Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File:                     Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier:          pPcdEbPBysVI5UGIrw86pXR4aJFBFEsEMB0J6gQApJY=
Subject key identifier:   DA:4F:C0:56:8B:0E:13:0C:5E:D8:FC:D5:25:8C:82:F0:97:08:82:6C
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer:       /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial:       019F91DA91D346D8F4C703D7505C3ED2A691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number:          168A
Signing time:             Fri 24 Jul 2026 02:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:48 +0000
Files and hashes:         1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: hwVWabshlvBDX648t/czAEfpI+z0zNIa0ged+sTi9S0=)
                          2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
                          3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
                          4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
                          5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:91:d3:46:d8:f4:c7:03:d7:50:5c:3e:d2:a6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
        Validity
            Not Before: Jul 24 02:00:48 2026 GMT
            Not After : Jul 25 02:00:48 2026 GMT
        Subject: CN=da4fc0568b0e130c5ed8fcd5258c82f09708826c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:60:72:b6:47:92:15:ec:e0:76:5d:c2:04:
                    b2:f2:b2:8b:74:1e:25:45:d2:ac:5e:55:97:fe:41:
                    fb:07:ed:33:39:db:c0:8d:40:7c:6e:1c:c2:a5:ce:
                    75:00:66:25:2e:ca:a4:be:76:ee:bd:d2:94:5f:8b:
                    8a:ad:ed:41:f5:72:03:c1:78:00:50:4d:9f:86:11:
                    53:5b:fa:78:0a:58:00:72:ed:51:bb:8f:8c:00:0c:
                    b1:92:49:3a:4c:59:c8:e3:bf:b4:6b:bd:a0:37:39:
                    15:3b:35:6b:6d:81:2b:a4:0b:6e:fc:b6:c9:55:82:
                    38:d1:7a:d6:77:31:ae:1b:2c:79:f8:cf:b7:d7:14:
                    45:f4:d6:43:47:9c:24:ae:4a:85:56:44:b7:e4:a2:
                    a8:26:26:cc:74:36:e6:d8:0c:f4:79:b1:17:d4:12:
                    e2:bc:0d:b7:d7:f7:fc:94:8c:91:ee:11:88:2c:78:
                    10:13:28:a5:e9:44:c3:e9:0f:49:96:03:95:13:9d:
                    da:28:49:68:e5:3a:7f:7e:85:b3:f1:fc:e9:86:d1:
                    36:04:0f:3c:47:24:b6:7b:d7:db:60:58:9b:f8:6f:
                    85:73:88:38:30:04:b5:fc:98:12:77:f8:96:8d:32:
                    b0:6e:25:1f:00:3a:5a:01:0a:f7:c8:19:25:82:0d:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4F:C0:56:8B:0E:13:0C:5E:D8:FC:D5:25:8C:82:F0:97:08:82:6C
            X509v3 Authority Key Identifier:
                keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:d8:a0:f1:53:93:68:86:b0:0b:1c:2c:3f:26:fc:1e:38:
         0c:ce:b7:74:5b:1f:64:07:5c:3c:50:4c:90:f9:f6:6c:37:7c:
         2a:9e:55:e4:75:f4:b0:bf:9a:cb:0a:48:db:93:89:52:b2:df:
         c2:6d:4d:7c:64:37:66:9d:6d:09:af:77:a4:0e:ff:2f:45:97:
         ae:b0:56:74:2c:12:41:2f:a2:39:c4:5e:2f:da:35:bb:f2:b5:
         f1:95:78:83:ef:1a:99:c7:d6:56:15:c0:f3:fd:f6:70:59:28:
         b0:e4:f8:ae:fa:1f:6a:0f:c1:a3:1c:bd:55:6f:d3:e6:fb:52:
         64:0d:1e:9b:cd:dd:60:e3:7d:9d:b7:e2:06:fc:3f:19:42:c7:
         5f:46:0e:db:28:db:0e:19:b1:80:8e:a6:e8:85:1f:bd:bd:8c:
         7d:24:3d:30:e4:f1:9b:c0:11:bc:cf:8e:7c:63:3a:6e:78:99:
         19:99:86:6b:ec:03:09:80:31:83:1d:62:3c:0c:30:9f:b3:89:
         46:1e:d8:eb:ea:39:9a:81:04:bb:c8:ec:c4:5f:fa:9e:76:0a:
         9a:b7:e2:4d:22:1a:84:8d:ee:4d:3d:0c:9a:f3:0c:b7:27:18:
         da:6c:d6:10:35:f4:73:de:a6:f8:5d:fe:f1:42:47:07:4a:c8:
         10:4a:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:04 2026 by rpki-client