Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          Fh4FKyRNK+WA081sUYuu2+MP63gsPvLbG3aDj6R2ENw=
Subject key identifier:   EB:CA:7F:CD:B2:DB:44:E0:B7:2A:6A:4D:13:F3:9F:97:C4:6D:32:1B
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       019F9022C4697A387DB7CE44D39C2EB75F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          19CD
Signing time:             Thu 23 Jul 2026 18:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:25 +0000
Files and hashes:         1: 6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (hash: z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=)
                          2: 8k1WvdzAQ1Go-lpgTPWDZAKZfQE.roa (hash: us5ahjVDdrm7/ofacEwTdXV/iwMapsRRug2V01x/llc=)
                          3: KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa (hash: qRSzgiwPczkOjtugbEXqYuJbcG64mRS3bSrnTP92V5I=)
                          4: Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa (hash: 6rtcBWZHj5iKfuxNemjzbQDA3WB3EhCTz3MwF017Ko8=)
                          5: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: nCbYVIwEj8QwSt2SKA4F/aQCR9kUI12gsf/atFKk1kw=)
                          6: q_--4kminZxQx-8CqaEaNqwj4jE.roa (hash: ryH9qdfaBeMvb/1G2KPwMdilt+m41DaYZGZeqOGsiAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:c4:69:7a:38:7d:b7:ce:44:d3:9c:2e:b7:5f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Jul 23 18:00:25 2026 GMT
            Not After : Jul 24 18:00:25 2026 GMT
        Subject: CN=ebca7fcdb2db44e0b72a6a4d13f39f97c46d321b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:79:ac:f6:eb:6f:18:90:6f:0a:3f:c9:d4:
                    8f:65:be:60:c7:57:0c:14:c5:56:61:eb:cb:4d:db:
                    26:0a:bd:74:8d:fb:b3:f0:3d:10:f4:4c:ad:15:96:
                    48:72:b4:a0:51:c8:35:36:53:74:91:b8:c7:eb:f2:
                    06:e1:3c:9d:56:af:1a:8c:c7:3c:9b:ce:d6:b3:ac:
                    7d:d9:14:23:f2:c4:18:a2:d2:dc:de:e4:ba:b6:1d:
                    c2:76:04:94:9a:f1:5e:6a:c4:02:74:3f:08:b0:e4:
                    b0:c8:75:51:1a:2d:c1:70:d0:72:99:2b:bb:5a:ea:
                    c6:d3:6b:aa:25:3e:95:9a:7e:4f:5e:3d:fd:66:d5:
                    a2:c3:a7:e7:a0:4e:08:2a:bd:bc:4f:7b:1c:03:20:
                    dd:d8:16:d2:4d:36:76:df:38:d4:b4:0f:82:68:96:
                    40:14:c1:b0:14:c8:5b:cc:08:04:2a:72:00:80:6d:
                    b9:a3:54:d1:9b:2c:f6:06:5c:f4:70:a5:ea:67:1e:
                    d8:f4:15:52:85:fd:2b:c7:69:6c:cc:23:4b:e1:6a:
                    f3:42:6d:65:40:4f:4c:56:c9:9a:db:38:d0:0b:c1:
                    39:54:c2:04:30:3b:31:41:99:c8:c1:e7:df:1c:27:
                    76:ec:5d:d9:f3:c6:f7:7d:f0:5f:25:29:94:a5:61:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CA:7F:CD:B2:DB:44:E0:B7:2A:6A:4D:13:F3:9F:97:C4:6D:32:1B
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:52:08:f5:8d:f9:a4:bf:3b:5e:c5:75:35:99:28:33:26:14:
         cc:9a:08:29:bf:18:51:2e:25:91:24:cf:b0:fa:96:c0:bd:b0:
         1f:78:5e:5d:61:43:a0:a5:88:ac:fe:d4:c9:3c:df:3a:3b:40:
         9e:06:f4:70:1a:3f:c5:d5:63:b5:0f:c7:01:91:fc:16:d0:48:
         c7:72:71:f4:c6:28:8b:a6:d5:b7:90:da:66:e5:d8:a0:8d:7c:
         62:04:6b:85:f8:1c:59:8a:e6:a6:bc:cc:08:15:ea:29:a9:a7:
         c2:f7:af:19:c4:96:de:63:0f:37:87:67:8d:ac:2d:a7:25:ed:
         43:cf:d3:40:4c:e1:34:54:7f:d1:a6:6f:23:0b:20:5e:de:83:
         d1:f5:fc:e3:45:c0:58:94:8e:ba:c1:5d:5d:85:b9:90:58:ae:
         5d:d1:f1:e6:1a:9f:3a:55:06:2e:ca:31:55:be:14:8f:65:72:
         27:af:3b:d1:7b:f2:2a:3e:7b:07:90:13:fe:95:af:ce:42:59:
         85:97:72:80:24:16:e4:a3:6c:13:01:5c:dc:50:a8:87:d4:7b:
         8f:0d:dd:fb:8f:55:84:ae:60:e9:b9:65:32:07:80:62:7d:30:
         f0:d2:ad:09:7b:53:ee:7b:17:e6:21:57:72:5b:d7:81:28:e1:
         58:75:03:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:07 2026 by rpki-client