Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File:                     KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier:          S0tZGAu8gR81oSmBsrp9m+NK3IkiblcyvJG283Q48ig=
Subject key identifier:   FA:A4:4A:9D:58:A3:87:BF:23:BC:5F:24:8F:7B:A8:51:D2:1E:3B:FB
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       019F36E0C0E238459E3253FB2533F756EE1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number:          1193
Signing time:             Mon 06 Jul 2026 10:02:06 +0000
Manifest this update:     Mon 06 Jul 2026 10:02:06 +0000
Manifest next update:     Tue 07 Jul 2026 10:02:06 +0000
Files and hashes:         1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
                          2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
                          3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
                          4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
                          5: JZY_foOujAs2S8oyUiHgzJmfQdc.roa (hash: DgfisKHYgXWyrC09kLGXsPVkL/aoRfMRq+KSAiwmCN4=)
                          6: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: wYlIb2XMOFkbFxfLO9vuw4z4HRMWUqyP0xHXn5HTZbs=)
                          7: fEVKCWfXS81UhHXs6FzXRgVVlS0.roa (hash: DYXjiwoD9ieXBJq5p3EJXuBIjNeNxc0egoZ1sUSDsuY=)
                          8: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 10:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:e0:c0:e2:38:45:9e:32:53:fb:25:33:f7:56:ee:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Jul  6 10:02:06 2026 GMT
            Not After : Jul  7 10:02:06 2026 GMT
        Subject: CN=faa44a9d58a387bf23bc5f248f7ba851d21e3bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:66:09:ab:8b:da:ed:93:a4:50:bb:40:19:
                    d1:d8:bd:7e:c2:d6:47:c7:f7:2f:3a:b5:95:17:64:
                    39:81:0a:7c:ae:fd:24:60:ec:50:b1:cd:12:f0:06:
                    8f:fa:64:4a:8a:3b:17:91:1f:50:06:2c:79:10:66:
                    e4:71:6f:af:5b:3e:64:37:62:34:a3:da:a2:27:e9:
                    56:28:02:bc:7d:74:f1:ab:21:96:dd:17:26:5e:55:
                    c6:fe:10:b9:13:f3:50:c1:77:5b:9c:49:37:1b:d0:
                    6b:58:fd:67:df:68:47:e6:5e:57:b6:10:4a:01:62:
                    12:7f:91:0e:ce:25:70:59:4d:52:68:24:ba:15:78:
                    28:78:95:67:be:07:0b:c7:0d:3f:6f:1e:f4:da:0e:
                    0b:25:d8:b2:87:52:d9:92:70:25:c5:96:9d:9c:6a:
                    d4:43:54:f2:a8:16:e8:e0:81:3b:2d:70:a9:73:46:
                    9e:c3:d3:bd:63:42:39:b9:d8:a1:cc:38:93:6c:24:
                    a0:eb:97:f5:4c:76:47:83:d2:41:8a:aa:60:54:f9:
                    74:76:1a:b8:25:63:80:ad:d7:93:7a:0f:1a:5b:0e:
                    f3:07:dc:8f:ff:e1:e2:34:f9:e7:9d:59:ad:67:5f:
                    e5:a6:2a:62:85:5a:0f:3b:54:f5:62:e7:7c:15:80:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A4:4A:9D:58:A3:87:BF:23:BC:5F:24:8F:7B:A8:51:D2:1E:3B:FB
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:d7:9f:a3:4f:45:be:b0:fd:73:cf:e4:f7:65:a5:13:e2:
         0a:31:8e:8e:87:1d:45:e4:30:1c:e2:98:0a:a9:ae:40:1b:a6:
         a4:3f:29:25:a9:ab:95:9f:96:68:4e:da:79:55:cb:f6:ca:1d:
         b3:83:4f:94:d4:62:2b:6f:e5:18:57:f6:5e:6f:c9:b3:65:46:
         2d:60:fa:0f:fc:74:9d:40:7a:03:14:1b:14:da:5f:cc:f0:a5:
         84:6b:2e:0b:52:f3:a5:07:2e:7e:01:4f:3e:ea:60:d9:07:9a:
         83:2e:0e:a2:f1:26:ef:2b:b8:7b:94:8e:09:1a:6f:57:05:d1:
         34:58:b6:a5:0b:4a:bb:ff:2b:20:19:65:7c:9d:91:4e:06:76:
         86:ab:56:b5:bb:b7:0d:2e:bb:ca:c0:5c:a9:43:fb:12:38:8d:
         47:8e:20:66:de:e4:6a:01:c9:16:44:a6:28:d3:a0:df:9e:b8:
         78:60:c2:06:fb:3f:a6:24:fd:f0:2d:bb:7d:c8:fd:04:a4:1d:
         23:db:2c:85:b3:19:cd:a2:e1:12:de:23:78:58:74:e3:0b:21:
         f8:5f:3b:9c:e9:cd:8e:27:23:30:bd:7e:2a:72:cb:70:5b:ec:
         1b:c0:8f:fe:c4:17:11:62:89:f4:7c:f7:96:c0:fc:b7:39:2e:
         93:27:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:31:35 2026 by rpki-client