Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File:                     kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier:          j9iwi5Gtx5by4mDzVM74grRTZZhCMCk1vJ4TnrxIv2k=
Subject key identifier:   16:9B:EB:D0:CD:0C:FB:6E:D1:2D:66:39:4A:F9:EA:82:89:11:E8:FD
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer:       /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial:       019F935B59BEBEC8F1431C8B2DAC5011B3B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 09:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:05 +0000
Files and hashes:         1: SggDrxFFsWWs12xC5aQkzP-tlSU.roa (hash: 9cLRIhlE0/G5tYsZFx8+yzpMIrF34vwAUkKOhMbaUZc=)
                          2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: iP9uORTksewR9Z/BrOU5gahWpMN/3Nos3mc1/m5AUtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:59:be:be:c8:f1:43:1c:8b:2d:ac:50:11:b3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
        Validity
            Not Before: Jul 24 09:01:05 2026 GMT
            Not After : Jul 25 09:01:05 2026 GMT
        Subject: CN=169bebd0cd0cfb6ed12d66394af9ea828911e8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:d6:3b:5d:d2:55:94:c5:57:c3:98:2b:30:
                    87:fc:66:50:0b:16:32:a3:d5:9d:e0:e4:29:62:07:
                    d0:18:6a:0a:b2:ed:51:e2:f2:0d:74:72:bc:ac:87:
                    9e:23:b0:74:5b:a9:53:d1:0c:a7:61:95:46:cf:9d:
                    fd:c5:e4:d2:0c:9e:c4:ac:d5:b0:35:cb:69:48:0e:
                    45:4b:48:52:f8:88:59:42:fa:24:c7:3d:e9:eb:c8:
                    bd:41:b9:ef:3f:6e:d7:11:9e:68:60:61:7a:b9:4d:
                    4a:e4:93:81:a9:30:e0:fd:07:50:ae:34:9c:a2:30:
                    da:d0:b0:50:40:ad:3d:33:9e:a4:8d:06:12:e1:23:
                    f8:a7:78:aa:da:b7:e9:5e:1a:ad:ed:d2:8b:15:4f:
                    48:7d:28:88:86:ba:31:67:ef:4c:0a:3a:e2:20:75:
                    43:92:24:3b:aa:56:ff:fd:95:43:1f:43:e1:e3:0b:
                    81:f8:6c:e9:db:bb:b7:1e:8e:ca:ff:88:22:4a:31:
                    78:a0:66:5b:1b:f6:7c:c8:80:98:03:cb:7e:47:bd:
                    c5:62:c4:db:2d:19:f9:c4:a3:43:6e:3e:16:ac:52:
                    51:f1:ff:23:65:cd:56:67:85:eb:2b:28:17:5d:68:
                    47:79:38:8c:05:30:85:fc:e2:dd:e9:71:1a:85:6c:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9B:EB:D0:CD:0C:FB:6E:D1:2D:66:39:4A:F9:EA:82:89:11:E8:FD
            X509v3 Authority Key Identifier:
                keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2e:98:73:60:0a:4a:16:20:17:d6:e0:a9:cd:f7:1d:56:62:
         2b:1f:97:e3:eb:cf:61:27:59:30:f1:89:1e:a3:0d:94:e2:18:
         14:39:ad:75:4c:58:7f:15:7c:eb:39:86:62:59:48:4f:f3:7c:
         6d:be:22:ac:f2:37:3f:18:b0:55:c8:b2:04:0c:14:ed:49:55:
         97:75:6c:a4:81:bf:c2:9b:4f:28:5d:37:82:3c:07:8c:f9:0e:
         49:84:29:ff:33:33:09:06:14:4d:93:ec:9b:5a:7a:bc:3a:da:
         d0:bb:d7:24:75:26:ae:fc:c0:12:b9:70:c4:49:24:b1:3e:ce:
         04:86:c5:16:2c:76:56:47:4c:d7:e1:5f:05:b8:fe:95:b4:6c:
         5e:9c:90:9f:81:49:c1:3d:02:f0:15:f1:1f:dd:24:42:59:9a:
         36:ff:4d:06:fc:bc:42:94:e9:46:76:b3:5f:8d:e3:ef:43:19:
         e1:47:32:f6:da:94:c2:c2:54:55:f7:13:be:4b:2d:d2:d1:e4:
         47:4e:55:26:4e:c4:0a:1e:41:69:f4:53:ef:11:b8:fc:44:cc:
         44:90:b8:24:cc:b4:5d:20:ec:79:60:e3:c5:2e:4d:6f:4f:91:
         0a:b2:7e:28:c2:53:23:36:e2:4f:ce:e5:c4:88:94:17:f5:25:
         6f:fb:a1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:04 2026 by rpki-client