Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File:                     KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier:          jwkpFr2ve207DwXSFFNG93/ms7js1HBsq2qztb/ARRw=
Subject key identifier:   29:99:B8:84:6F:4B:6F:0D:77:36:26:7A:84:44:80:36:33:F0:24:1A
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer:       /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial:       019F9549ADFB6174C6EE8E425FFB3727401E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number:          0EAF
Signing time:             Fri 24 Jul 2026 18:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:01 +0000
Files and hashes:         1: 2E-MME-lm4K0uyBTuIg5ZM5-8I8.roa (hash: JzkT3L/H7HMV5VqAPBU8OB3GqfswpWq+Tu8hcXApBv8=)
                          2: 5ELvi2prTaHlQQw-aKR9uMwtFA8.roa (hash: 8uiks0UyE3YVuRlbo43yM8bQQXEWa2U0fKuakGVSNAU=)
                          3: D7_QPk2qAFTVuCWwAG0izANeaRc.roa (hash: n5F0AgHZRQ1JYqQ0higj9UJBRqSdojfEHkwWOchuMIU=)
                          4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: R5I98f21zgiGbpLOqXwXIXuG4LEwzcR8K4KS6uubp6I=)
                          5: PV9nn29yp2PBBJ08DH1Hzy77tzk.roa (hash: W2PgmiS8Op18Md9+/XFq6wqhLS1g6P/+ZLsWwjKbTR0=)
                          6: RB0GL9giB0u7zxwi4U8zR08ihPw.roa (hash: Szh3L0AtY1SzUtQRUTJ6CEK6mqyoxGEDQuesq2qnd/s=)
                          7: YzFna3l-BC64_Hy9sCXon1GnhcY.roa (hash: mHlEQsM8xLD+TBDwkEVeJd4jeKLg08Jp/4wsw9FdVUw=)
                          8: _6a-RWXCtiM85tk-pFSkSlcUUfI.roa (hash: B/tQnvdBFH+M+nv+Nk2B9RYqRSdNR6S1bMjLWiTjAJY=)
                          9: tKg8bmmm6waKS3dVDFR2D0N_Kp0.roa (hash: NxiPLV70KM3UlDzotgKT8px4zwsMhil8u+4mX6+fcsM=)
                          10: xqE2x6TB4ktJqDhDRIstav0I34M.roa (hash: a5jdOMPc2+BN/CePheTtmvryp7+c0nQR8BLYlcgEO6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:ad:fb:61:74:c6:ee:8e:42:5f:fb:37:27:40:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
        Validity
            Not Before: Jul 24 18:01:01 2026 GMT
            Not After : Jul 25 18:01:01 2026 GMT
        Subject: CN=2999b8846f4b6f0d7736267a8444803633f0241a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:45:ff:bb:31:3b:c1:c5:f9:15:b4:aa:af:
                    fe:26:f0:f9:a8:f1:8b:32:db:92:c1:ae:d3:70:a1:
                    1f:30:c4:e4:ed:5c:79:75:f3:fd:11:9b:ea:25:75:
                    c6:ac:43:a8:c2:b3:ea:56:e5:16:12:2b:df:c2:29:
                    41:f8:f7:b3:2e:c2:81:9f:3c:7a:87:3b:8f:24:d4:
                    45:8e:e4:c0:95:5f:0b:73:55:8f:da:90:eb:67:cf:
                    46:df:70:34:a5:72:26:21:f4:3f:fd:20:1c:94:b7:
                    3c:0a:2c:ff:14:04:61:7d:c5:36:e1:48:fd:56:ec:
                    f7:b5:fa:95:f1:f2:1f:c9:84:5c:09:c1:69:5e:4b:
                    86:f4:e6:7e:57:a1:72:5b:ba:12:e8:65:9f:a1:77:
                    43:4d:e0:0f:6b:4d:cb:e9:6d:07:d4:78:55:4f:ad:
                    04:c1:5c:3b:97:d1:fd:b9:84:96:dd:56:26:d4:71:
                    62:f5:66:26:aa:2a:79:b7:d9:d6:ec:54:5e:93:a6:
                    78:94:ad:1a:8a:69:1c:4c:e0:b7:97:91:ce:84:b3:
                    e7:24:70:27:d6:1e:a7:f8:a6:cd:18:21:27:87:4c:
                    56:5a:2e:d0:97:63:a0:cf:49:19:6a:d3:71:c0:90:
                    f6:0b:37:f0:46:f8:d4:00:fa:40:a9:ec:95:a8:e7:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:99:B8:84:6F:4B:6F:0D:77:36:26:7A:84:44:80:36:33:F0:24:1A
            X509v3 Authority Key Identifier:
                keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:16:95:01:28:20:5d:77:e7:21:31:6a:94:bb:72:8e:7e:a3:
         bb:a5:69:3e:af:ee:81:ed:0e:17:1c:dc:85:15:4c:12:a7:45:
         88:79:de:da:47:b6:6a:8e:8d:34:b4:2e:5e:45:ab:e8:a5:c7:
         b0:4f:c2:d4:91:cc:6a:71:b1:08:1d:21:b2:a6:ca:d0:dd:a7:
         26:cb:fb:32:66:a9:1c:22:5d:a6:ae:2f:1a:d5:b8:89:e5:fc:
         6e:69:83:a2:9f:85:1a:dc:49:bb:f5:ab:93:09:1e:98:d1:45:
         e8:5b:c7:ce:55:06:cf:dd:28:9a:d3:97:bb:d1:8a:90:bf:5f:
         73:50:58:c1:d6:28:f2:5a:df:b7:d0:25:b1:30:37:72:c6:57:
         ed:c6:0f:1d:d2:20:df:92:1f:64:f3:3a:d5:ae:55:ca:6d:b8:
         d4:52:a3:e5:c4:8c:31:a1:9c:60:35:da:19:fa:67:54:07:fc:
         92:f9:68:ce:e0:eb:97:b0:54:7c:35:33:85:2a:0a:a2:c8:27:
         11:7e:09:fe:40:c5:13:4e:d2:99:99:49:5e:31:2f:cc:ba:6f:
         03:94:ee:dc:94:c7:9d:79:8d:cd:dc:07:3d:5e:9e:6a:dc:63:
         55:bb:04:fa:25:f2:eb:d2:68:6e:0b:87:a8:b8:71:24:0b:13:
         63:f0:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:33:55 2026 by rpki-client