Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File:                     ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier:          mACJSJO5gi6WIkjlDPTeCRv0zm2D5UpWdBPLlr4UmA8=
Subject key identifier:   B6:23:9B:EE:61:6A:FC:DC:49:70:7C:85:B7:AA:67:2F:CB:C5:8E:4A
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer:       /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial:       019FFE6DBDD933FBEBFE74142BA2F772291E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number:          09BC
Signing time:             Fri 14 Aug 2026 04:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 04:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 04:00:32 +0000
Files and hashes:         1: MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (hash: istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=)
                          2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: Nc3kWfx6RLkSYNrpu0qkF7Pgit1z/IXoZteke+QtaOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:6d:bd:d9:33:fb:eb:fe:74:14:2b:a2:f7:72:29:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
        Validity
            Not Before: Aug 14 04:00:32 2026 GMT
            Not After : Aug 15 04:00:32 2026 GMT
        Subject: CN=b6239bee616afcdc49707c85b7aa672fcbc58e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:bb:dd:6d:a2:99:66:a3:e6:cb:d2:3c:42:
                    00:c8:2e:45:85:bc:93:61:03:6c:f5:99:00:76:5e:
                    25:66:82:33:6e:7e:44:bf:a8:ae:af:52:c3:f3:90:
                    07:67:0c:e5:c9:08:11:fb:a1:33:63:a3:fd:2f:85:
                    db:9e:c3:b8:6e:16:34:61:dd:a5:92:68:9b:93:97:
                    83:23:41:ef:a6:a7:5e:61:6d:ea:7c:cd:21:68:16:
                    ee:2e:1a:28:6a:12:97:c8:1a:64:a9:00:d8:0d:fc:
                    e3:93:1d:7c:59:3c:2b:80:a3:aa:80:9a:6a:5f:76:
                    04:8a:98:50:bd:47:2e:e4:12:f0:d9:5b:ff:e2:69:
                    5c:ed:df:ba:a9:4c:01:b5:69:ab:65:ab:82:3e:af:
                    00:23:46:b4:29:82:a1:1b:91:66:a5:0f:e5:a0:01:
                    52:80:f7:5d:d9:57:4c:8c:56:c0:d7:1f:b9:82:7f:
                    cf:56:28:5d:ec:e7:ed:d1:61:b3:80:12:e1:5a:00:
                    fa:2c:9f:f8:1d:10:19:4b:0f:b6:6f:bb:55:ef:5d:
                    01:0f:f4:b1:26:fb:93:b5:0d:9d:7b:da:7b:a1:ad:
                    f6:e3:f2:17:81:27:10:bd:9a:cf:e6:ed:33:43:63:
                    29:8e:74:ad:d1:77:72:e5:7f:f1:42:e7:13:c5:17:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:23:9B:EE:61:6A:FC:DC:49:70:7C:85:B7:AA:67:2F:CB:C5:8E:4A
            X509v3 Authority Key Identifier:
                keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5d:53:db:0c:62:b9:d2:0d:94:23:44:31:d0:09:6e:b6:e5:
         87:70:53:85:f7:54:e9:85:05:9f:b9:99:30:98:4a:65:f9:56:
         44:29:a9:c6:43:01:8b:e7:ef:77:fc:61:a6:c2:d4:0b:e4:e0:
         11:fd:7a:e9:91:99:ff:16:e1:b1:63:b9:63:23:35:56:1f:0e:
         39:2d:20:24:76:ef:92:ee:49:cd:ba:59:2f:97:59:59:7f:b6:
         db:72:cb:00:d1:4b:a1:39:c7:88:56:ab:ac:71:22:05:59:1c:
         70:ab:8c:48:d6:11:0e:37:cd:0e:5f:52:69:16:8a:fd:ea:2b:
         01:13:8d:a0:c9:19:dc:00:3d:be:91:72:20:4d:ec:e8:23:83:
         2e:08:c6:bb:b5:7c:b7:56:10:6b:db:c1:c8:a9:0d:4f:07:81:
         73:75:54:34:5b:ea:1b:77:a5:00:5d:51:a2:45:80:03:9f:82:
         99:63:79:2b:1d:27:3d:0a:84:37:91:00:d3:1a:ee:53:af:2e:
         5c:73:ab:d1:62:46:42:48:63:86:18:50:e5:c8:d5:82:3e:57:
         ae:65:e9:65:18:7b:26:1e:68:6f:7a:be:89:0e:0f:e5:f7:11:
         ac:68:cc:f2:b8:d3:6e:d7:69:56:bc:2c:45:ef:1a:e5:70:0f:
         d8:3e:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 11:15:02 2026 by rpki-client