Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File:                     1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier:          Z5zbthE9wDJhfscWNg0VzbktOQDJzPWGEXr6767sa2Q=
Subject key identifier:   40:F4:E6:7E:74:4A:36:2D:01:CE:E7:AE:FF:A2:5F:52:8A:2D:2E:53
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer:       /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial:       019F17C2EF9BAF47A8A7C5C22077F51C4246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number:          16BD
Signing time:             Tue 30 Jun 2026 09:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:19 +0000
Files and hashes:         1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: O+VDznCJKvobVoM8h8Jm9gCUX9+hOAJ7eVVGSTJ2Z3U=)
                          2: xMdg9tf8PX3rEEL_NSkeA_5BMoE.roa (hash: Fuv5QDlGS8lpVHre1lLFiZmSKdkP1J409k7DUxmhGPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:ef:9b:af:47:a8:a7:c5:c2:20:77:f5:1c:42:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
        Validity
            Not Before: Jun 30 09:01:19 2026 GMT
            Not After : Jul  1 09:01:19 2026 GMT
        Subject: CN=40f4e67e744a362d01cee7aeffa25f528a2d2e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:2b:8a:df:db:da:4b:79:e6:39:7d:a0:ea:
                    cf:aa:ad:e8:b4:20:d1:83:b0:0e:36:d3:44:22:41:
                    a0:13:27:df:d9:a7:36:e3:a0:42:eb:38:cf:08:9f:
                    9e:16:be:09:89:87:22:10:d6:7b:97:f4:86:95:8e:
                    f3:65:4b:a9:0e:66:9e:08:25:66:f0:dc:ae:b6:d7:
                    07:6e:e6:ae:79:89:17:7e:db:69:dd:bd:9d:2b:dc:
                    c7:0d:60:e6:ec:d3:5e:ad:e0:26:b8:85:4a:8d:d3:
                    db:73:9c:6f:16:e7:b3:23:e0:61:d4:77:10:a2:df:
                    d2:88:56:49:2a:3f:15:bc:df:1f:a6:f5:af:d3:32:
                    1d:34:23:6d:0d:50:94:f2:50:a9:02:77:66:d4:36:
                    61:92:c7:c4:43:27:bc:63:dd:cd:25:81:6a:91:f0:
                    72:e1:2b:cf:87:28:ef:99:9c:17:64:38:34:4a:b8:
                    bf:46:5a:61:92:b8:62:6b:4f:8f:83:a0:d4:ed:87:
                    34:10:79:01:9e:ce:f2:3a:f1:0b:1a:83:33:6f:67:
                    c2:bf:ca:04:a8:a7:ac:0f:1b:b3:89:7e:03:f2:c2:
                    0a:d6:6b:43:cf:53:5d:21:3f:25:ae:a7:25:3c:25:
                    ee:da:5c:b5:ae:9d:74:05:b7:bd:ea:ed:d7:a5:44:
                    fd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F4:E6:7E:74:4A:36:2D:01:CE:E7:AE:FF:A2:5F:52:8A:2D:2E:53
            X509v3 Authority Key Identifier:
                keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:87:48:75:db:e5:82:2d:19:c5:5b:74:1d:b3:6a:c0:3b:
         75:14:f5:ec:50:60:2d:56:67:d8:f1:5b:59:41:e7:ff:88:6e:
         ab:52:4d:84:d7:9c:de:37:94:0e:16:63:49:d4:10:c8:27:d1:
         ed:b2:8d:32:95:54:fe:01:90:8d:72:8d:82:10:05:67:07:d4:
         55:cd:5a:1f:64:a8:73:8e:6b:55:fb:1f:b2:30:b5:12:03:57:
         52:36:88:04:99:e0:2a:3f:cc:2c:1e:39:5d:b0:4d:86:bc:30:
         83:be:32:53:94:50:2c:6f:98:9f:2d:61:6f:6f:89:58:50:b9:
         76:6d:77:02:30:a9:e7:3f:a2:b4:01:d2:b7:e0:20:7e:ae:ad:
         a2:46:23:33:fa:80:68:8d:b3:ea:5a:62:06:08:ab:3e:ef:b8:
         99:dc:26:0e:44:e3:c0:a8:81:d3:c1:05:0a:28:9b:0b:2a:60:
         0d:f6:23:4d:31:51:ad:fb:16:9b:b6:b8:9c:2f:27:9b:c8:04:
         03:2e:d9:40:c6:ed:26:c8:31:6c:87:5e:c2:22:f0:56:af:a9:
         90:a0:9d:d0:0f:b4:f9:d0:88:28:4f:e7:c5:5a:90:ec:8f:23:
         b8:9d:4f:76:ef:d0:fe:aa:42:30:83:cf:4f:77:cd:9b:8b:4c:
         97:03:b1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:25 2026 by rpki-client