Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File:                     KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier:          RCHnoatfmSGREUJMYzw3fzoUDZyoP+Fatm1Ai2Hmcu0=
Subject key identifier:   0F:D5:39:0C:CB:AA:25:19:FD:E7:6B:D2:6C:1A:E3:5E:6F:A2:A8:17
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer:       /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial:       019F96C9D7ED4E85955B1D9E4D02D7A16740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number:          10F2
Signing time:             Sat 25 Jul 2026 01:00:37 +0000
Manifest this update:     Sat 25 Jul 2026 01:00:37 +0000
Manifest next update:     Sun 26 Jul 2026 01:00:37 +0000
Files and hashes:         1: 15UE9HDgWyp_cAsmKQd04BSa6H4.roa (hash: pIxWzOfjFzWdadGYH0vQMpRvkDryxRhDbvZeh4lLEUw=)
                          2: GcuCBFhhPLtm6AWump2_50RkipM.roa (hash: AN10LtfSDckqwD3VaI/98tkLVo8/t79z+my+6bUMJos=)
                          3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: 9YS5i7kVePoeuAja3zMaHfaAD8pJrXd5aRfPKfxjsvQ=)
                          4: bs5yH2megPEoLiq-1Ee8Z68_g6s.roa (hash: bWsVIEeX18Zj1B9Yp3oHbkNqexSpprAqTGKtlbcwk7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:c9:d7:ed:4e:85:95:5b:1d:9e:4d:02:d7:a1:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
        Validity
            Not Before: Jul 25 01:00:37 2026 GMT
            Not After : Jul 26 01:00:37 2026 GMT
        Subject: CN=0fd5390ccbaa2519fde76bd26c1ae35e6fa2a817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:ce:5e:91:f9:40:8d:e2:dd:07:70:7e:06:
                    a4:69:99:02:95:29:49:f5:22:4a:7c:cd:ab:a5:59:
                    5f:59:17:60:be:1d:3a:93:c8:62:f8:d4:4d:b6:67:
                    ec:3b:d2:3c:b8:b4:5c:6c:57:3c:c5:e3:dd:73:71:
                    91:2b:1e:85:f4:bf:56:7d:44:19:fa:c6:61:f6:ed:
                    d0:1b:0b:2f:85:af:ae:71:9c:dc:61:79:e6:77:cd:
                    9e:17:f6:a0:7c:30:9f:d5:4f:0b:56:bf:a9:a9:09:
                    64:f1:ab:55:4b:51:c0:c4:d6:09:8b:46:6c:18:3c:
                    f2:ce:1d:9d:ce:8c:1a:db:e0:fa:d9:84:5e:50:81:
                    dc:2b:c7:4a:66:0c:2c:d9:a9:99:c2:8b:28:79:32:
                    b0:53:fd:42:23:e6:74:67:05:4f:db:f0:79:2a:00:
                    43:7c:67:09:15:6b:a8:7b:7e:23:23:7c:ad:2e:53:
                    74:b2:20:cf:e2:5e:fd:7f:a9:1c:76:53:c0:7a:92:
                    4a:6e:e1:b5:67:e3:9b:e2:27:0b:1b:ab:a0:96:66:
                    63:b1:af:15:40:c4:3e:33:ce:03:66:61:27:02:cf:
                    4b:33:a7:52:19:80:6d:69:a2:8c:97:4f:81:00:86:
                    6d:20:1f:b1:f2:54:98:ec:d9:34:54:9e:47:ca:76:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D5:39:0C:CB:AA:25:19:FD:E7:6B:D2:6C:1A:E3:5E:6F:A2:A8:17
            X509v3 Authority Key Identifier:
                keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:bd:4f:9b:d1:21:08:5a:ab:7a:cd:1c:78:7c:90:e9:fb:85:
         b7:1a:e6:a0:6b:7a:ac:eb:a3:d4:24:88:f6:ed:a6:aa:aa:4b:
         15:66:52:5b:3e:ce:eb:92:fe:16:4c:b0:55:df:4e:fc:29:99:
         46:df:c1:3d:bf:30:45:3b:8c:c2:f5:79:df:3f:36:12:eb:e1:
         8d:27:ec:69:45:59:f5:27:1b:11:f8:42:f1:d0:3b:50:44:bf:
         a9:c6:24:f2:02:5c:23:64:cd:11:7d:f2:f5:59:41:a2:59:79:
         64:4b:63:29:9e:24:ef:1a:26:02:a5:45:7a:a0:4f:80:b7:9f:
         4f:f9:b1:e9:d7:c8:31:af:46:a2:ec:38:ec:fc:31:76:01:24:
         c6:69:bc:e6:95:0f:a2:20:08:9a:2e:07:c8:68:0d:f0:c2:ce:
         95:85:81:1c:e2:6e:30:2f:da:7a:60:2e:02:00:5a:f2:87:24:
         e2:09:16:d0:0e:42:7c:2b:92:9e:ab:17:70:06:97:64:c6:01:
         f0:f7:18:f5:2e:e9:ab:f6:c8:2a:e1:a0:af:61:d8:ee:60:8c:
         15:51:03:7a:9d:8c:18:36:be:67:7a:06:ed:3d:a5:f8:db:d6:
         7c:00:ea:88:ef:82:77:b8:e3:11:0d:f7:c1:50:4b:93:4f:77:
         30:a7:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:46:36 2026 by rpki-client