Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          niK5tHzktLwd3dmw6QzDwyG0D8cRIiL5xGtSHlKGNVw=
Subject key identifier:   25:D2:75:35:CE:A1:F7:51:29:43:BD:E0:4A:59:BD:8D:1F:4F:DF:3C
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       019F94A4C7C16149B709E8BBB2BAACF87E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          1547
Signing time:             Fri 24 Jul 2026 15:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:54 +0000
Files and hashes:         1: EDNpAts-6JeGE5wjiUM5BMSnB9k.roa (hash: URMxngJbXriRE2iOut0YpTm56ViTEGhL3sKLZKHuyJ0=)
                          2: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: cCkfn0JqT5qUCoEP4heC3x7AX5g/Ba+a3+iKfECmjbE=)
                          3: Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa (hash: DDYkbbLPOZouFDJgBa+WHylISlZR4ujlVO/1zXw9mng=)
                          4: UBjaQjSsvCaMWIObSymTDrfellU.roa (hash: FakZBVr4LoPzsh/Z6oDhedet2QWrNOrHB6+ZNqqvw9I=)
                          5: g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa (hash: YP1AJ0q+zSM445DjhCgE/dmdRBL7ryjwtDbdKhvu3Rg=)
                          6: sAk06Tsd-_YR9NQduC3T-piAvWk.roa (hash: xw7/19cXkRCZDOVeEPf+Eoup5YiNyQhWAOUhvYY+IJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:c7:c1:61:49:b7:09:e8:bb:b2:ba:ac:f8:7e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Jul 24 15:00:54 2026 GMT
            Not After : Jul 25 15:00:54 2026 GMT
        Subject: CN=25d27535cea1f7512943bde04a59bd8d1f4fdf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:e2:9e:ea:cd:45:bb:20:af:8f:b9:9a:fb:
                    47:8d:22:a1:dc:84:14:7f:5b:b7:84:47:7d:70:0d:
                    a6:fb:a9:6b:2f:62:c6:17:01:e1:5d:85:15:9f:82:
                    0c:38:8e:31:12:13:e6:d0:b9:7c:e4:ef:36:cb:78:
                    2d:e3:d2:55:65:50:2b:8a:61:59:ec:fd:42:90:5e:
                    38:ea:5d:ff:7a:72:fe:90:21:71:5b:2d:00:75:7c:
                    38:95:1d:1a:03:81:2b:38:5f:3e:7b:3e:7f:9d:9b:
                    fb:e3:41:33:9d:e6:ce:36:40:70:d9:d8:23:1d:e6:
                    1d:14:ad:72:0b:ed:95:4a:ed:2b:0b:f5:26:d6:f2:
                    de:b7:65:94:31:1b:27:18:63:4b:38:fa:d9:ad:83:
                    a2:ea:8b:cb:e6:23:e0:a0:fe:e9:2c:56:9e:c8:0b:
                    31:85:41:d9:53:d5:91:0f:9e:fd:46:db:81:2a:63:
                    1a:4b:a6:01:92:1c:35:ca:fe:d7:43:30:b9:47:42:
                    fd:6f:76:93:9f:24:2c:3b:c8:ff:66:9f:96:62:8e:
                    02:cb:09:4b:42:c9:8c:80:26:7b:99:0c:2d:0a:e6:
                    e3:75:48:59:1d:4e:b9:19:65:0d:48:81:37:a7:e8:
                    b1:b6:7f:07:15:c2:aa:14:f2:10:e7:a1:9a:0f:a3:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D2:75:35:CE:A1:F7:51:29:43:BD:E0:4A:59:BD:8D:1F:4F:DF:3C
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fd:ad:98:6d:13:32:a8:00:10:d9:0a:0f:b9:2d:8a:ac:cd:
         f3:e2:a8:3e:c2:ce:16:28:99:39:57:63:88:82:0c:ec:83:d7:
         78:2d:2a:38:94:75:76:ca:88:db:4a:33:25:88:4e:53:37:88:
         84:ba:c9:45:15:e8:29:52:36:4c:7a:a0:e8:e2:7e:01:21:49:
         8f:b7:1b:51:e2:4c:b8:de:10:3f:fe:71:5e:1d:94:02:48:ff:
         8a:ca:5e:fc:90:6d:94:d8:16:c1:64:15:58:b0:16:4d:01:02:
         f8:d4:59:54:22:cb:f8:f3:3e:16:80:10:e6:39:4f:a0:39:4f:
         95:62:3b:7d:4a:54:c8:d6:81:19:c1:33:57:e4:d9:2a:50:13:
         30:14:27:ff:50:b7:91:4d:66:1c:7d:96:be:0c:47:d6:d6:63:
         c3:08:90:b9:2f:be:c5:3c:58:e7:58:91:06:db:74:23:13:ac:
         17:f1:69:8e:91:0a:36:dc:88:07:b9:9e:18:e2:23:cd:7b:a9:
         b9:89:13:8b:47:de:32:23:d0:49:fa:3c:19:09:dc:f0:25:e5:
         33:c5:34:c6:32:f3:de:32:7d:7e:6a:e8:b0:7c:af:cc:d6:1d:
         b5:43:07:9a:85:d8:18:a4:00:62:ce:ac:ea:2c:93:33:7e:c2:
         d5:0c:a4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:30 2026 by rpki-client