Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File:                     kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier:          nTfcK9NJlHHNASnria1V0q1+FxRzQGXbffBlF0a5eAQ=
Subject key identifier:   C2:0F:8C:78:5C:05:AC:44:3D:60:BF:4E:51:99:9E:46:EE:AF:35:DF
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer:       /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial:       01A003CBB3948A9B8668F2F30908E3EDF2EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number:          111D
Signing time:             Sat 15 Aug 2026 05:01:16 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:16 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:16 +0000
Files and hashes:         1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: sAVONBpwMEGcY9ppChzWWDVXm+GjL2UU0XranHw8I/c=)
                          2: qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa (hash: WKJf5bBFt3vRZjUBsw0y9RXB09W0E9StehXTEF8mDn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:b3:94:8a:9b:86:68:f2:f3:09:08:e3:ed:f2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
        Validity
            Not Before: Aug 15 05:01:16 2026 GMT
            Not After : Aug 16 05:01:16 2026 GMT
        Subject: CN=c20f8c785c05ac443d60bf4e51999e46eeaf35df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:a5:84:21:56:92:cb:dd:1a:d7:64:b5:23:
                    96:ae:b6:df:9b:79:76:53:57:3a:fb:89:82:9d:bc:
                    f1:89:3f:76:96:5b:9d:f4:98:00:57:b0:b2:79:9d:
                    be:ef:76:88:e1:57:58:67:08:23:e8:45:6b:1b:d4:
                    d8:ad:54:da:bc:87:e4:a4:ef:c8:74:fe:ef:63:d7:
                    ff:a6:a4:03:46:ed:9e:1a:af:2d:25:84:1c:03:7f:
                    1d:41:a9:31:a3:fb:86:ea:57:51:6b:cf:96:a6:64:
                    ad:a8:d8:68:61:1a:85:36:c7:b0:bb:b1:dc:14:15:
                    79:b7:8e:66:22:3d:8c:3a:ab:ba:e9:71:39:3e:47:
                    52:54:cc:e5:51:db:08:0e:00:fc:4a:4b:cd:30:0a:
                    46:af:a4:c3:86:1b:86:5f:b0:8f:f9:16:a4:f5:0a:
                    4c:08:d9:b8:6a:e8:a3:de:0e:11:2e:8c:61:18:2f:
                    39:35:87:96:0d:ed:da:89:57:90:9f:10:68:b8:dc:
                    b9:23:9c:c2:33:5d:f8:53:51:a0:da:4f:77:df:7d:
                    d4:47:15:82:60:a5:8c:53:46:f7:20:a4:45:c6:80:
                    63:da:61:32:f2:d5:4e:9c:a6:36:6f:f2:7d:20:5f:
                    fd:5a:35:20:2c:37:31:45:9b:a0:a1:76:e4:09:0d:
                    c3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0F:8C:78:5C:05:AC:44:3D:60:BF:4E:51:99:9E:46:EE:AF:35:DF
            X509v3 Authority Key Identifier:
                keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b4:09:f1:02:84:2f:ba:c3:d1:44:48:57:31:bc:f7:e1:e2:
         e8:6a:eb:20:ad:d0:aa:c7:f7:6a:f7:68:4b:47:5f:1c:ed:fd:
         72:25:a6:f6:c2:b7:2d:23:0e:8e:d2:e5:6f:2c:bf:a0:69:32:
         6b:ba:a6:9c:47:c0:5b:b7:b5:5c:2f:82:41:c1:42:4a:fd:1e:
         f7:fb:c4:bf:e5:a7:b7:43:26:46:f2:26:f0:f0:00:ef:90:6c:
         e5:cc:c0:52:d5:ec:53:20:0e:c2:a3:f3:13:13:03:da:99:d2:
         f4:60:fa:52:6a:c9:e4:8f:fe:50:4b:3b:08:3f:17:f9:6c:db:
         01:12:f6:4d:88:44:27:71:67:51:bb:6f:38:b0:a9:a6:2c:40:
         14:4c:8c:86:6e:b3:aa:ad:6c:52:5c:35:3c:72:4c:cb:63:73:
         60:6c:d3:1f:56:43:f9:72:32:bf:dd:b5:0f:56:a4:4b:a1:27:
         fd:03:9b:4f:3f:cc:b5:20:f9:d0:ad:54:ee:d2:74:2a:8f:ed:
         7e:6d:81:26:4e:55:20:76:35:13:b1:39:55:13:e4:0f:4a:02:
         d9:25:7a:f9:81:2e:9d:97:12:73:21:2a:89:12:72:35:6e:61:
         06:9b:3d:f0:cb:3c:7e:bf:58:c5:34:32:70:7b:2e:8c:30:e5:
         69:79:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:36:28 2026 by rpki-client