Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File:                     KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier:          XTFPqvPcElXnWWo9+qKR+d1FTiAWP5RGvlP08awPFqQ=
Subject key identifier:   4B:5B:F3:C8:DA:77:A0:E6:2B:BA:48:57:0E:4B:B1:E5:80:B8:B9:C5
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer:       /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial:       019F9022FA483C7A497FCE780FD98199D387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number:          0B67
Signing time:             Thu 23 Jul 2026 18:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:39 +0000
Files and hashes:         1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=)
                          2: C8cw5nbghQi4OUuGqLlmhBWbh3s.roa (hash: ukinZ9+XO0kbm22VodGuo/P5hn91OEClJ3feFpq9ZTY=)
                          3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: gNab+ZSYEi9O1I3AYzArjhjPV4hvGfeK8eL0xZuGuwI=)
                          4: RSPqJer2GxHPRRgn7mg4dhkHOBw.roa (hash: 7i2L3D7sVlNeXVt8GqQE+rm6gyBVSmDTLbXKjTKH2nY=)
                          5: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=)
                          6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=)
                          7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=)
                          8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=)
                          9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:fa:48:3c:7a:49:7f:ce:78:0f:d9:81:99:d3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
        Validity
            Not Before: Jul 23 18:00:39 2026 GMT
            Not After : Jul 24 18:00:39 2026 GMT
        Subject: CN=4b5bf3c8da77a0e62bba48570e4bb1e580b8b9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:84:16:69:db:08:bb:d0:f1:77:65:55:07:
                    57:22:bd:4a:90:0f:b3:4c:9c:09:32:56:d6:56:ad:
                    3c:76:10:14:c3:ab:ca:e4:e7:a1:7b:ac:49:56:af:
                    10:47:69:df:0d:38:53:ac:67:df:74:ed:e5:ae:6b:
                    3c:d7:88:a6:33:0c:ff:0f:24:93:4a:f3:3b:43:c1:
                    29:39:82:22:81:30:05:28:67:d2:f5:24:e6:69:e7:
                    18:19:fc:a7:0f:6a:0d:63:e2:15:5d:e5:22:d4:e3:
                    65:20:44:15:fa:ff:e9:ee:25:ab:e8:a5:4b:84:ae:
                    ea:4e:b4:ca:aa:01:89:b8:c4:f2:ae:ed:c9:f8:42:
                    6b:dd:ce:dc:e0:16:20:b6:6a:61:dd:2e:98:09:d7:
                    f3:da:d1:86:61:7c:d6:e3:af:93:db:92:e0:72:f2:
                    c4:3d:40:68:e8:dc:28:25:83:2a:bd:1a:0b:75:7a:
                    4f:ac:03:96:2b:47:a3:5b:fb:5f:bd:d0:ef:58:9f:
                    6c:83:b3:7d:8a:34:34:0c:b5:36:79:ea:34:aa:93:
                    30:3d:63:99:85:f4:db:dc:17:88:41:db:d9:61:d5:
                    c1:e6:e3:23:83:e6:91:35:d0:f5:86:12:06:47:b6:
                    8c:14:bd:77:93:60:eb:c7:be:b0:b3:b9:82:57:86:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5B:F3:C8:DA:77:A0:E6:2B:BA:48:57:0E:4B:B1:E5:80:B8:B9:C5
            X509v3 Authority Key Identifier:
                keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:29:18:50:61:9c:66:4a:35:2b:58:b8:72:6a:ad:11:24:eb:
         7f:92:86:c0:e4:82:8b:94:23:98:23:89:79:11:c0:1b:03:35:
         28:65:5c:a7:e8:d9:86:f2:61:aa:89:3b:1e:95:3c:c2:23:c5:
         ea:66:0e:ca:ea:c5:fb:54:30:75:15:8d:a1:43:8c:71:11:55:
         61:95:67:35:cb:1b:50:b4:71:10:a8:04:5e:56:aa:5d:4d:d1:
         2c:ac:fe:26:12:d9:31:05:59:9b:ce:96:34:53:66:15:65:dc:
         25:89:12:cb:f2:60:d6:60:8b:bd:6f:98:db:8a:66:c7:b0:76:
         40:df:4c:ad:78:44:e6:1a:90:d1:ba:7b:83:58:99:00:df:79:
         e7:f0:b1:28:ee:d6:0b:1c:6a:d6:bc:fe:2e:06:ac:9b:c0:ea:
         dc:95:cf:9c:84:05:2c:b6:73:14:43:1e:37:82:ba:42:7a:fd:
         03:75:01:af:fe:00:c6:b2:5d:63:9f:14:30:73:61:c7:43:dc:
         62:3a:c6:92:69:79:3f:04:90:c2:14:29:e5:0b:c6:74:4c:88:
         a7:ac:ad:cd:48:fe:96:66:27:a3:0d:8b:8e:33:bc:8d:5d:cc:
         38:c9:f9:e3:61:5b:ad:8a:5f:39:71:e2:2e:85:9b:77:e8:15:
         d7:0d:49:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:06 2026 by rpki-client