Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File:                     R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier:          7kMAhLinY7RLqyH5OhYGKItdQeh7skHL/47xNTRJ2gA=
Subject key identifier:   8A:A6:F8:75:EE:48:A9:F4:46:9B:1B:11:19:F6:22:BB:17:38:BD:20
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer:       /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial:       019F94A4D19F11D0432E054B07FE822652C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 15:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:57 +0000
Files and hashes:         1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: aPAoekFDH090a7Oha3ATMYaia4+kLJPei8D8Ui+kbuc=)
                          2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:d1:9f:11:d0:43:2e:05:4b:07:fe:82:26:52:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
        Validity
            Not Before: Jul 24 15:00:57 2026 GMT
            Not After : Jul 25 15:00:57 2026 GMT
        Subject: CN=8aa6f875ee48a9f4469b1b1119f622bb1738bd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:2d:0a:53:3c:c1:94:24:1c:27:c6:5b:a7:
                    66:c5:66:ff:5f:a1:7f:ce:7b:0a:86:9d:97:d7:ea:
                    41:7c:20:b4:ef:bd:2f:b8:f8:7e:a2:08:25:d8:9f:
                    7d:62:df:cb:e8:2d:15:55:dd:0f:74:fd:cc:e2:6f:
                    f0:65:1f:5a:e4:02:0a:01:86:8e:7c:7f:0e:0f:0c:
                    53:8a:44:0a:69:9f:74:78:01:ca:94:18:1a:62:97:
                    7a:6d:6e:6b:31:b4:3c:44:1b:a6:02:c3:9f:e2:79:
                    ec:fe:e6:96:53:3a:a0:df:63:73:85:31:1d:31:05:
                    8a:ca:f3:1f:96:05:79:f5:c9:96:be:18:4b:7c:ec:
                    85:3a:b6:45:f4:11:a5:e1:b5:6d:02:30:cc:19:20:
                    96:7e:c3:33:9b:a5:1e:d2:8e:37:19:5a:5c:73:53:
                    1a:3d:af:56:aa:1a:7e:c4:ed:eb:a8:79:cf:1b:d3:
                    f8:08:9c:a6:96:a8:05:fc:0f:ee:70:89:cc:23:87:
                    98:4f:f6:54:10:96:d7:f3:88:3f:e4:d3:fd:94:ee:
                    8a:df:a1:a4:18:2d:d4:b1:a7:1f:26:bd:41:2f:61:
                    db:1a:4e:10:40:ba:55:c8:b2:76:ca:8f:f1:c3:0e:
                    f4:66:2d:0f:11:74:10:ab:0e:05:70:0a:0d:d9:cf:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A6:F8:75:EE:48:A9:F4:46:9B:1B:11:19:F6:22:BB:17:38:BD:20
            X509v3 Authority Key Identifier:
                keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:df:dd:2c:56:f9:fe:20:16:44:c8:70:c5:fa:83:60:d0:e2:
         22:ba:e1:a2:2f:a7:83:7a:b0:dc:ee:09:7a:0e:4e:35:c9:4c:
         84:f3:a0:32:77:ab:97:ad:1f:8d:32:c2:c9:9d:94:4d:19:60:
         a0:f7:a7:e9:e5:47:10:ad:95:ae:75:9b:52:f6:b8:f3:62:5c:
         ce:ca:4b:eb:94:3d:c6:6b:19:89:d1:33:15:02:1b:bd:6c:88:
         6a:db:0a:b8:aa:fd:b1:b9:96:f8:0c:93:9b:c4:84:c8:ed:12:
         a6:f3:1f:5d:cd:b9:85:53:49:26:d3:bb:fc:1a:9c:6e:e8:20:
         7b:87:a5:e7:9d:1b:df:72:c0:b5:97:07:11:8d:a8:7c:b0:b8:
         93:84:c8:5b:32:fa:a9:47:80:78:12:e5:26:ed:39:8a:c0:33:
         68:2a:79:69:8a:98:20:28:5f:71:33:97:45:1c:95:10:e7:78:
         72:82:9e:11:34:8b:e2:a7:95:bf:34:fa:68:40:5c:b9:6a:96:
         69:77:2a:d8:d3:27:ce:c8:e8:23:97:b1:32:de:f2:60:93:35:
         51:28:49:a7:f1:c9:19:12:0e:4d:6b:e9:56:9d:de:36:da:7f:
         7c:75:d9:c8:c6:68:1d:7b:6c:6c:7d:fd:e3:39:85:52:e7:29:
         bf:27:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:23 2026 by rpki-client