Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
File:                     KZkwB8fJLfYXjny0MYP9f1KlJtg.mft (raw, json)
Hash identifier:          25wSZzLt3kwIsyRCq7a4njnR7IY0m7kFQXp8UDciQF0=
Subject key identifier:   00:25:49:05:BE:DD:B8:58:39:5A:38:5C:C6:6E:61:3B:C6:BA:47:C8
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Certificate issuer:       /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial:       01A002EF8DAA45D5DCBFD12C28910AF7E796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
Manifest number:          07B0
Signing time:             Sat 15 Aug 2026 01:00:48 +0000
Manifest this update:     Sat 15 Aug 2026 01:00:48 +0000
Manifest next update:     Sun 16 Aug 2026 01:00:48 +0000
Files and hashes:         1: 7f4UvQlMdpfAbI5t8bFTk5iRj8k.roa (hash: /N2n+SGiRBz3V3eyWEIptUhy7tOM9oDQMEZwfy867yE=)
                          2: CGspQAEXscYtnhUkcO43B4rOMYI.roa (hash: ZmpcN0BqbrZBIrGn5PsZ/DSc38P9usOvQmrKlG150S0=)
                          3: JdmDASsiVF3OIVzqa3C7Cim1k98.roa (hash: nFwnLYcc5xw59Kim5t3Ysus4IUlGUDLjCzJ6lO8Sg5o=)
                          4: KZkwB8fJLfYXjny0MYP9f1KlJtg.crl (hash: uI6JIK4RIbHSs1W5z8ogt3u2q6mcnAB0itC7DA35Q00=)
                          5: c_SCSSOMfndQeyUkFaC27pfW1mU.roa (hash: uAY189SdMJyDwdqEHdr62YdMVXHkgzdNjAsXqKard7o=)
                          6: zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa (hash: QDKMvUQqB0HqtMyuZtPJ5BCeeeIwdd+NrKPpEKtzi6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:8d:aa:45:d5:dc:bf:d1:2c:28:91:0a:f7:e7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
        Validity
            Not Before: Aug 15 01:00:48 2026 GMT
            Not After : Aug 16 01:00:48 2026 GMT
        Subject: CN=00254905beddb858395a385cc66e613bc6ba47c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:ec:d4:af:70:b1:65:06:49:03:bc:56:48:
                    c6:1d:8d:f3:1a:41:cd:45:8d:d4:68:25:35:4f:eb:
                    e1:5d:2c:b3:c8:a2:eb:10:8a:8d:11:a0:b1:0b:7e:
                    45:ee:bc:c2:78:c3:84:e5:33:cb:21:dd:07:42:59:
                    02:f9:a9:40:6d:c5:cc:9d:64:bb:d3:7f:fb:4d:84:
                    c4:6b:42:bd:82:49:f2:f9:e8:c0:e4:a3:98:66:4d:
                    9b:7a:63:d4:40:bb:f1:75:ff:0d:bf:a6:09:6c:f9:
                    28:48:34:48:22:90:7c:c3:d2:49:a4:47:26:a4:2e:
                    93:dc:b9:9e:89:56:57:55:b6:d7:30:67:80:d0:d0:
                    28:f4:3e:b7:57:bd:6f:4f:f4:4b:a1:07:93:9b:41:
                    bd:ef:ee:4e:af:08:f6:00:0e:97:b7:af:c8:ba:bb:
                    7d:25:fb:a6:9c:87:34:68:58:9e:63:02:c9:28:cb:
                    60:7a:04:a9:e5:0b:e8:b2:78:b9:59:21:67:09:01:
                    d5:4f:e7:59:9b:c4:a6:d9:10:a3:38:ba:d6:b2:f3:
                    b5:fe:5f:8f:88:e7:7d:b5:fc:78:7b:28:35:8e:39:
                    7d:97:c0:5a:08:b7:88:96:b6:cf:1d:3f:f5:11:37:
                    d9:c9:1d:04:70:b1:44:3f:88:40:cc:3e:f5:dd:23:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:25:49:05:BE:DD:B8:58:39:5A:38:5C:C6:6E:61:3B:C6:BA:47:C8
            X509v3 Authority Key Identifier:
                keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:63:7c:3c:66:7e:7c:60:3a:e9:a5:46:3c:67:d9:a0:d7:15:
         6c:8a:6e:f1:78:80:54:fb:9f:14:08:f9:ff:16:00:da:5f:81:
         10:64:11:94:31:28:f6:70:04:e5:8e:6c:eb:a4:19:46:13:0e:
         39:62:c8:81:be:01:e9:ac:03:3e:a1:65:78:2b:a4:d2:f5:8a:
         6e:f1:25:ef:63:da:05:48:d0:ec:20:2d:87:46:95:3f:a1:6f:
         da:ee:67:9e:ec:3f:71:cf:8b:14:5b:2a:18:19:6e:00:03:49:
         18:b1:0a:a7:6f:f4:2d:59:e3:fa:f1:14:18:96:c4:8b:9d:3e:
         8a:4a:31:01:04:b9:b9:7f:94:e9:1f:55:5f:ea:84:1d:23:81:
         a0:1c:e2:45:d1:56:c7:07:6d:34:eb:2e:2c:33:bb:d0:79:11:
         6b:b7:d8:d8:60:75:c0:49:f6:24:a9:d5:5d:82:3d:b3:60:85:
         2c:09:c7:37:3d:14:8f:4e:fb:89:58:e8:75:35:91:8d:71:0f:
         ed:52:f4:93:b8:4e:f3:4c:43:8b:1b:f9:03:8a:6f:73:52:1f:
         3a:5c:e1:f5:e6:d1:fe:e2:46:02:19:c7:1e:d0:85:8e:01:16:
         ba:65:8b:94:4d:63:fc:1f:e1:20:89:f3:ac:8d:96:80:08:27:
         36:0d:6a:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAC742qRdXcv9EsKJEK9+eWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTkzMDA3YzdjOTJkZjYxNzhlN2NiNDMxODNmZDdmNTJh
NTI2ZDgwHhcNMjYwODE1MDEwMDQ4WhcNMjYwODE2MDEwMDQ4WjAzMTEwLwYDVQQD
EygwMDI1NDkwNWJlZGRiODU4Mzk1YTM4NWNjNjZlNjEzYmM2YmE0N2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPjs1K9wsWUGSQO8VkjGHY3zGkHN
RY3UaCU1T+vhXSyzyKLrEIqNEaCxC35F7rzCeMOE5TPLId0HQlkC+alAbcXMnWS7
03/7TYTEa0K9gkny+ejA5KOYZk2bemPUQLvxdf8Nv6YJbPkoSDRIIpB8w9JJpEcm
pC6T3LmeiVZXVbbXMGeA0NAo9D63V71vT/RLoQeTm0G97+5Orwj2AA6Xt6/Iurt9
JfumnIc0aFieYwLJKMtgegSp5Qvosni5WSFnCQHVT+dZm8Sm2RCjOLrWsvO1/l+P
iOd9tfx4eyg1jjl9l8BaCLeIlrbPHT/1ETfZyR0EcLFEP4hAzD713SNdCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAlSQW+3bhYOVo4XMZuYTvGukfIMB8GA1UdIwQY
MBaAFCmZMAfHyS32F458tDGD/X9SpSbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODkt
MWU4MjlmZmExYzNhLzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODktMWU4MjlmZmExYzNh
LzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2N8PGZ+
fGA66aVGPGfZoNcVbIpu8XiAVPufFAj5/xYA2l+BEGQRlDEo9nAE5Y5s66QZRhMO
OWLIgb4B6awDPqFleCuk0vWKbvEl72PaBUjQ7CAth0aVP6Fv2u5nnuw/cc+LFFsq
GBluAANJGLEKp2/0LVnj+vEUGJbEi50+ikoxAQS5uX+U6R9VX+qEHSOBoBziRdFW
xwdtNOsuLDO70HkRa7fY2GB1wEn2JKnVXYI9s2CFLAnHNz0Uj077iVjodTWRjXEP
7VL0k7hO80xDixv5A4pvc1IfOlzh9ebR/uJGAhnHHtCFjgEWumWLlE1j/B/hIInz
rI2WgAgnNg1q0A==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:30 2026 by rpki-client