Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File:                     klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier:          uIR8DkL8uBnbBy4thMVmCcfMTiFia+Uh9SoKG8sxTHM=
Subject key identifier:   F8:56:65:A4:2F:8B:94:F8:28:DE:36:83:BD:B4:DE:E9:EC:26:45:FA
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer:       /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial:       019F8EA28427F988A74E47C9BDB39A0C9B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 11:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:43 +0000
Files and hashes:         1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
                          2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
                          3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
                          4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: dGyVweqltJfsgUu+KNLrHDJQ990lGMy6kOPowpNJ8O4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:84:27:f9:88:a7:4e:47:c9:bd:b3:9a:0c:9b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
        Validity
            Not Before: Jul 23 11:00:43 2026 GMT
            Not After : Jul 24 11:00:43 2026 GMT
        Subject: CN=f85665a42f8b94f828de3683bdb4dee9ec2645fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8d:58:e4:f8:05:0f:06:26:ac:b1:4a:f2:d4:
                    58:e8:23:aa:f9:f0:f7:ab:d7:52:c0:f0:6a:36:d5:
                    ff:b8:88:7e:01:22:4d:d9:5d:ff:bb:a1:11:0c:c5:
                    fe:88:2d:1d:6d:ce:e9:53:45:b3:f2:45:e0:77:61:
                    a5:7d:d9:ab:fa:34:b7:72:3c:04:1e:50:46:91:3c:
                    b8:22:f5:6a:e7:0a:db:3d:9c:35:29:90:f5:4b:c1:
                    b0:a5:45:6b:9b:91:9e:23:ed:d0:9f:2f:ca:75:6c:
                    91:7f:e1:fc:b8:8e:4a:cf:9f:b9:8e:bb:7e:5b:c8:
                    49:92:c3:97:32:55:e7:11:7d:9a:1f:31:75:69:ce:
                    8f:1e:84:3c:3f:43:36:0d:d6:1f:8b:60:31:20:28:
                    94:05:a9:a8:2a:22:a0:fd:a4:fc:ac:cd:25:91:13:
                    fd:13:b4:4e:3a:47:a1:77:3a:d5:3f:74:49:f3:ea:
                    8f:e9:ae:19:cd:b9:9e:f1:e8:c0:50:d4:1f:09:5b:
                    09:51:5a:a1:f1:ec:4b:0f:04:99:de:07:28:7e:df:
                    3c:32:b1:cf:31:26:3e:3e:a3:61:3f:04:ac:06:be:
                    94:b7:47:b3:ce:d8:f8:2a:84:88:5d:7d:67:1b:35:
                    09:c3:96:90:a2:49:68:5b:a8:bb:77:74:a8:b5:c8:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:56:65:A4:2F:8B:94:F8:28:DE:36:83:BD:B4:DE:E9:EC:26:45:FA
            X509v3 Authority Key Identifier:
                keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:68:c7:15:a5:3f:65:ea:fe:41:c1:d6:98:f8:cc:ba:cc:1d:
         77:bf:27:39:25:31:07:8b:59:e5:d0:30:54:46:7b:4d:a8:2d:
         ca:49:f6:0a:f6:a3:73:5c:fa:6d:3f:2c:fa:48:2c:ef:6d:35:
         b0:81:c9:89:cc:9b:86:b2:af:d0:a1:1b:a0:97:f1:00:6b:32:
         14:1c:7e:f8:e5:c9:36:39:80:c0:ef:50:55:f0:78:e6:66:d7:
         57:c4:ea:7a:6c:15:86:ba:c5:a1:f0:bb:ac:ea:b8:bc:58:c1:
         4b:dc:76:ac:67:16:bf:1a:73:0f:b7:73:38:86:8f:c8:15:2d:
         b3:6a:9f:37:65:22:ef:f7:e5:f6:12:3d:7c:f1:5d:44:bb:b6:
         34:82:b1:39:aa:4a:bf:93:d3:85:a5:42:5d:16:60:f4:e8:85:
         07:ce:d1:9d:7d:cb:30:95:29:d9:ed:a8:46:ca:be:31:f5:df:
         a6:95:01:5e:3a:c1:a8:f1:42:40:b3:2f:de:49:0a:c2:67:c9:
         33:c0:8e:59:ab:12:a4:6b:09:6c:ff:bb:4a:53:c2:56:e6:38:
         0e:58:d9:c0:9c:05:7a:08:96:4b:0b:2f:92:8b:42:cf:68:69:
         46:19:97:1c:66:60:50:f3:75:96:d2:0e:3d:67:8b:04:da:8a:
         4c:6d:6f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:34 2026 by rpki-client