Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File:                     kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier:          O2dGq2mVJp0KcZmOh63o7XjQn8x8bpIptnzraAS/p4E=
Subject key identifier:   45:6E:72:E9:DD:0A:96:16:03:86:AE:E3:48:2D:13:D3:39:34:BE:85
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer:       /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial:       019F8F7F7B37660B6D1BDE29F869811BB9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 15:02:04 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:04 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:04 +0000
Files and hashes:         1: SAktSd8Yfiv8Z7AAoq9HqjAql5s.roa (hash: LtM8gbZ0jSfixz/hSjfeNQJi14O3+yjoZzQHAO5Ggx8=)
                          2: V7G0PqLXvHbILX1LHpBG4YAR7P8.roa (hash: dlrYc64tSG90TWHPrXR+wF6FxKtROact/mSKSd7YezI=)
                          3: YUvBprPTRfZZcuIZT5c81ftcfmE.asa (hash: 53yTBzuypoSdIg4y84fPhABfxj/Iwufg2RICzEJXFBY=)
                          4: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: N+b8pissmj34Ky1Xb4g02EPa/sylOFboOL3qvvbrIAs=)
                          5: phk0DUtP9juLO6Rie2WITcEati8.roa (hash: e91L1Q+nTnPD/oJ6jV8Vk2fQsj6tkZNRhSrVTsD9WQs=)
                          6: ycEAE8U3GOcT-dI1EM9rShcAaZs.roa (hash: xuaS4IHUOmueIKBaxW7itaqT5M/7ix/11RW1ctyKbMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:7b:37:66:0b:6d:1b:de:29:f8:69:81:1b:b9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
        Validity
            Not Before: Jul 23 15:02:04 2026 GMT
            Not After : Jul 24 15:02:04 2026 GMT
        Subject: CN=456e72e9dd0a96160386aee3482d13d33934be85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e7:27:2c:9a:ca:d8:9c:40:db:b4:2a:c8:9d:
                    be:2d:27:f9:f1:0f:a5:e1:16:b2:43:87:9b:67:11:
                    b1:09:a8:f2:a4:1c:ee:62:3b:3a:5c:d6:b7:1e:8a:
                    63:5a:00:8f:f5:f9:48:ac:4c:d4:fb:fa:44:45:51:
                    f1:6a:91:bb:82:ec:cb:2a:bc:9e:d6:c9:2f:34:45:
                    79:25:18:d0:2e:64:0f:d2:5e:22:15:72:e7:c3:b1:
                    be:ea:38:d6:1e:1f:63:3a:41:03:27:cd:7a:a9:cf:
                    38:10:88:68:d9:98:96:7e:35:5a:1f:a5:c7:6f:43:
                    08:71:b0:d0:61:c9:01:82:07:30:36:cc:cb:59:bf:
                    2a:3b:28:45:78:8d:b2:86:6b:c8:55:af:67:27:72:
                    56:0a:e9:27:c8:43:f9:1b:6c:24:61:46:d3:d0:f7:
                    c6:24:10:ac:d4:42:e5:95:87:3f:d0:10:51:07:3e:
                    86:f2:43:f6:19:9c:6a:38:08:6d:0e:1a:b2:bd:dc:
                    2b:49:71:ad:d4:36:ba:bc:ee:25:d7:cc:e0:f5:08:
                    01:81:af:9e:e0:4f:83:7b:a9:12:89:cb:55:8c:34:
                    db:42:10:f8:ad:94:d5:b9:24:e8:6d:c8:73:8c:b4:
                    65:91:a0:d5:0f:fa:8a:b6:ae:49:2a:7a:43:a5:89:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6E:72:E9:DD:0A:96:16:03:86:AE:E3:48:2D:13:D3:39:34:BE:85
            X509v3 Authority Key Identifier:
                keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:59:92:e6:67:23:1c:8e:17:0c:4c:e7:04:69:a1:60:37:
         b3:c4:1a:41:8a:5e:4a:68:51:03:bb:a6:3d:31:1c:b9:27:b0:
         40:df:c2:0d:5e:c0:2b:0d:50:ee:7b:67:c0:da:79:01:a3:71:
         d3:07:fa:5a:74:a0:2e:7e:8a:62:8b:24:d4:a9:ae:33:d7:96:
         16:7f:bd:88:71:ff:ed:fa:a0:86:5e:42:f2:7e:7b:f4:16:4e:
         1e:d2:1c:2f:0a:13:f4:c7:01:f8:67:8c:4a:dd:8f:8d:4a:b5:
         0b:b3:9b:b7:75:5c:07:ad:21:cb:b8:07:ca:51:f1:8f:39:88:
         a8:f5:90:a6:43:13:8b:83:44:57:dc:4a:82:37:05:09:ef:24:
         32:d2:f2:a4:52:9c:28:2f:22:01:3a:de:71:25:56:48:9b:31:
         21:32:c6:ac:d9:96:c6:18:55:32:3f:93:68:7f:a0:80:39:37:
         02:31:f7:55:70:55:ee:fd:ca:ba:ad:69:c0:7c:ed:ab:42:00:
         3f:ab:d0:45:b4:54:64:56:d7:eb:3b:f4:d1:58:fe:be:75:fc:
         46:03:18:ff:31:59:eb:45:17:78:39:7c:69:b4:e4:29:5b:d4:
         99:9b:41:c3:bd:ff:c3:b5:28:fb:10:3b:3c:6b:ff:6c:12:5b:
         10:ae:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:56 2026 by rpki-client