Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          9R8hxjb422PvUYv3hAqnhbC2jEC/M1f9KdGK/4O9sGU=
Subject key identifier:   23:DD:9F:10:FF:E4:46:EF:D0:D2:0A:89:06:AF:59:1C:48:08:22:42
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       019FA560F7C1EB4F56A3B392410FE84D3751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          19D8
Signing time:             Mon 27 Jul 2026 21:00:23 +0000
Manifest this update:     Mon 27 Jul 2026 21:00:23 +0000
Manifest next update:     Tue 28 Jul 2026 21:00:23 +0000
Files and hashes:         1: 6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (hash: z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=)
                          2: 8k1WvdzAQ1Go-lpgTPWDZAKZfQE.roa (hash: us5ahjVDdrm7/ofacEwTdXV/iwMapsRRug2V01x/llc=)
                          3: KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa (hash: qRSzgiwPczkOjtugbEXqYuJbcG64mRS3bSrnTP92V5I=)
                          4: Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa (hash: 6rtcBWZHj5iKfuxNemjzbQDA3WB3EhCTz3MwF017Ko8=)
                          5: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: RAoVe+/RkE2dtCPcK5bVFzGEMY3KJBEX3W0I5ujrU/Q=)
                          6: q_--4kminZxQx-8CqaEaNqwj4jE.roa (hash: ryH9qdfaBeMvb/1G2KPwMdilt+m41DaYZGZeqOGsiAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 21:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a5:60:f7:c1:eb:4f:56:a3:b3:92:41:0f:e8:4d:37:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Jul 27 21:00:23 2026 GMT
            Not After : Jul 28 21:00:23 2026 GMT
        Subject: CN=23dd9f10ffe446efd0d20a8906af591c48082242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:f0:8a:1a:50:05:5d:5c:27:9c:8c:36:ce:
                    cd:fc:0c:f5:18:45:63:63:26:90:82:25:36:bd:27:
                    a4:19:5d:e7:2e:05:62:14:c7:1f:be:64:7a:70:59:
                    b4:0b:4f:22:b3:74:bd:63:5c:2c:04:c8:13:2e:3e:
                    47:2f:41:f1:28:7d:b1:07:32:a7:23:dd:7e:d3:c6:
                    e7:a3:b7:51:f8:b3:f1:96:77:eb:3c:82:2d:ea:30:
                    7c:55:5f:1b:db:5d:92:7c:7d:7b:53:4a:ac:79:8b:
                    88:b8:ed:35:66:8d:87:d7:c2:e7:22:b9:f2:8c:18:
                    0c:11:02:c2:9d:13:3c:0f:9c:79:b3:04:26:f3:de:
                    20:b9:16:35:8f:bc:fe:6f:69:58:26:ba:db:aa:bf:
                    2b:c4:cc:a5:f1:16:2c:79:df:3f:74:f5:05:9b:ff:
                    f1:d1:88:56:bc:12:8d:5e:56:f8:0e:ef:a3:fc:57:
                    77:3b:11:54:ba:39:63:45:dc:c8:e8:fe:07:3e:e3:
                    e9:1b:1c:b7:d3:95:90:07:27:7d:9c:5f:6f:f6:cd:
                    ab:17:7d:a5:7b:30:ac:1a:96:5e:b1:f3:b5:bd:85:
                    71:87:74:5a:75:3e:da:5e:ae:bb:43:db:a2:c0:bc:
                    23:89:68:8a:eb:86:69:a1:a9:68:80:99:a1:b7:eb:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DD:9F:10:FF:E4:46:EF:D0:D2:0A:89:06:AF:59:1C:48:08:22:42
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:47:e3:84:b1:72:a2:03:f9:aa:e7:c8:39:ad:4c:5d:fc:05:
         63:44:52:54:03:b0:a7:a0:fa:62:c3:a1:5f:c7:3c:ec:a7:df:
         72:29:90:6c:d5:59:ef:37:92:d8:ea:88:ba:dc:b9:b5:9b:bb:
         e9:45:75:88:41:53:ac:fc:1a:c3:58:1c:27:5f:8f:98:6c:be:
         8a:8d:fd:1b:bf:79:28:06:1c:19:07:1f:01:1e:bf:cd:06:32:
         1d:c0:c3:59:c2:1f:2d:e7:ec:ce:8a:c8:78:91:91:71:79:0a:
         9a:19:ed:b5:a6:9b:fa:e1:05:d2:74:cd:31:bc:01:18:3a:4e:
         51:d1:b2:c3:3f:f7:b4:ba:05:16:22:11:28:f3:39:66:d6:46:
         30:2a:9e:3c:63:3c:d6:7c:f1:0e:d9:88:33:e2:2a:df:cc:45:
         8e:9d:b8:47:eb:84:04:6e:f2:84:e8:17:bb:fd:da:fb:be:56:
         0f:3d:ac:fb:eb:4a:8f:59:93:56:f0:54:01:fc:b9:86:e3:e6:
         77:9d:07:18:15:23:e4:69:2c:ec:61:28:97:45:9c:f9:52:66:
         74:9c:f0:8e:0e:92:36:4a:e3:02:e1:64:49:23:2e:f9:22:62:
         e9:ea:e9:f8:a3:6c:07:85:9a:b8:87:65:28:e3:e5:ff:3f:68:
         2b:74:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:26:15 2026 by rpki-client