Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File:                     k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier:          i49v8+tfOXomZcSk3gmH/imDPvYSoTFjYKIriSNonR0=
Subject key identifier:   A9:2C:75:35:E2:23:3A:5A:74:6B:05:5C:76:D1:AB:25:5B:4B:54:78
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer:       /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial:       019F9EF1696F586926D5676D63580B7A80EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number:          1433
Signing time:             Sun 26 Jul 2026 15:00:48 +0000
Manifest this update:     Sun 26 Jul 2026 15:00:48 +0000
Manifest next update:     Mon 27 Jul 2026 15:00:48 +0000
Files and hashes:         1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
                          2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: mWFS5YaT1HDk6ilFs8LufD9mweYSwB95vv/0edILDrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:69:6f:58:69:26:d5:67:6d:63:58:0b:7a:80:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
        Validity
            Not Before: Jul 26 15:00:48 2026 GMT
            Not After : Jul 27 15:00:48 2026 GMT
        Subject: CN=a92c7535e2233a5a746b055c76d1ab255b4b5478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:b4:ed:d9:0b:65:11:9e:7c:0e:70:22:4f:
                    c7:6d:7e:d5:c9:30:cc:3e:da:e7:67:69:fd:8a:ce:
                    1c:af:47:fa:4f:f9:3e:e2:6a:51:ad:7e:81:0d:6c:
                    57:c6:bc:49:84:71:ba:83:e5:41:18:b2:ba:64:9a:
                    a0:b9:99:10:ea:f7:d4:7d:86:10:9b:19:77:79:b8:
                    ec:51:8b:c5:29:55:59:b7:e5:b7:e4:42:2a:34:53:
                    21:95:99:3f:97:21:9b:87:a5:d1:b1:15:0a:29:6f:
                    fd:d2:28:c9:57:fe:9a:44:48:0c:a7:2c:8b:35:fd:
                    bb:83:fe:05:2c:86:99:58:39:a1:75:64:e1:3a:0b:
                    f8:3c:67:99:13:4b:a5:7a:77:5a:38:8c:d8:bd:b9:
                    40:d4:b3:a0:87:30:67:1c:89:e4:1d:b7:e5:3f:0e:
                    e7:e9:99:15:b2:6b:62:16:79:28:60:c2:b5:01:a7:
                    88:f4:60:65:7f:38:67:47:4a:16:8b:24:35:56:6c:
                    ff:01:3e:34:9c:44:93:4a:91:8c:71:c9:35:20:ea:
                    f5:72:cf:b9:f8:d5:43:29:06:82:02:1f:5f:b5:1d:
                    59:d8:42:2e:42:71:ea:ec:41:e9:fe:87:fd:ea:bb:
                    ae:ff:15:b8:52:8a:cf:18:ca:b2:60:df:81:5b:65:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2C:75:35:E2:23:3A:5A:74:6B:05:5C:76:D1:AB:25:5B:4B:54:78
            X509v3 Authority Key Identifier:
                keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:18:43:26:af:1a:54:fa:99:7c:7d:c4:46:a0:30:63:83:70:
         e8:d9:98:92:61:76:64:64:15:1b:70:51:d1:97:39:bf:a3:0c:
         4d:56:99:8e:e3:e2:cb:c0:61:95:8f:35:5f:00:a6:b8:2c:1a:
         63:23:b7:f1:f7:83:96:60:55:b9:41:7c:50:9d:5a:4a:6a:af:
         4f:c0:20:ec:8e:9e:57:a3:e5:07:46:59:b9:4b:1d:c7:71:ab:
         f9:da:44:09:3c:43:e9:b6:48:a0:04:f0:79:5a:fc:e3:f5:b8:
         66:cc:42:14:49:85:0f:31:66:41:a6:22:25:92:8f:89:d7:96:
         5a:42:68:92:17:16:7d:4a:dc:12:aa:28:46:20:c5:d6:59:61:
         7b:20:ed:fc:1b:93:e3:23:41:be:dd:bb:ac:71:c4:05:db:e0:
         7b:68:47:f2:18:2f:4d:9b:b5:74:c5:69:15:c0:98:d6:1d:34:
         23:7f:ba:46:5a:e7:8a:35:42:d3:3d:63:46:7a:04:c5:85:bb:
         94:f2:f4:16:0c:10:a3:1f:c8:a6:3b:fc:3d:77:ec:18:4d:05:
         ed:88:28:f3:92:5e:f9:a6:83:20:2c:81:f6:9a:b7:01:02:97:
         15:6a:3d:69:ae:ee:35:11:53:23:89:e9:c2:be:0e:32:55:a2:
         b0:cd:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:37:20 2026 by rpki-client