Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File:                     K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier:          vIzR6qDOdCF64fTr/saobeIZ69wLRSruOGwZyTLZADU=
Subject key identifier:   15:71:58:F8:71:08:C8:48:6D:11:59:35:6C:21:39:AC:53:A9:AC:B0
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer:       /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial:       019F823081E2754BF5CF33126C8BA5D4995C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number:          19CB
Signing time:             Tue 21 Jul 2026 01:00:44 +0000
Manifest this update:     Tue 21 Jul 2026 01:00:44 +0000
Manifest next update:     Wed 22 Jul 2026 01:00:44 +0000
Files and hashes:         1: Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa (hash: XtcTVzHETxkCw8mwBAqZHbUKLVnvKh4s/PETyzl7Dqc=)
                          2: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=)
                          3: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: 9FXu66s8N1SZqjgB7q0nSl1+yKQRt691KvfpwaHzrZk=)
                          4: SsHf06xOWrlCWVTG69AgmfaIF38.roa (hash: WFulXiv+vBDYVgDZOZP+zJDwRj47bNqs7i96m1/EHoY=)
                          5: saXncTu8Jyn9wHWn8gtxElcn7uk.roa (hash: IsO7tvAcqIRqvr9qvI5jdboB3g/FW6hvUsM1vnYO7yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:30:81:e2:75:4b:f5:cf:33:12:6c:8b:a5:d4:99:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
        Validity
            Not Before: Jul 21 01:00:44 2026 GMT
            Not After : Jul 22 01:00:44 2026 GMT
        Subject: CN=157158f87108c8486d1159356c2139ac53a9acb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c6:4d:5a:0d:1f:fc:dc:b6:19:e2:76:5f:0c:
                    be:9a:7c:a7:c5:2f:a2:f6:fb:f5:05:87:e7:39:4d:
                    7e:3d:d5:56:e4:ed:59:84:f7:79:42:b1:d6:95:97:
                    58:0e:17:be:49:62:d3:32:8f:d9:d6:0c:2d:8f:c6:
                    6a:23:44:a8:7f:14:07:8e:14:91:23:4c:00:f7:b6:
                    64:a4:90:f9:3f:1a:2a:3e:16:19:82:bd:de:09:d1:
                    8e:79:da:00:f4:28:d9:4f:b4:e6:97:59:26:87:a8:
                    b4:ad:52:57:01:77:b2:3c:0e:ef:7f:e2:74:f3:a1:
                    4d:63:25:b9:28:17:2c:a9:ef:b0:14:06:87:b4:32:
                    56:b6:a2:1a:f5:e9:7e:aa:9b:a1:1a:35:81:24:e1:
                    7d:07:8c:53:fc:43:33:e5:9f:73:d7:26:4e:5e:91:
                    67:7f:be:c2:2e:06:17:d9:1c:d3:f7:2f:66:ad:41:
                    86:66:73:74:7c:13:b5:b4:df:21:25:37:59:dc:d7:
                    fc:07:0c:d7:52:c1:8b:fd:4f:04:c5:6e:90:be:2b:
                    26:7b:88:b5:5e:81:a9:11:d3:4c:0d:9c:f6:dd:87:
                    96:f2:22:b9:56:ef:3f:ae:05:5f:05:a2:ef:ae:2f:
                    f4:8b:3b:1d:51:da:02:c8:61:2e:86:bf:e1:5e:d9:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:58:F8:71:08:C8:48:6D:11:59:35:6C:21:39:AC:53:A9:AC:B0
            X509v3 Authority Key Identifier:
                keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c2:a5:fd:e4:35:08:42:dd:02:0b:da:30:cd:f1:7e:8a:61:
         78:f5:8d:63:35:3d:46:67:c7:87:2e:4c:fa:3a:34:31:c0:f5:
         b3:17:9c:d1:0c:72:64:85:b9:a8:f0:9d:2e:75:bf:16:ab:71:
         6d:d5:18:4b:f5:d9:c5:bf:1b:50:a5:79:a0:ca:d2:d6:08:31:
         86:91:77:a3:a8:fe:95:f7:34:37:4a:9b:0d:38:43:c9:74:33:
         44:0f:80:db:a8:ad:5a:1b:f1:bc:19:d3:a0:05:d0:cd:39:ce:
         ae:1b:63:73:95:3f:82:36:4f:13:1e:04:42:c8:3a:8d:3b:3e:
         44:d5:fb:d7:a9:2b:13:c9:91:30:07:b5:e7:b1:da:fc:2f:52:
         6e:0a:3b:6d:4e:53:04:2e:ce:6b:25:0b:bf:76:64:0d:c5:4a:
         12:be:f9:6d:a4:f0:e9:65:6d:83:6a:e2:ce:e5:49:52:26:28:
         f8:35:33:40:d5:9c:58:2b:48:47:02:53:3a:04:ce:c5:80:88:
         1f:49:bc:6a:d5:5e:5b:f1:da:17:1e:20:ca:f1:60:11:2e:ab:
         cb:cb:33:29:f4:d2:c2:09:23:c5:c5:b5:c5:97:2d:1f:61:b2:
         65:ce:30:fe:74:ee:0d:ea:ee:6a:0c:aa:fa:c6:0c:64:d3:c7:
         e0:af:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:53:12 2026 by rpki-client