Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File:                     KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier:          J1u9+o/7J7wlOA8EAhPAueO/LvWionLTqLjjnNlsB0o=
Subject key identifier:   1C:A2:DC:0C:97:A3:86:39:C9:62:61:4D:0F:D6:A2:98:3F:DF:35:0F
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       019F90FEDA0302686E6A74385C2F4EA94932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number:          11F7
Signing time:             Thu 23 Jul 2026 22:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:48 +0000
Files and hashes:         1: GW786ZAo9o6aG6R8or6IyYUM610.roa (hash: 5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=)
                          2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: I8LE1BwSjXs5bsF2gKFHZYVSCJ/3pyRuTVVSjetoL9A=)
                          3: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (hash: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w=)
                          4: oidyzZNtucuXDORhUnc_enodjqc.roa (hash: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:da:03:02:68:6e:6a:74:38:5c:2f:4e:a9:49:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jul 23 22:00:48 2026 GMT
            Not After : Jul 24 22:00:48 2026 GMT
        Subject: CN=1ca2dc0c97a38639c962614d0fd6a2983fdf350f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:5a:53:13:36:cf:36:d1:d5:f9:45:27:f1:
                    1d:f1:b1:3d:8e:1b:20:3b:f2:e0:5f:71:fe:0c:05:
                    3c:f4:d1:90:4f:c3:e8:03:ed:af:83:f8:a8:9d:7e:
                    48:14:54:10:67:b0:79:5a:84:c8:49:f3:28:f9:5a:
                    9c:43:47:00:6d:d2:9a:39:48:84:9b:f9:0e:59:1e:
                    44:8a:58:49:29:be:13:5f:e9:77:86:7a:c7:92:21:
                    bd:bf:83:1d:f6:71:cf:30:bb:6d:7e:88:70:22:75:
                    e8:fd:39:f2:76:dc:d3:6a:ad:8c:b9:bb:40:70:5a:
                    43:45:42:28:23:04:19:50:61:84:a7:b8:a1:b1:3a:
                    e9:83:10:10:28:2a:72:36:94:6a:7d:5e:b3:ee:10:
                    4f:ae:1a:b8:cb:f9:61:70:54:34:7d:71:fd:c9:29:
                    1e:a4:98:b0:ee:1d:21:e4:5c:7b:14:c6:46:ab:3e:
                    d9:fe:a3:60:6d:e5:68:27:a1:8c:20:27:38:9b:25:
                    72:93:8c:63:3e:c0:5e:f7:a1:6f:d0:29:87:57:58:
                    a6:5d:8a:3a:c8:bf:66:32:38:d9:c9:d7:5b:1d:37:
                    da:8e:a8:b1:6f:2a:6b:4d:50:bb:ac:7b:08:b8:52:
                    be:3e:83:f5:78:01:1a:ff:47:b9:0b:05:27:45:12:
                    79:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A2:DC:0C:97:A3:86:39:C9:62:61:4D:0F:D6:A2:98:3F:DF:35:0F
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2d:c9:75:82:2c:18:1d:28:3d:21:bd:c6:db:06:dd:36:ad:
         a0:82:81:2e:1b:81:b4:78:97:d3:65:78:49:eb:00:00:54:11:
         1e:e7:c9:72:40:90:b4:d2:65:d4:6f:3e:9e:ca:48:92:f8:79:
         6a:0c:b8:e4:cf:41:e8:f1:a6:de:00:87:24:56:46:b2:b4:aa:
         bb:f7:3d:f6:9f:ec:cb:6c:a6:0f:39:97:6b:87:79:b3:20:d1:
         f0:fe:1c:fb:6d:92:59:e5:d2:20:3c:d2:00:d0:73:dc:94:60:
         bc:34:df:c5:cd:af:a1:71:5f:2d:09:77:d0:73:31:77:12:1c:
         ba:25:11:25:1f:65:2a:9c:28:97:89:fc:04:ff:b1:0c:51:05:
         48:d1:0b:8c:40:92:dd:0c:af:b0:81:f7:97:26:27:7d:d2:13:
         a9:0d:b8:72:c7:d0:e9:c6:c9:fb:96:c2:8a:f4:db:ab:87:74:
         c0:79:8d:69:2f:1e:f6:86:a1:f9:30:4a:0a:c5:00:dd:b8:89:
         72:ee:ba:10:14:32:31:fa:be:b9:47:69:e2:5b:a3:cb:b1:8f:
         54:04:b1:4b:26:92:3c:05:a7:a6:6d:02:f7:87:8f:08:b6:0b:
         ed:35:39:e3:db:29:0e:43:69:23:c3:9b:2c:7a:9a:c2:67:04:
         7f:58:9b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:41 2026 by rpki-client