Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File:                     kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier:          8HPl1qJaTna8qZYx4OA53XagH3Z1id6ZwVhXXb6MIIU=
Subject key identifier:   6D:53:CA:D0:A9:45:DC:04:82:74:71:34:DB:AF:A6:06:EF:02:10:8E
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer:       /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial:       019F94DBF602E895304DA8E9C7C12BC3999F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number:          18A1
Signing time:             Fri 24 Jul 2026 16:01:11 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:11 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:11 +0000
Files and hashes:         1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
                          2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: 1WyVjMUuNuhy8Qvm8mtx8irAQsR00uxP9aWuss5RhmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:f6:02:e8:95:30:4d:a8:e9:c7:c1:2b:c3:99:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
        Validity
            Not Before: Jul 24 16:01:11 2026 GMT
            Not After : Jul 25 16:01:11 2026 GMT
        Subject: CN=6d53cad0a945dc0482747134dbafa606ef02108e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b0:37:e3:42:8c:e3:eb:1a:01:f9:ac:1c:a2:
                    bc:b4:50:02:d0:46:a2:29:76:76:1d:65:e7:8b:10:
                    91:58:e5:99:61:3e:05:b0:6c:b2:f1:c6:ca:14:27:
                    03:2e:89:f7:a6:73:48:4f:2b:d3:f1:75:c0:cf:0d:
                    4e:82:90:30:88:a7:e6:c1:ea:99:02:5a:ae:97:e5:
                    7a:5a:91:00:b9:ca:db:0a:08:fd:af:d2:7a:ad:9b:
                    39:be:0a:5e:9e:19:1a:3e:ee:64:d6:eb:68:0b:a4:
                    64:70:c4:f4:f1:75:62:b6:b1:12:47:42:79:91:8d:
                    80:ef:4c:67:52:e3:58:8e:25:ea:cb:0c:cf:92:93:
                    cc:32:cf:73:4d:76:f2:1b:5c:e2:a9:c0:21:08:73:
                    f5:09:fc:62:8e:ea:8c:97:d3:fa:01:d5:a0:b7:fe:
                    09:55:4c:47:dd:1c:0b:ef:89:47:9d:04:cc:a0:25:
                    cd:04:23:06:40:2c:4b:bf:33:44:cf:64:a4:4b:55:
                    8c:b4:8b:ab:0b:7f:3e:5f:4d:f7:ab:dc:77:a9:3c:
                    50:15:9b:dd:10:01:03:aa:c9:1a:68:00:73:f5:f8:
                    da:ea:58:87:86:0f:c8:67:5e:ad:f7:07:b9:99:9d:
                    af:51:23:5c:d7:68:12:f5:77:76:09:f7:ff:e0:24:
                    c8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:53:CA:D0:A9:45:DC:04:82:74:71:34:DB:AF:A6:06:EF:02:10:8E
            X509v3 Authority Key Identifier:
                keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:39:98:f3:9d:b9:cd:ac:1e:a0:f9:ac:0f:be:e7:43:b0:ee:
         0a:42:4f:77:a6:d6:ed:cd:47:63:09:c3:b9:46:56:46:b7:9f:
         c1:58:b6:a7:ff:90:1f:3b:69:7c:1a:ea:1a:72:b5:c0:6b:3b:
         be:93:03:8b:cf:63:84:77:65:b4:b8:c1:24:d0:37:c4:b7:51:
         74:12:28:bf:92:fb:c2:ab:75:3a:b2:99:a8:a3:4b:0b:57:cf:
         4e:48:54:1d:ad:2d:10:2d:f3:a7:27:c5:fd:94:2b:2c:53:95:
         b2:01:35:46:46:38:fa:2d:b7:7a:aa:0f:69:0d:36:42:ed:55:
         40:8c:34:ef:f8:a6:27:d2:01:4b:5e:93:bf:90:7e:b1:1a:65:
         e0:e7:31:b1:2d:fd:f3:bf:6e:57:01:9d:d8:13:00:24:bd:b2:
         6a:25:d2:7e:da:28:a0:a3:63:18:a7:ba:6d:65:e2:f0:50:a6:
         ae:6a:49:fb:91:60:59:19:db:ea:fc:0a:78:e9:17:9f:3b:51:
         a6:75:d6:04:81:72:2f:20:89:54:03:51:ad:53:63:35:18:a3:
         03:ca:17:08:9b:ce:8c:ed:75:d1:28:bf:f9:e7:76:7d:0f:3e:
         c9:e0:63:14:13:e7:38:21:f7:6c:e0:21:cb:95:67:bd:eb:39:
         d4:7a:e8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:06 2026 by rpki-client