Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File:                     E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier:          rKZRxl2MjO5y8a/CK/9J2YewTkf1efthMCZilhN1VSc=
Subject key identifier:   E7:08:FD:1C:D6:F4:E4:A0:DB:81:37:D0:52:F8:8A:49:F1:9E:AA:87
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       019F916CB3F09A9019A8A70A640AEB68290B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number:          1596
Signing time:             Fri 24 Jul 2026 00:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:48 +0000
Files and hashes:         1: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: TsFlKLBioV/LFUQSsKANnY6EZoFvDsEHtUCU1iov64M=)
                          2: TWvWCjfcJCEG41QFPQLAhs2JObQ.roa (hash: DqNFCgXIxkHeccY32PWEnzcNOaZdd4sjlG37z/rzOVQ=)
                          3: d01OZQ1h5yd4zGfVbRIIarVh3s4.roa (hash: Xg/0ZNy0ArMdMbPyTvAy9IQ+pjsxh8KiRBOhFT7eW1Q=)
                          4: kviMEyCZuerPbRSjjOAweNUOX9M.roa (hash: XkVxdbAObzQecFi8jNeAZta/hKgnPT5nn3X0mpt80lw=)
                          5: oQ47OO3iSNMtAuvlbZJhns5jtPo.roa (hash: DmNizIql71FSjnm9Foz1EExYyNgsI/RtmPHVmpQ2GmQ=)
                          6: rxoDYFpq8vIo4tsEseR7hW-PJWw.roa (hash: fCuVig3kLTHc4MXvnEsk4nmU3uAS7Jg8f43kLxgMMuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:b3:f0:9a:90:19:a8:a7:0a:64:0a:eb:68:29:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Jul 24 00:00:48 2026 GMT
            Not After : Jul 25 00:00:48 2026 GMT
        Subject: CN=e708fd1cd6f4e4a0db8137d052f88a49f19eaa87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e7:33:3a:e5:1e:0a:5e:24:fc:15:27:a1:cd:
                    cc:f1:3e:fd:15:be:6b:19:7b:57:6b:f6:2c:ee:a7:
                    fa:05:88:58:25:17:27:0b:27:03:a1:f0:80:be:6d:
                    ca:11:7a:d8:d4:58:bf:d5:83:e7:8b:e4:42:28:62:
                    38:db:35:96:61:b9:9a:ee:39:06:89:9c:d7:1c:12:
                    6b:a1:ab:7a:14:e8:01:43:5a:84:04:17:95:5a:7a:
                    06:de:7d:ba:52:2e:d2:19:d1:3e:f6:06:05:a4:b3:
                    a3:82:5b:03:f0:2f:e3:1d:8a:7b:e3:8e:da:2b:f1:
                    dc:dc:84:f3:45:44:b5:32:0c:fe:0a:66:38:ff:fb:
                    b3:f0:71:74:a5:e6:56:de:c6:20:e2:82:fb:93:82:
                    43:74:9d:ce:af:15:1a:9e:a2:99:05:2c:f3:49:c4:
                    2b:ba:e8:a5:82:e7:37:74:57:02:4b:e7:d1:d4:7d:
                    98:ef:f0:70:f2:16:6d:31:87:41:08:5e:a6:65:29:
                    e5:2d:f0:65:5c:2d:e5:ad:fe:06:05:26:bb:20:84:
                    e7:9a:89:95:91:48:12:8a:57:81:6a:66:4d:a5:57:
                    73:7f:2a:cf:6d:27:a6:4f:18:31:11:72:93:c4:b0:
                    41:75:5e:25:dd:4e:41:87:96:87:4b:de:4d:16:54:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:08:FD:1C:D6:F4:E4:A0:DB:81:37:D0:52:F8:8A:49:F1:9E:AA:87
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:25:a4:53:1d:24:34:63:36:b4:49:d4:88:36:e9:ea:42:
         f2:0c:f7:16:9d:4a:1a:f1:58:02:9b:cf:69:57:14:87:e1:e7:
         56:85:33:1e:2e:aa:46:41:c9:da:d3:f2:ab:8d:c1:23:08:86:
         21:e4:66:75:65:08:c2:70:72:cc:04:6c:2d:82:a9:f1:e1:ce:
         12:5d:ba:2a:64:d8:3b:0b:72:5d:bf:bc:98:81:59:70:ce:dc:
         50:72:3c:a4:9d:d0:c1:09:27:d9:f5:98:11:c4:0c:07:3f:1d:
         82:ba:5f:5a:a0:f8:b4:ca:c6:e7:f0:5a:f6:39:c6:2e:08:6d:
         27:2f:b9:38:bc:4c:a6:44:df:00:53:f0:4b:b1:c1:cb:0c:3f:
         f5:9a:51:24:bc:d8:80:92:38:03:a7:fc:26:2f:24:ed:77:b6:
         d9:20:a1:3f:ab:86:06:ab:22:46:23:09:a4:2d:74:99:3d:b8:
         80:9e:0e:fd:af:b8:25:81:50:6c:7c:0d:c0:a1:d1:9c:0b:52:
         16:f1:3c:f4:74:84:27:17:ab:12:15:b6:b4:f5:6f:b5:66:91:
         ef:53:c2:22:4a:fd:df:d9:ab:06:a1:01:a6:80:3c:f7:c0:52:
         33:4f:ed:4c:27:01:61:ed:17:e9:6b:fc:3f:0a:e3:a9:0f:82:
         4d:c9:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:23:23 2026 by rpki-client