Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File:                     KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier:          92Xa34FPVZImntyNQKsJJz5VADc3E5whYBn8t9Mw3RY=
Subject key identifier:   9E:9A:99:19:FA:53:9E:EB:E2:D2:3A:ED:26:9C:5D:45:02:E4:99:51
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer:       /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial:       019E1F48166F252E9681A7D6453A3C3F7AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number:          0CEA
Signing time:             Wed 13 May 2026 03:01:18 +0000
Manifest this update:     Wed 13 May 2026 03:01:18 +0000
Manifest next update:     Thu 14 May 2026 03:01:18 +0000
Files and hashes:         1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: lnTf6yRbRO0GEs2j31D+3jzlzByhq0tSsANMDouSJEQ=)
                          2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
                          3: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
                          4: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
                          5: tg0TgMF_mOcJrDdgBYL-290G2-M.roa (hash: UjyXgWR1IlQdcA1RR5ThsgsI4c2xfE45PbnBDC6Sn6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:16:6f:25:2e:96:81:a7:d6:45:3a:3c:3f:7a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
        Validity
            Not Before: May 13 03:01:18 2026 GMT
            Not After : May 14 03:01:18 2026 GMT
        Subject: CN=9e9a9919fa539eebe2d23aed269c5d4502e49951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:6c:d7:8f:7f:28:ac:26:05:de:88:a4:f0:
                    34:9a:c2:1a:3a:9f:d2:49:dd:83:50:ea:67:bf:de:
                    ed:dc:a7:1a:ae:24:97:d1:86:9d:4f:c2:c2:c9:b1:
                    01:56:2f:fc:64:7b:fc:e1:1d:8b:c2:71:3e:ee:09:
                    75:52:08:b2:e9:bd:27:da:5f:41:7f:ae:52:0f:eb:
                    f4:38:14:d6:58:76:ca:ae:ef:5f:a0:83:78:ed:d0:
                    20:83:bd:f7:1c:ce:32:17:35:eb:ab:03:94:f7:fb:
                    77:9e:4c:9f:e9:97:59:48:36:99:89:39:ad:41:a4:
                    b8:75:38:d4:22:11:8a:6f:d1:76:41:99:a9:73:d3:
                    c6:60:94:39:c8:f9:48:f6:b9:3a:0b:56:44:22:2e:
                    cd:5b:f8:3a:a5:cb:fe:02:b9:ae:71:81:dc:57:75:
                    2f:c9:1b:f9:82:9c:de:1c:40:27:f7:1c:b9:7e:9c:
                    64:90:cf:5c:52:70:fe:b3:8c:91:fe:0b:76:4a:e3:
                    39:97:23:bc:e8:41:99:5e:7c:25:a6:1a:57:27:88:
                    9a:39:23:87:7f:6b:f3:11:38:58:0a:e8:98:88:07:
                    ec:83:55:f2:6d:4a:47:f8:fb:ac:67:ee:b7:6d:c6:
                    17:d6:1e:64:1c:67:1e:3a:f1:82:13:e5:ea:31:d8:
                    a0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9A:99:19:FA:53:9E:EB:E2:D2:3A:ED:26:9C:5D:45:02:E4:99:51
            X509v3 Authority Key Identifier:
                keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f6:ab:c1:0e:ba:7c:76:1b:23:2f:b6:9e:13:1a:0f:dd:a5:
         fe:0c:9b:0b:77:fa:a4:cf:cb:19:2d:2e:8b:fd:94:24:ed:b4:
         c3:76:d9:b3:8f:bc:0b:70:2d:80:69:54:cb:2a:6d:dc:4c:58:
         97:44:31:6f:39:8f:ce:b4:4e:71:bf:9e:13:19:35:f0:46:72:
         a8:66:51:0b:8d:0c:c0:68:6a:9b:eb:67:e1:51:ac:4e:c6:91:
         77:06:b6:df:d1:df:d4:60:48:d8:49:ec:5a:1d:90:f4:33:12:
         00:59:eb:a2:ba:f7:f9:43:a5:95:12:0a:c9:c3:a8:e6:30:28:
         c4:90:ff:67:c4:92:d3:40:05:db:12:ef:89:2b:78:f0:a7:c0:
         82:21:54:f3:13:99:6e:a6:8e:62:2a:f0:d9:ce:df:87:f3:f5:
         22:cb:b8:a7:88:64:d3:19:db:ac:ff:98:fb:bc:12:ff:1e:07:
         1b:00:48:0b:09:6e:bd:29:38:c9:d5:b6:87:c1:61:83:c4:bb:
         a4:1f:6a:05:4c:ad:69:b3:2e:95:3b:41:cb:c1:a2:93:9a:2f:
         74:ba:c4:0e:57:80:46:2d:b7:08:ce:98:5b:7a:db:89:4a:68:
         22:0a:49:6f:75:73:62:54:f5:33:78:6b:69:95:30:6a:68:eb:
         d3:e4:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:14 2026 by rpki-client