Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File:                     KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier:          lEzc2EmBdRRjHjTlhiA+Ld015vwvdWsbgg45HxSEuMA=
Subject key identifier:   8E:CD:43:44:8E:A3:5C:54:B9:EC:5F:9A:23:4B:7E:C8:07:7A:F0:07
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer:       /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial:       019F935BCF3963936D96CD5B6A93ACB23D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number:          1195
Signing time:             Fri 24 Jul 2026 09:01:35 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:35 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:35 +0000
Files and hashes:         1: 5Y-YmReP3TmRtjJS9YVlIuI8nG4.roa (hash: de+X/aDoTaxuRv3aSiiQGOlpPaCXL5cRb2HmerHKNMs=)
                          2: Cgz85Eo8qCTDGZkh2eWDWG1TUqs.asa (hash: mRCgdtrJHvfYqHRb7B2p6MSw7jldI362MV9SPdWb6Tg=)
                          3: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: ZzdbEDsAGQ8v92L1wBpUT+jU3Zy9D+t7hw3zIAznVM0=)
                          4: RGBq2FSn0FisiLY5hbUPkKxjdTo.roa (hash: gRY4dTWZk/MRAor8xvglsLTFZW7lcmxrSq+zim8k20s=)
                          5: X_AaoL7Ah4HLoalI2_dxRNVjGT8.roa (hash: LYJu7x3oXzLmoQVYfAqJ6SKMZlnDcjs2nlCx1uJIAu4=)
                          6: o6jn4pMH4sc0eujptr5xx165q4Q.roa (hash: fEt3SZ1Yy3NPOPzC2NTZohBKbWX72IOAPI3OKkPJrBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:cf:39:63:93:6d:96:cd:5b:6a:93:ac:b2:3d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
        Validity
            Not Before: Jul 24 09:01:35 2026 GMT
            Not After : Jul 25 09:01:35 2026 GMT
        Subject: CN=8ecd43448ea35c54b9ec5f9a234b7ec8077af007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:2b:25:c3:47:b0:9b:48:8e:99:8a:95:92:
                    25:00:29:17:82:1b:03:f6:59:e8:e6:d7:28:b3:48:
                    16:6c:f2:18:dc:99:b9:7c:78:42:08:de:33:ee:37:
                    14:34:e8:85:34:98:84:d0:f6:46:f9:00:23:b6:4d:
                    14:dc:1f:fa:4b:92:53:5f:eb:1d:13:2d:9f:4d:14:
                    bc:0e:3d:a7:e7:3a:8e:c2:19:fa:92:ed:53:56:04:
                    dc:a3:a2:29:e4:82:f8:06:4e:6d:a8:2e:54:62:84:
                    6e:ee:71:b8:64:c6:c7:ab:c4:14:3b:4a:78:de:f2:
                    c5:03:ca:70:54:ea:f9:12:0d:f1:73:bf:4d:dd:f8:
                    a9:7c:44:9b:91:2e:eb:ce:40:a9:c4:3b:be:09:88:
                    b2:6b:5a:08:ac:53:85:00:ea:3e:6c:e7:e3:21:0d:
                    e3:da:38:e6:9e:a0:39:ed:ae:e3:a5:1b:f7:34:3c:
                    6b:ab:73:5f:62:a5:86:5e:91:fb:c7:ab:10:65:f6:
                    a9:c1:f2:84:10:42:2b:42:81:1d:04:31:6a:bc:62:
                    4c:5b:3a:55:75:fe:54:03:77:ca:93:87:43:1e:cc:
                    61:fb:03:10:b0:55:5c:8b:68:25:b3:53:1f:dc:a5:
                    b5:d4:c7:31:75:d9:f6:af:7a:a8:7f:a1:c4:ec:a9:
                    34:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CD:43:44:8E:A3:5C:54:B9:EC:5F:9A:23:4B:7E:C8:07:7A:F0:07
            X509v3 Authority Key Identifier:
                keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d2:63:76:e3:1b:31:83:e1:73:22:c1:6d:fd:dd:7d:b3:c4:
         59:3e:8a:06:9b:a8:58:1b:b9:29:2c:97:66:95:b3:fc:89:6a:
         ac:d3:dc:72:6c:7b:6f:8b:39:be:7c:02:14:0b:9f:dc:09:7c:
         bd:25:f4:91:b6:9b:58:6f:cf:ca:49:47:31:20:f3:61:a6:f5:
         f0:22:83:e2:ef:b6:da:e2:ec:be:da:9c:53:9d:cc:61:c0:49:
         a6:72:16:b6:1b:a7:d5:3e:77:53:5f:1f:af:18:b4:d3:1f:e2:
         3d:8e:25:34:f3:2c:b5:f2:d7:d7:a1:17:db:a6:3a:e1:98:19:
         05:39:af:b9:23:50:7a:45:b7:75:d9:d9:ed:4f:cb:c5:a0:de:
         2f:aa:e5:5e:f3:22:c2:cc:75:4c:8e:6c:fe:41:68:91:7d:49:
         d2:bf:5e:cf:40:6b:bd:04:12:b1:32:7f:c5:33:61:8a:93:7a:
         fc:0c:2f:1f:e8:1d:18:5a:2d:99:f7:ba:ba:dc:98:2b:c6:96:
         eb:be:1e:fe:9a:32:ba:d4:6b:12:f0:f0:d8:fc:b8:0a:a7:04:
         d3:fa:61:fe:ec:e6:82:7e:13:c5:5b:41:4a:82:19:51:b6:de:
         49:cb:3e:d0:c1:ff:1c:71:97:b2:a9:81:28:84:e8:c4:cb:c7:
         ff:83:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:40 2026 by rpki-client