:a5:03:f8:9d:a1:28:1a:56:4d:d6:df:9f:47:6b:
         5f:c0:0e:97:71:c9:c6:22:ec:54:98:0f:12:c3:f6:d2:d4:ff:
         9f:7e:9c:0e:d8:0e:12:3a:91:a4:e6:8a:32:ee:46:89:d5:0d:
         96:5f:12:35:d3:6c:e1:bd:50:fa:98:d3:59:a5:9d:d6:0d:2e:
         6d:81:58:72:b1:0e:7f:60:c5:53:e7:2a:6c:e6:f0:81:68:ac:
         a5:09:97:23:c6:9d:ee:90:b4:c4:c1:bb:8c:82:99:bf:57:76:
         6d:38:2a:60:da:01:70:13:3e:5a:17:2e:9e:5d:e4:a6:be:d1:
         09:48:59:5b:ba:99:0c:48:8c:95:ae:44:0a:84:71:42:d3:55:
         12:f7:27:f8:18:6c:61:07:cb:4e:c6:f2:ce:aa:6d:0d:35:7a:
         86:5f:b5:a6:9d:bb:23:e2:63:22:ba:8f:cf:4d:31:b1:9f:53:
         13:81:c3:17:75:9f:1a:88:68:f8:ec:c2:63:11:10:f9:ec:ab:
         88:1e:1b:32:0e:83:d8:9a:bd:c2:19:ae:78:9c:99:38:20:1e:
         92:d3:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:07:18 2026 by rpki-client