Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File:                     kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier:          tG6Xly5ZVuHzVRHa5EAqteKcBVcy6oB7BUVaHlAM8vE=
Subject key identifier:   9D:F3:2B:F9:15:B0:16:82:B1:A8:4A:8E:9F:D2:5D:A0:EF:9D:49:78
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer:       /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial:       019F93248FE27A5B42F1D6659E8D0CB0D174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number:          0CE4
Signing time:             Fri 24 Jul 2026 08:01:14 +0000
Manifest this update:     Fri 24 Jul 2026 08:01:14 +0000
Manifest next update:     Sat 25 Jul 2026 08:01:14 +0000
Files and hashes:         1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
                          2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
                          3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: 4LP957ac4/X2TDDZx7G/3blNDV1MVx03mJLPWz4Xvtw=)
                          4: ya9LYPXvHEEXO5XvEJTV9ST8Zk0.roa (hash: cgKvDxCnzGGms11PufhD9gT5FhjHVHi9rSIbt12B0YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:8f:e2:7a:5b:42:f1:d6:65:9e:8d:0c:b0:d1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
        Validity
            Not Before: Jul 24 08:01:14 2026 GMT
            Not After : Jul 25 08:01:14 2026 GMT
        Subject: CN=9df32bf915b01682b1a84a8e9fd25da0ef9d4978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:1e:bd:0d:ba:a8:0b:1d:cb:1a:36:52:ee:
                    c5:43:d8:a3:c8:07:6f:04:9b:4c:8f:b7:c8:c8:d3:
                    09:55:b8:b2:87:66:4c:44:a6:4c:2a:f9:0f:c5:a4:
                    dd:28:4b:50:e4:56:d9:ba:79:67:ac:ca:c8:14:e2:
                    bd:83:e7:a5:71:6b:87:a5:f9:30:8c:70:0b:00:cf:
                    32:58:ed:c1:25:13:20:2e:9a:31:a9:d5:b0:45:00:
                    80:2d:a5:8b:2c:b2:9e:de:f8:85:0f:5d:76:6a:63:
                    c7:bb:8b:70:1e:a1:d8:2a:77:73:43:ac:76:6e:20:
                    f8:3d:ed:ed:98:80:81:40:62:5c:8b:ab:b3:86:27:
                    3b:65:bc:44:cf:99:64:78:a1:41:87:27:8b:c3:f0:
                    dc:55:ec:47:65:a4:ef:ca:a7:fd:02:b1:73:e3:9b:
                    f3:88:18:6c:20:6a:a6:11:16:a6:e2:53:f4:23:8d:
                    2e:9a:64:b0:51:90:85:35:76:8d:cc:4c:4a:a4:5f:
                    19:64:75:99:49:1a:91:f3:85:de:dc:75:7a:4a:5a:
                    9c:16:1d:d5:f0:58:e2:ad:8f:0b:b2:36:13:03:80:
                    ff:20:38:c8:36:18:93:c1:5a:a7:b4:4e:e2:63:20:
                    67:20:3c:ae:dd:8a:c1:a8:c9:cf:84:35:cc:cc:d8:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F3:2B:F9:15:B0:16:82:B1:A8:4A:8E:9F:D2:5D:A0:EF:9D:49:78
            X509v3 Authority Key Identifier:
                keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:69:fd:62:22:c0:c3:70:01:f1:9d:16:ac:a6:9d:78:00:
         8c:68:66:31:06:17:56:f3:b1:dc:00:5a:76:b5:7f:8c:98:ad:
         23:af:fd:80:40:a0:7a:27:92:fb:99:e2:3a:db:c3:c8:29:99:
         fc:d4:8b:f6:9c:2a:bb:0b:14:cf:70:e8:70:ec:a4:61:63:c0:
         42:2f:42:19:30:ac:ac:a0:f1:30:6f:8c:f4:46:8d:9a:67:a2:
         54:a8:5f:48:57:b0:4c:14:14:de:4e:fa:c5:ce:23:4e:6c:e0:
         02:81:98:be:09:73:a3:94:60:05:27:de:3e:24:73:6d:7c:83:
         f4:fe:05:76:8c:05:8f:51:df:13:2b:49:d5:b2:65:25:d7:0f:
         6c:95:7d:b6:96:55:4d:67:d9:19:37:7f:ec:0b:63:9d:6f:cb:
         01:70:ae:7b:58:ea:ab:3e:71:dd:dd:88:39:1d:42:8e:82:c9:
         dc:f3:37:ba:a6:a7:3f:ac:e8:db:31:19:91:1b:4a:cd:8d:ee:
         87:fa:2f:56:93:d7:80:a2:4b:2f:25:5b:0c:c7:ca:bf:0e:f2:
         d3:7d:4e:cf:fb:ee:5e:16:37:3f:c8:c7:5d:d1:b2:47:91:d6:
         d9:74:64:83:12:65:77:03:f5:d6:73:0f:db:36:38:87:51:b4:
         04:50:41:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:20 2026 by rpki-client