Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File:                     kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier:          B/p6qaYMZ2+ANo8u0OIY50SzqLZLDKdZydzYs7RnS/c=
Subject key identifier:   7E:B2:A7:DE:B4:E6:E0:4C:B3:AE:CA:C2:80:FB:39:A6:C5:D2:CB:03
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer:       /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial:       019F916C729339FDC96D3AF4381348616AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number:          0694
Signing time:             Fri 24 Jul 2026 00:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:31 +0000
Files and hashes:         1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: GZwglsb8gyX11Ii+HEckQepLp5jcCz+Fxsuc/SwAVlw=)
                          2: rOZu6wYLzhNpmg8j69cWttIEmiQ.roa (hash: yuT/NXTQJjp1YdXNP2jjlInGWMr7pc0nxgMJpIJbpWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:72:93:39:fd:c9:6d:3a:f4:38:13:48:61:6a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
        Validity
            Not Before: Jul 24 00:00:31 2026 GMT
            Not After : Jul 25 00:00:31 2026 GMT
        Subject: CN=7eb2a7deb4e6e04cb3aecac280fb39a6c5d2cb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:d9:07:ad:6f:10:e2:9f:cd:92:bf:48:57:
                    4b:d2:7c:ed:75:13:7a:52:8f:26:da:8f:e8:74:76:
                    0c:42:9f:01:10:e5:d2:a3:62:73:8b:61:68:d5:bc:
                    28:26:7d:c9:66:2a:da:6c:6a:b9:a0:c4:33:9f:3d:
                    d9:b2:f5:53:6c:6c:fc:8b:07:1b:e8:b9:28:17:f8:
                    14:20:7f:b0:09:d1:1e:77:ed:6b:80:90:8a:d6:fc:
                    22:14:3c:41:26:7f:ef:4b:af:2d:42:3e:91:f1:2d:
                    e3:6d:61:9e:3d:15:71:ac:22:d0:4b:bb:ac:6c:f8:
                    51:d3:1d:77:ab:64:0d:d8:6e:b3:b6:81:61:49:99:
                    9d:e5:c3:45:98:e6:52:87:77:16:54:c9:2f:c7:64:
                    35:b6:2a:4c:c7:ce:e1:be:1c:79:2b:cf:65:d9:a3:
                    17:e0:79:92:17:65:1a:5f:26:54:39:9d:d0:5e:c6:
                    7b:62:bc:68:df:a1:c9:b8:60:52:cd:5e:aa:cc:15:
                    86:7b:cc:33:a4:2b:3e:b7:76:ba:84:8f:72:a5:21:
                    22:e2:da:53:ef:04:bd:e6:59:7e:aa:30:a1:f1:c7:
                    4c:ae:14:84:80:fb:1a:f3:c3:b5:30:a6:a3:a6:74:
                    3b:97:a0:7a:6b:4f:89:17:50:1b:f1:7a:e5:a2:81:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B2:A7:DE:B4:E6:E0:4C:B3:AE:CA:C2:80:FB:39:A6:C5:D2:CB:03
            X509v3 Authority Key Identifier:
                keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:44:85:d4:61:be:81:f1:83:27:d7:b9:1b:22:4e:49:de:cd:
         69:81:71:a1:12:09:d5:cd:6f:9d:da:8a:66:84:55:f6:dc:dc:
         14:b9:fd:dc:01:31:74:5e:75:9f:54:d9:ae:5b:b9:dd:9d:c5:
         e6:dd:8f:7a:99:93:7a:fa:e7:58:9b:8b:5a:5c:0a:24:fa:60:
         38:c7:9a:12:24:98:67:88:1f:d0:0d:41:41:15:e5:fb:e9:da:
         a2:12:50:50:92:e3:74:84:f7:82:48:90:ab:b5:23:13:f4:0f:
         72:4c:cf:66:a5:e8:c3:20:3f:11:1a:34:52:b2:47:c0:3e:2e:
         75:9d:67:20:4f:28:2b:98:05:c8:27:28:65:61:6d:a1:aa:78:
         13:2f:d4:a9:7d:e4:42:24:e6:0c:15:2d:95:f2:22:20:65:91:
         17:69:56:f5:2f:25:e2:ff:9f:72:47:6a:2f:67:6d:33:fe:57:
         21:a4:0e:38:37:3c:3e:7e:1e:4c:b7:c8:8d:8e:4b:8c:42:6a:
         5d:0f:dd:13:9a:7b:9d:41:c0:82:8e:c5:30:45:25:b4:a2:44:
         ff:38:cd:6a:41:25:d2:3f:45:0e:15:96:21:6c:b2:1c:d4:cd:
         4c:1c:25:37:68:21:20:d7:00:de:5d:4d:96:bb:33:d2:ee:b5:
         71:f4:00:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:48:14 2026 by rpki-client