Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          eZ19NPjMGNGRMuVuQtoI4y4RQltXv6YXzowiJOj5myA=
Subject key identifier:   EE:5A:C1:A8:ED:AF:66:AA:7E:0E:E2:2F:1C:4D:CF:E7:D8:1E:01:21
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       019F8A581C151CBA9D561B3836D723BA1523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          16F0
Signing time:             Wed 22 Jul 2026 15:00:57 +0000
Manifest this update:     Wed 22 Jul 2026 15:00:57 +0000
Manifest next update:     Thu 23 Jul 2026 15:00:57 +0000
Files and hashes:         1: KwoH9rX0fG1WK7HpMnqPB23ssB4.roa (hash: sjYd4LRAPn0dfzC2/zot0w98zlOUul3pMhPUiDIGgp8=)
                          2: QE7PLDiHb0x2muKYuWtBYtxL0Ts.roa (hash: YpAKtMU8tI8U8IsGd+RqIJCWCNQwjIwLB/IARRYcudc=)
                          3: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: 5dH8dX1gTf1iiJgF1sKoDmVQ0XVft9T9e7T6LDcjyok=)
                          4: oi0HFw6JtNN08QaNsA8THU8Vbms.roa (hash: zHlUEhPLG1p2ScID/nk2LlCxjRARDuLVIC4jlOT5y58=)
                          5: sFgFPnQJtYAI4EUbnjw6_T-C6b8.roa (hash: ruPE7+aitW/C9n9h5OlbX5hnSAYFeh1OYL3ysBGOgGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8a:58:1c:15:1c:ba:9d:56:1b:38:36:d7:23:ba:15:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: Jul 22 15:00:57 2026 GMT
            Not After : Jul 23 15:00:57 2026 GMT
        Subject: CN=ee5ac1a8edaf66aa7e0ee22f1c4dcfe7d81e0121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d5:0f:90:c7:9a:96:63:5f:18:9a:72:ee:d4:
                    04:69:88:bd:d7:0d:e2:06:15:fc:b8:32:f4:c3:86:
                    ca:e5:0b:3d:53:55:13:63:4a:e1:f4:af:8f:9c:2c:
                    bf:d4:d5:6a:ff:a1:a0:e0:a7:f8:47:a3:cc:5e:76:
                    c9:df:05:17:e9:fa:e4:58:13:c0:ba:93:3e:44:03:
                    c5:25:4d:c8:93:ff:54:73:15:4b:28:cf:d1:1c:5c:
                    ea:91:f4:51:d4:37:00:59:30:e5:19:66:81:74:8e:
                    8b:a5:24:90:5d:0d:e0:a0:de:0a:01:4a:06:44:26:
                    d5:dc:e8:63:21:08:b8:25:25:89:45:7d:cb:bd:33:
                    bd:0a:3d:e4:86:35:c6:58:c8:af:02:1a:eb:c4:32:
                    4a:54:bc:25:78:75:6f:33:77:2c:ce:db:ec:0e:63:
                    82:ba:3e:98:90:32:9b:aa:ec:d8:6e:c7:d2:f6:e6:
                    ae:98:8f:90:49:8c:bf:32:72:b2:07:e1:1a:7e:c3:
                    a8:0a:10:91:4e:e9:eb:8a:94:12:d3:76:f7:13:1f:
                    cc:be:4a:c6:a6:19:77:33:0d:71:72:be:27:c1:e5:
                    17:e5:aa:98:29:0c:dc:9b:c4:30:c5:c4:9f:da:0a:
                    b7:bb:40:67:0a:5c:87:61:ea:9a:32:fb:1d:88:cf:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5A:C1:A8:ED:AF:66:AA:7E:0E:E2:2F:1C:4D:CF:E7:D8:1E:01:21
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:cd:f0:76:fd:c1:6b:b8:45:df:c4:37:ec:b2:40:c6:d3:
         fa:42:53:a1:90:36:00:ac:e7:c8:dc:51:77:d3:f7:21:a5:f9:
         cc:5c:2b:97:f1:de:43:5f:35:8a:2a:0a:85:e8:0e:86:44:36:
         d5:09:0b:45:83:b5:14:4d:c6:48:f9:72:de:59:6b:b3:f6:20:
         20:08:0c:23:8f:ae:08:c7:46:1f:66:6b:5a:81:a3:d4:0d:1b:
         e5:97:8c:02:0d:a4:6c:cc:29:f4:16:75:4f:ab:af:89:e8:69:
         1f:20:bc:0a:64:66:69:5c:2b:d1:17:e5:5e:72:2f:db:86:9c:
         fd:72:a1:20:2e:d3:78:f3:59:1c:21:1b:e1:4d:8e:d4:83:f1:
         9a:72:86:61:4e:46:ce:8c:76:d4:45:e9:79:3d:2c:36:af:05:
         bc:55:6c:46:96:ef:95:8d:ab:a3:12:5b:d8:69:51:d4:e5:b6:
         42:c4:c6:fd:04:dd:b0:ab:d8:f3:25:ca:93:fc:af:09:06:bc:
         41:89:47:54:ee:1d:ae:a0:58:61:ca:86:5c:2e:73:d0:e4:78:
         a6:27:a0:38:1c:aa:b4:74:35:f8:19:fa:79:67:de:1a:e6:25:
         f2:bf:c5:c0:dd:66:bf:a9:48:f3:d5:4b:ea:b2:1b:de:f4:75:
         d1:f1:6c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 20:24:52 2026 by rpki-client