Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File:                     k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier:          GPgwyDKm2xe71jhhXv63QLKJyRMa6NmuSAbYbSbnTBI=
Subject key identifier:   F1:89:60:3E:C1:FC:65:39:54:C1:17:27:19:1C:B5:E6:42:6B:53:C0
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer:       /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial:       019F916C95C44146014456ACCFE434BA2102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number:          142C
Signing time:             Fri 24 Jul 2026 00:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:40 +0000
Files and hashes:         1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
                          2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: vYqfq4ucMsT73tr9t8GRNOX8CTYFd2jZz86J1vVjHpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:95:c4:41:46:01:44:56:ac:cf:e4:34:ba:21:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
        Validity
            Not Before: Jul 24 00:00:40 2026 GMT
            Not After : Jul 25 00:00:40 2026 GMT
        Subject: CN=f189603ec1fc653954c11727191cb5e6426b53c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:60:00:cc:eb:2a:ef:f1:a0:6a:26:44:c1:
                    b6:50:84:05:13:85:1d:33:c7:73:dd:b2:f7:3a:6d:
                    f8:2d:30:df:bb:af:64:c2:62:e6:af:9a:98:22:9f:
                    89:5f:89:47:e4:b8:ea:0f:ea:75:93:78:4e:f4:fc:
                    2b:dd:2e:47:89:fd:98:77:80:35:d1:9f:fd:c7:5a:
                    00:9d:56:bf:20:b7:85:43:0e:e1:23:a4:f4:29:1f:
                    5f:94:34:09:0d:6c:50:d0:6a:f2:db:3e:e7:62:c8:
                    0c:3d:7f:e1:52:1a:71:91:a0:02:47:4d:64:1d:1c:
                    80:c9:27:19:31:0e:27:c2:34:1d:19:2f:7f:ac:8a:
                    c7:42:66:e4:ce:ce:d7:d4:7e:45:3d:dd:9d:d3:8c:
                    ad:03:1f:16:e7:be:b1:57:c5:b4:89:03:fb:fb:50:
                    07:4d:8a:bb:92:21:35:95:ec:ec:e8:18:85:2a:df:
                    19:2b:67:ba:25:a4:4a:28:63:48:52:b9:89:83:01:
                    1f:65:28:2e:2c:09:56:24:8f:41:c4:7a:12:df:05:
                    d8:ac:f2:89:5a:16:7d:2a:76:d1:da:77:7b:89:8d:
                    f9:58:5c:69:5e:16:ab:66:d0:58:69:84:6a:7f:39:
                    f5:dd:e0:20:97:ad:7e:c4:cb:e6:e8:88:66:c5:e9:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:89:60:3E:C1:FC:65:39:54:C1:17:27:19:1C:B5:E6:42:6B:53:C0
            X509v3 Authority Key Identifier:
                keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:64:d3:05:a4:9d:81:a7:9b:52:7c:8c:d8:27:8e:d6:14:44:
         14:c1:f8:aa:b9:f6:c7:a5:a0:1f:75:c4:11:5f:30:c0:2e:4f:
         cc:1d:77:d0:72:80:cb:36:fb:4b:37:f9:cb:20:da:4f:da:bd:
         71:89:92:ba:56:83:9f:d8:bf:18:af:61:2d:cf:f7:cd:0b:4c:
         67:62:43:93:db:ea:d2:ee:78:fa:c0:d1:95:ee:ac:1c:38:9d:
         66:84:a7:85:36:45:ab:d1:06:0e:0c:b0:59:76:e9:7e:04:da:
         38:7b:83:3c:f4:28:a4:ca:63:57:c3:0f:c6:04:f1:50:68:ff:
         d7:e3:36:5f:80:b7:ef:38:50:e4:9e:95:b1:76:3c:82:8d:1c:
         df:ce:57:a4:57:c1:0b:d8:c7:f8:95:a2:e2:5f:73:7f:7f:7c:
         e3:9c:28:0b:84:d8:8c:66:a4:c5:9e:49:e3:db:2d:bc:0b:6d:
         53:e7:f3:e6:cf:93:81:b7:d0:51:90:50:d9:5c:f6:9c:f1:37:
         2d:06:62:9c:1c:f1:3d:ea:ba:46:d2:8f:d3:19:f1:07:af:9f:
         b4:38:ad:07:7e:ca:2b:04:af:48:85:ad:ec:ca:1a:be:09:91:
         d3:38:79:7e:98:e9:dd:30:cd:62:d3:94:a1:f2:60:89:d8:8f:
         8f:af:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:08 2026 by rpki-client