Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File:                     kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier:          6nMPd3ysvYhHB22/Ck+bal8SArU8Rluw2dHtT+Ct7g4=
Subject key identifier:   2C:30:26:FF:15:F6:20:E4:CF:71:D3:FF:F0:2E:15:3D:B7:19:D7:AD
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer:       /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial:       01A00101ADA0287E25F8DE3C26DEBAFFCF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number:          0719
Signing time:             Fri 14 Aug 2026 16:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:22 +0000
Files and hashes:         1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: MV4cLrHfTNDwJeNzajRZbu1BH4C9xSZSlG4yYYgTTB8=)
                          2: oL9_-G_BE3Ib7OwngyyeN305t6g.roa (hash: bC+XZTw3+M3qUxRZBZ3OzKSTrnOKvMY+D1VuNWxrnR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:ad:a0:28:7e:25:f8:de:3c:26:de:ba:ff:cf:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
        Validity
            Not Before: Aug 14 16:01:22 2026 GMT
            Not After : Aug 15 16:01:22 2026 GMT
        Subject: CN=2c3026ff15f620e4cf71d3fff02e153db719d7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:35:92:0f:cc:21:41:de:b7:a4:0f:2c:79:90:
                    af:14:ad:be:e2:d2:df:d5:4a:09:14:d9:71:59:9e:
                    49:82:7b:d8:fa:9e:61:55:8b:9e:ef:e4:e2:81:cc:
                    e6:8c:d7:e0:35:26:0f:7b:86:bc:13:d0:33:91:c5:
                    ac:63:02:27:57:e6:95:ed:30:93:ef:f2:75:cd:86:
                    c5:82:5b:48:7f:89:b2:eb:76:3e:86:ae:8c:90:f1:
                    91:2a:c8:8b:c6:10:e8:94:3e:04:1b:ee:25:94:e8:
                    47:8e:ab:12:77:3d:42:7b:ab:8b:bf:20:18:37:d1:
                    ec:ba:17:9b:20:f9:95:17:c4:41:3e:4c:0e:b2:c3:
                    9b:7e:c9:19:cb:f8:6d:99:b0:83:4e:26:f7:b2:2d:
                    6a:d6:bf:7b:e5:48:87:4b:c0:2a:d0:e1:01:e2:92:
                    75:6a:c9:36:14:39:af:db:87:76:79:4c:a1:58:a1:
                    24:da:ae:dd:98:75:53:ab:ea:56:44:3d:6d:89:58:
                    a0:f3:1e:6e:94:2d:c3:aa:37:1c:d2:ab:bb:6b:21:
                    07:be:ff:7c:06:09:6c:51:58:bf:ff:d1:f5:6c:14:
                    ad:e3:4f:fc:b3:dd:12:8a:6a:06:9b:ec:91:29:00:
                    66:c4:d6:fd:be:0d:0b:ca:56:46:c3:bb:0c:9f:0e:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:30:26:FF:15:F6:20:E4:CF:71:D3:FF:F0:2E:15:3D:B7:19:D7:AD
            X509v3 Authority Key Identifier:
                keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9c:01:a2:33:40:81:64:3d:ac:d7:2e:f2:64:60:b7:ff:d3:
         32:e6:a0:9f:54:e4:3b:e4:2b:b6:64:1e:00:1b:8a:7a:af:7f:
         1a:6f:b0:83:2f:fa:6e:80:b1:bf:26:8d:ff:46:cd:3c:ac:d1:
         8b:29:55:3d:af:a7:d1:c9:16:31:08:43:5c:78:ca:e3:6f:69:
         5a:bf:d7:5d:93:63:b5:02:13:82:d7:2a:a9:1d:db:c8:5f:e2:
         e4:50:91:65:a4:df:72:28:82:6f:f6:23:72:9a:14:f5:67:54:
         cf:c9:7c:68:5a:51:1c:db:fb:b2:b4:72:68:21:6e:f9:7c:a9:
         ee:74:7e:42:9b:a6:1d:a6:8b:42:9b:00:01:08:ed:d2:ac:46:
         10:8d:cc:58:08:14:e6:d2:05:fb:d3:51:b4:4e:37:85:c3:d5:
         7f:1c:1d:80:8b:19:66:ae:fc:82:f7:ed:22:50:86:b5:69:cb:
         83:43:d5:25:63:48:79:04:71:0f:5a:82:5c:be:f0:ae:5a:9f:
         09:1d:da:e2:d3:f0:0d:59:45:a2:59:2c:cc:5f:be:b7:cf:23:
         dd:4d:4f:04:9d:cb:dd:96:c7:0f:98:29:51:5c:63:6b:7c:d7:
         0b:0d:7e:11:f2:a4:50:76:de:73:6c:d2:77:70:e2:46:95:9f:
         03:a9:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:40 2026 by rpki-client