Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File:                     kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier:          MIA8hWYPeOHRMXi/kmr2Eo0FZQZIRNJIMCdkIEWdziE=
Subject key identifier:   77:3B:0F:8B:67:05:11:D6:9F:4E:C1:4A:94:09:5D:10:1C:5A:5B:92
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer:       /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial:       019F93C93DFAB8CB2B277FC44C096ECDA147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number:          08B2
Signing time:             Fri 24 Jul 2026 11:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:07 +0000
Files and hashes:         1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: A9rp5fd8pTJBuEnWnUxYKPmAk3Xa4iShymfdAU55+Mw=)
                          2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:3d:fa:b8:cb:2b:27:7f:c4:4c:09:6e:cd:a1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
        Validity
            Not Before: Jul 24 11:01:07 2026 GMT
            Not After : Jul 25 11:01:07 2026 GMT
        Subject: CN=773b0f8b670511d69f4ec14a94095d101c5a5b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:d5:30:ae:a4:3e:ec:f7:9b:78:f2:c9:5d:
                    24:69:b5:7d:aa:24:1e:98:76:5b:ec:d8:23:f5:59:
                    c9:db:b9:21:c2:8f:8c:67:d7:db:76:0b:c8:18:31:
                    d2:ac:11:71:f0:0d:4d:d6:00:b9:2f:39:ca:b9:c0:
                    23:29:38:01:ed:4b:15:db:da:99:6b:c0:61:77:6d:
                    4f:13:66:fd:af:23:4d:86:4a:0e:05:a6:43:f1:07:
                    27:b5:27:ff:55:8f:b4:59:ef:6f:e2:56:25:7b:04:
                    3a:b8:1e:93:f2:44:10:24:dc:0b:78:a2:d6:96:68:
                    c2:76:dd:5b:a2:09:6f:4b:a6:e4:b5:ba:79:3a:c3:
                    c6:f2:0d:e5:29:11:38:e5:98:51:4c:89:76:ba:89:
                    d4:b9:48:57:2c:03:aa:ec:71:cf:9f:fe:2a:b7:87:
                    b5:24:0b:2f:51:a0:82:ef:a8:a9:6e:f4:d7:97:3a:
                    3a:7e:98:3f:d4:4a:6c:08:bf:31:0e:de:9b:0b:05:
                    b4:55:dd:8f:9d:c8:81:4e:78:cd:99:7d:54:d3:20:
                    89:50:9a:e0:4c:3e:a8:ee:b2:c7:b9:b7:75:fa:b5:
                    a3:7b:4b:88:88:88:67:41:ac:53:73:bc:ce:77:ae:
                    e8:bb:50:63:f3:e8:6c:6f:74:6b:be:d4:37:cf:e9:
                    e9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3B:0F:8B:67:05:11:D6:9F:4E:C1:4A:94:09:5D:10:1C:5A:5B:92
            X509v3 Authority Key Identifier:
                keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:43:af:af:36:6a:af:05:b8:2b:7c:76:55:43:fe:11:94:17:
         43:9d:92:31:a4:a9:5a:f5:03:84:fb:64:96:f4:36:ac:d6:08:
         81:e4:e3:70:c4:86:5d:99:01:94:2b:10:4a:e2:26:9f:3d:d6:
         38:e6:66:b9:cd:93:79:ed:6c:68:15:9f:ab:90:9c:4f:de:62:
         32:44:b0:8e:d8:d8:32:47:e7:94:79:e5:86:a9:ae:16:79:6a:
         62:25:20:63:65:82:45:da:d4:37:19:8b:ca:20:f9:2e:ce:a7:
         8e:ff:28:e0:ee:e4:02:5a:64:d1:8b:eb:42:af:27:e3:b7:54:
         23:68:f3:0d:b7:ca:40:a3:7a:59:5d:f9:2b:a4:75:7c:ab:21:
         8c:8d:71:0c:12:ae:d2:dc:30:e4:a1:84:83:48:24:ce:98:9c:
         30:51:4f:a2:1a:cd:a4:02:50:46:99:01:30:76:23:8c:de:be:
         9f:a0:a8:f6:51:c2:0b:10:57:c5:71:4f:2f:fc:96:2e:a2:2d:
         d8:05:13:fc:a0:ee:a9:83:44:50:59:78:52:f0:83:d5:81:ca:
         09:d2:0e:53:18:86:dd:07:b0:d9:0c:45:60:e3:84:35:8f:88:
         bf:e9:2b:05:b0:01:9b:ed:b6:64:29:fd:02:6d:a2:3f:fe:db:
         28:d8:94:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:33 2026 by rpki-client