Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File:                     KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier:          kR7G3hfl8b0UzN64nowko5igc4NyIUC68E6kwAXGduQ=
Subject key identifier:   D0:7B:19:55:71:D6:12:A6:F4:7C:68:AD:3F:FD:AC:9C:55:25:C3:75
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer:       /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial:       019FAE63F804E7B882C20100BEA6CC6D43EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 15:00:14 +0000
Manifest this update:     Wed 29 Jul 2026 15:00:14 +0000
Manifest next update:     Thu 30 Jul 2026 15:00:14 +0000
Files and hashes:         1: KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa (hash: eyE+qcEsEBDUoKEFoqctNchUZLkDzCl+DcFXWEI/yFY=)
                          2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: 7lYiX4LxLGgBRzstMFe0zw5LHyqFwkTtuT+Ke/+W8kU=)
                          3: NzKx6KcOHXw58MEojB9ud-uaBro.roa (hash: a9iaY6BAt3IsnsebJ+05WFxE0TvGeWD+djHy5NWOc0U=)
                          4: WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa (hash: hwZIh3ZVsKyRI6oFuWtqGMKZtqEO+xpper2aZGmlvQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ae:63:f8:04:e7:b8:82:c2:01:00:be:a6:cc:6d:43:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
        Validity
            Not Before: Jul 29 15:00:14 2026 GMT
            Not After : Jul 30 15:00:14 2026 GMT
        Subject: CN=d07b195571d612a6f47c68ad3ffdac9c5525c375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:3c:a4:51:60:d4:48:5b:95:aa:e2:c3:99:
                    a8:44:17:42:d0:6e:a7:68:e5:bc:0a:e4:05:1e:22:
                    65:e6:bb:cc:3a:e6:b7:51:75:0e:51:28:88:a7:2d:
                    a4:2d:e2:94:f8:1c:c9:cf:1c:63:2b:0f:ac:60:4c:
                    af:7e:18:ea:14:d7:5f:06:80:b7:b4:0a:99:41:55:
                    c6:7c:02:59:d1:a5:5b:1c:ae:6b:82:c0:82:7c:07:
                    57:ef:89:35:08:5c:a3:fe:3a:b7:e9:66:a9:a3:99:
                    f2:75:d3:0e:d7:cb:df:68:bb:00:ca:4a:c6:3d:bf:
                    e2:4f:f7:41:f0:b3:76:ef:72:d0:fa:a0:f9:10:dc:
                    20:e2:89:a9:b6:76:95:f1:4b:15:46:fa:e3:16:84:
                    ad:ec:2e:84:69:f3:58:bf:25:47:39:96:b5:a3:0e:
                    78:c8:51:2d:5a:aa:94:0a:d3:34:81:19:c7:75:ad:
                    0c:30:c8:19:6e:6d:bd:42:21:75:55:ba:77:b8:e8:
                    d0:91:96:ae:98:e3:bb:7e:53:bd:b5:e2:ba:33:a7:
                    93:75:5d:0d:76:00:83:a1:b5:b4:bc:b3:84:ec:59:
                    47:33:37:26:b6:1e:01:12:56:3f:f5:cf:51:c5:61:
                    07:ce:e9:23:cb:2b:e9:7b:57:a7:80:87:3a:71:cd:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:19:55:71:D6:12:A6:F4:7C:68:AD:3F:FD:AC:9C:55:25:C3:75
            X509v3 Authority Key Identifier:
                keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:19:c2:3d:96:15:ee:df:d7:24:e6:c4:42:f8:0b:38:0f:5d:
         74:69:c2:49:38:9a:e9:c2:3c:e9:3f:44:75:15:b6:37:ba:88:
         f3:e8:02:dc:fa:b4:c8:b3:8b:3b:11:52:7a:69:a9:dd:90:36:
         57:cf:11:5b:0f:66:9f:2b:5d:91:f1:74:1f:8f:fc:a0:6c:6e:
         98:2f:f4:7e:3c:3d:4a:e5:b5:56:63:46:e0:9a:d7:7f:86:ce:
         de:1c:ef:5c:b2:fb:26:27:0a:b1:22:13:ec:73:c9:ec:77:8e:
         ad:a6:a4:f1:cb:13:5f:0f:0e:61:72:3e:7b:ec:2f:f0:38:54:
         8b:88:b5:10:16:c7:fc:3a:9f:3e:c6:a5:95:13:5f:84:e7:3b:
         f5:1e:02:bc:75:ae:32:21:e4:97:26:2d:68:02:d2:bd:ad:4d:
         0e:17:2c:88:c5:ff:8c:52:f7:2b:d8:9a:5f:ec:6f:ba:b1:ba:
         6b:7a:b4:1e:d5:ca:8e:8a:68:d1:67:c6:94:8c:49:13:38:69:
         5c:09:9b:fa:bc:24:5b:c7:09:77:7f:37:b3:30:5f:a7:d2:cc:
         37:31:c2:0c:f2:08:fb:82:3a:19:78:e1:19:0f:01:1e:fa:6c:
         99:c9:60:df:87:d1:75:55:03:7e:23:01:97:34:ce:cc:0b:0c:
         d7:d5:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:27:31 2026 by rpki-client