Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File:                     Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier:          A1ebmLwe5lQj5nxOdSHyS4hqi2I1mNRtaNqy1uXCRiM=
Subject key identifier:   CF:01:92:20:2D:8C:1B:30:E5:E6:61:F8:8B:E0:09:24:7F:E4:CD:63
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer:       /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial:       019F90FEBF977B1A72BDAE40BA5ED92E456D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number:          1215
Signing time:             Thu 23 Jul 2026 22:00:41 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:41 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:41 +0000
Files and hashes:         1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: Nm6mbYLddqHqvR8Z5cHYFCpumcFWRklVT6Ygx2CoT30=)
                          2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=)
                          3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
                          4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=)
                          5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:bf:97:7b:1a:72:bd:ae:40:ba:5e:d9:2e:45:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
        Validity
            Not Before: Jul 23 22:00:41 2026 GMT
            Not After : Jul 24 22:00:41 2026 GMT
        Subject: CN=cf0192202d8c1b30e5e661f88be009247fe4cd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:2a:05:97:9e:7b:37:33:d6:d0:5b:b8:90:
                    72:2a:9e:e5:09:95:eb:04:74:93:7a:e0:ff:42:4c:
                    67:f6:22:b1:91:34:62:27:09:91:0c:d2:6f:15:d6:
                    72:bc:65:54:13:7a:95:df:e0:8b:ed:70:4b:4b:c3:
                    b7:a9:85:8d:63:d3:42:dc:82:60:ea:3b:ca:b1:93:
                    cc:79:16:a8:15:85:ea:89:bc:0c:52:95:97:8a:3d:
                    fd:f7:16:d5:da:be:93:c9:25:32:d0:5b:13:34:61:
                    7b:65:e9:d8:55:90:22:77:5c:13:71:94:9d:85:45:
                    e3:bb:ba:d8:1b:d7:ed:b3:ca:18:35:0c:d7:1d:3d:
                    e5:99:ef:94:40:59:3c:8d:3e:da:30:e4:cd:43:87:
                    2a:29:ce:0c:af:eb:89:a6:2f:74:43:10:e2:a2:98:
                    dc:be:69:24:54:01:28:b5:52:4d:74:3c:a7:9c:7e:
                    54:41:31:a4:e7:d7:59:f3:58:54:d1:1f:32:be:bc:
                    2a:a2:cb:2c:ff:79:12:a1:72:22:fd:16:96:28:64:
                    4a:34:c8:fd:d5:31:52:39:9f:87:63:1e:6b:f8:2c:
                    83:c2:c8:98:fa:b3:67:c9:48:26:0e:9a:8c:6c:4f:
                    5f:83:21:df:7b:18:3e:03:79:e5:b4:36:ac:e4:42:
                    93:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:01:92:20:2D:8C:1B:30:E5:E6:61:F8:8B:E0:09:24:7F:E4:CD:63
            X509v3 Authority Key Identifier:
                keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:55:dc:b6:0a:2b:1a:12:39:e7:81:5c:70:67:c2:3d:b4:22:
         a4:48:3d:30:79:09:67:9f:0d:4b:ac:b2:37:4e:43:6e:b5:6d:
         82:e8:b0:bf:f7:b9:38:6c:e7:ae:52:9d:bf:1d:3f:e2:aa:07:
         1c:14:fe:f9:09:75:59:9a:41:96:42:58:0b:fe:5f:5a:f2:f6:
         b0:cf:e3:43:06:b5:e8:75:06:da:90:04:ef:cb:1d:22:ac:27:
         3f:1c:5a:f5:4b:64:7e:3d:2b:64:e4:a6:ab:23:5d:2c:d8:a9:
         c8:5c:f4:3b:a4:4c:13:65:f6:1f:5c:82:59:47:5e:6a:4d:1c:
         cd:14:a0:13:57:c1:33:cc:c5:c7:0c:31:2f:06:32:be:15:00:
         15:41:3d:8d:0e:fe:56:08:3b:a3:82:f8:5c:af:21:12:67:c2:
         6a:f3:11:a4:d3:2d:1e:89:56:19:93:c2:46:84:b9:55:5c:1e:
         d1:cd:87:fc:15:a0:b2:04:bb:e2:a4:c8:5f:37:de:1f:4a:d1:
         70:21:9d:bf:7f:70:b6:08:a9:4a:ce:f7:8c:f4:c3:17:55:7a:
         3f:b3:1f:f5:9e:88:4b:d2:80:fe:4c:82:b8:bf:10:d7:dc:df:
         d2:d3:66:23:3f:88:49:15:3d:d2:0e:d3:ed:b9:cf:17:a8:c8:
         f2:f3:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:47 2026 by rpki-client