Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File:                     kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier:          CXxIeYDmG1gKDCd/x55T/OsRMRBdyNszhhNWS1/oBvs=
Subject key identifier:   1B:40:24:D2:3B:F9:72:6E:8F:84:2E:D6:0D:55:BE:E8:B6:B4:8B:13
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer:       /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial:       019F11F7BD112115DAE64C6F075C8D3A4119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number:          1986
Signing time:             Mon 29 Jun 2026 06:01:15 +0000
Manifest this update:     Mon 29 Jun 2026 06:01:15 +0000
Manifest next update:     Tue 30 Jun 2026 06:01:15 +0000
Files and hashes:         1: SAktSd8Yfiv8Z7AAoq9HqjAql5s.roa (hash: LtM8gbZ0jSfixz/hSjfeNQJi14O3+yjoZzQHAO5Ggx8=)
                          2: V7G0PqLXvHbILX1LHpBG4YAR7P8.roa (hash: dlrYc64tSG90TWHPrXR+wF6FxKtROact/mSKSd7YezI=)
                          3: YUvBprPTRfZZcuIZT5c81ftcfmE.asa (hash: 53yTBzuypoSdIg4y84fPhABfxj/Iwufg2RICzEJXFBY=)
                          4: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: ROk/9kuaUPCUkAUrJvPsFK3zQGbnLOl5ZfwshWEv62E=)
                          5: phk0DUtP9juLO6Rie2WITcEati8.roa (hash: e91L1Q+nTnPD/oJ6jV8Vk2fQsj6tkZNRhSrVTsD9WQs=)
                          6: ycEAE8U3GOcT-dI1EM9rShcAaZs.roa (hash: xuaS4IHUOmueIKBaxW7itaqT5M/7ix/11RW1ctyKbMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f7:bd:11:21:15:da:e6:4c:6f:07:5c:8d:3a:41:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
        Validity
            Not Before: Jun 29 06:01:15 2026 GMT
            Not After : Jun 30 06:01:15 2026 GMT
        Subject: CN=1b4024d23bf9726e8f842ed60d55bee8b6b48b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:64:97:c2:14:f1:0c:3b:f1:84:ed:bf:e2:
                    f1:e3:e9:79:e2:f3:d0:1d:cc:25:f2:a3:cd:fd:91:
                    b1:0d:f3:91:a3:ba:e6:e6:2d:69:5d:b0:1b:b0:97:
                    65:60:3b:4d:79:f0:92:e7:83:29:a3:5a:75:81:da:
                    eb:9d:db:97:48:e5:b1:ae:e3:37:81:d4:d6:c1:5d:
                    02:db:b0:ce:03:12:2b:81:a1:4a:53:c2:9d:a6:f2:
                    cf:3a:4f:25:10:4b:1a:d8:b3:68:a1:d8:a8:b7:e7:
                    4b:dc:82:ff:94:ea:a6:d5:54:eb:a4:8c:1e:aa:17:
                    f7:79:4e:46:f7:43:f2:d4:47:d9:78:27:c2:b8:1b:
                    e7:ba:92:e9:e9:96:8c:a1:82:ae:c3:1e:19:49:bf:
                    6a:c4:cf:d1:f2:bc:7a:44:f3:05:86:46:ef:34:92:
                    3d:17:a8:d7:61:3a:93:a3:6a:98:82:6b:06:a1:1a:
                    3d:a5:29:7c:82:9a:92:bd:8b:a5:ce:a8:7e:52:37:
                    56:f2:1b:e2:0e:6d:64:45:64:5e:b5:4d:f2:b3:17:
                    e3:08:01:79:f4:7b:64:77:c1:a9:1f:61:39:b8:6c:
                    5b:a7:2e:78:d0:55:47:1a:69:dd:58:4f:3a:22:1f:
                    fc:91:c7:2d:30:76:00:a9:4f:87:2a:42:69:3a:39:
                    f6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:40:24:D2:3B:F9:72:6E:8F:84:2E:D6:0D:55:BE:E8:B6:B4:8B:13
            X509v3 Authority Key Identifier:
                keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:eb:c4:93:2a:b1:5c:aa:40:0c:a8:88:6c:14:b8:35:ff:
         ca:72:6e:05:39:3f:ea:53:8c:1d:d4:23:f6:44:7c:0b:a9:98:
         7e:55:2c:ad:2d:b1:ac:1f:0a:61:86:0a:08:7a:9d:8d:d5:55:
         64:45:7c:1c:3c:cd:84:68:a7:a6:b9:ad:36:c9:3e:ee:6c:66:
         c3:34:7d:b9:ef:2b:0f:fd:54:c1:72:ea:dc:25:83:a9:5b:a1:
         c2:f9:8a:9d:86:6e:b7:11:6c:07:4c:42:50:e1:eb:dc:7e:8e:
         b4:01:28:36:bc:f8:32:2c:cb:a3:23:5b:7c:58:4a:45:b7:3b:
         96:b2:f6:3c:c0:bd:b8:ce:6c:f3:12:bb:23:54:d2:d6:f6:3d:
         1c:3f:1e:f7:c1:4e:12:42:f4:a4:fb:73:56:cc:88:e4:33:38:
         62:13:09:f8:00:27:44:6f:1c:86:e4:f7:df:4e:d4:ca:7d:84:
         d3:5e:06:b0:6e:b9:8c:05:63:39:29:df:ef:55:a5:ab:72:42:
         9d:b6:92:99:00:f6:6c:a9:f6:b8:da:b1:cc:4e:13:af:16:df:
         a9:7c:04:0c:85:5c:db:af:ff:1d:73:88:23:f0:3a:82:39:4c:
         d0:2d:66:9d:f4:70:56:4e:80:92:e4:d9:3d:1f:43:da:a9:53:
         47:ea:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:04 2026 by rpki-client