Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File:                     kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier:          A4E5c2BDOD2S/V4l/sfprYqGz/Z78+/osY04F1rFqQk=
Subject key identifier:   1C:30:B0:E6:39:5D:62:19:C3:A7:1E:6B:FB:19:F0:9A:2E:F5:3A:9E
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer:       /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial:       019F9059D3295323EF561AA4E169F8724D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number:          0CC3
Signing time:             Thu 23 Jul 2026 19:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:33 +0000
Files and hashes:         1: epkM5me6VO4WBfsP3OBY0X-ejFw.roa (hash: zpYuo9uFqGN49lIwpVPfYA+YcKIr1TU6tf2Nb7fQdzM=)
                          2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: FMidcA/JyLmQ26Hs/t5d9BoGZs9ghAlhRu1P6lN+CTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:d3:29:53:23:ef:56:1a:a4:e1:69:f8:72:4d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
        Validity
            Not Before: Jul 23 19:00:33 2026 GMT
            Not After : Jul 24 19:00:33 2026 GMT
        Subject: CN=1c30b0e6395d6219c3a71e6bfb19f09a2ef53a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0c:14:4f:84:29:08:9f:3c:45:d9:29:25:90:
                    e0:1c:84:a0:74:29:ea:1f:7f:49:59:84:d6:c7:eb:
                    06:be:02:0e:b1:6e:bd:c8:82:ff:77:75:16:4a:f3:
                    b5:b6:28:c7:34:cf:c6:02:97:84:63:1f:8e:87:2c:
                    76:ae:6c:2a:82:89:d4:f3:0b:42:e8:32:21:dd:0d:
                    63:c8:15:ff:84:62:ff:69:38:79:8c:ee:59:72:29:
                    84:4e:13:45:26:23:6d:e3:aa:b7:83:9e:7d:17:f2:
                    a9:d0:ee:8e:98:d0:1e:a2:30:ec:40:0c:d0:89:e8:
                    a9:09:bf:b1:56:b0:68:03:57:c5:a1:5a:fc:4e:ae:
                    e1:03:8f:8f:71:ee:a4:39:6d:59:40:9b:0c:01:0b:
                    03:f3:8f:98:a2:25:5c:c1:f8:71:2c:42:2d:50:e6:
                    f1:46:57:46:22:a5:eb:87:a9:c4:55:5b:c4:52:7e:
                    9e:aa:fc:6a:f7:1d:d5:37:ad:12:31:97:ee:43:eb:
                    f4:72:88:e3:e6:b8:e2:8d:49:5f:45:16:75:8b:4f:
                    af:a6:a2:e3:5b:06:98:64:07:05:72:a2:36:61:ea:
                    89:05:d4:8e:18:f5:f1:d8:00:61:59:ad:20:48:45:
                    3d:42:48:66:70:de:f2:b7:9d:07:e8:e7:90:58:0a:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:30:B0:E6:39:5D:62:19:C3:A7:1E:6B:FB:19:F0:9A:2E:F5:3A:9E
            X509v3 Authority Key Identifier:
                keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:5c:98:1e:f3:6f:ef:a4:e6:8f:b8:21:0d:53:f7:21:4a:
         f7:5f:b5:8a:34:3b:a0:e4:80:ba:b4:51:a7:2f:ff:b6:bf:14:
         0d:43:ca:90:3d:f8:37:39:5f:61:5e:d1:66:b8:66:b1:2f:44:
         74:3a:0c:b2:86:f9:26:89:4b:37:f6:d8:19:a7:f9:f7:85:23:
         f0:6f:7b:9c:17:c4:a8:ee:03:23:f9:90:fa:c8:b7:7a:67:a3:
         97:5c:5c:64:eb:0f:ec:3a:88:61:71:ec:70:d0:6f:33:2e:61:
         f4:db:dd:82:17:04:cb:20:3f:f7:8a:5d:db:3a:b6:9f:e3:a0:
         d3:ab:b6:f8:0e:bc:ae:3e:08:ca:3e:f2:22:54:d3:71:27:95:
         06:0b:ab:30:7e:ad:41:48:4e:82:97:e8:d4:68:15:fc:29:fd:
         74:37:0c:19:b6:ab:fc:d8:2e:25:ae:4c:28:c3:75:4c:68:4d:
         4f:68:f5:3b:09:83:36:46:96:4c:8b:3d:98:06:83:f9:2f:ee:
         b7:4c:98:35:9e:da:e5:cf:76:89:4c:a5:53:06:5e:fa:2f:fa:
         13:76:b7:0a:46:4c:8e:6c:35:59:c9:4d:a5:59:54:7a:e4:b2:
         51:dc:2b:32:42:88:74:8f:fc:f1:7e:58:4d:40:75:8b:1e:4e:
         f5:36:6f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWdMpUyPvVhqk4Wn4ck0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjhmYWZjZjdjNDQxYWU0OWMxY2VmOTVjNTE4YjI4MjI4
YzdjNjIwHhcNMjYwNzIzMTkwMDMzWhcNMjYwNzI0MTkwMDMzWjAzMTEwLwYDVQQD
EygxYzMwYjBlNjM5NWQ2MjE5YzNhNzFlNmJmYjE5ZjA5YTJlZjUzYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAwUT4QpCJ88RdkpJZDgHISgdCnq
H39JWYTWx+sGvgIOsW69yIL/d3UWSvO1tijHNM/GApeEYx+Ohyx2rmwqgonU8wtC
6DIh3Q1jyBX/hGL/aTh5jO5ZcimEThNFJiNt46q3g559F/Kp0O6OmNAeojDsQAzQ
ieipCb+xVrBoA1fFoVr8Tq7hA4+Pce6kOW1ZQJsMAQsD84+YoiVcwfhxLEItUObx
RldGIqXrh6nEVVvEUn6eqvxq9x3VN60SMZfuQ+v0cojj5rjijUlfRRZ1i0+vpqLj
WwaYZAcFcqI2YeqJBdSOGPXx2ABhWa0gSEU9QkhmcN7yt50H6OeQWArIzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwwsOY5XWIZw6cea/sZ8Jou9TqeMB8GA1UdIwQY
MBaAFJD4+vz3xEGuScHO+VxRiygijHxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDct
OGFhNGViYWQ0ZTY1LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDctOGFhNGViYWQ0ZTY1
LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBxcmB7z
b++k5o+4IQ1T9yFK91+1ijQ7oOSAurRRpy//tr8UDUPKkD34NzlfYV7RZrhmsS9E
dDoMsob5JolLN/bYGaf594Uj8G97nBfEqO4DI/mQ+si3emejl1xcZOsP7DqIYXHs
cNBvMy5h9NvdghcEyyA/94pd2zq2n+Og06u2+A68rj4Iyj7yIlTTcSeVBgurMH6t
QUhOgpfo1GgV/Cn9dDcMGbar/NguJa5MKMN1TGhNT2j1OwmDNkaWTIs9mAaD+S/u
t0yYNZ7a5c92iUylUwZe+i/6E3a3CkZMjmw1WclNpVlUeuSyUdwrMkKIdI/88X5Y
TUB1ix5O9TZvig==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:13:41 2026 by rpki-client