Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File:                     kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier:          e18sEpc2dwlKPM00u8ksqCZdCMJ70iuUtX8hBw+qM0o=
Subject key identifier:   2E:4A:6C:4F:E2:33:37:64:A8:1F:21:65:AC:35:6A:7C:1E:10:0F:EC
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer:       /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial:       019FA00391AB3BDA6F0E063CC169497D9F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number:          0948
Signing time:             Sun 26 Jul 2026 20:00:16 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:16 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:16 +0000
Files and hashes:         1: 41FDoFH6M2is1lsICkgfh5ITDqc.roa (hash: EewgyLxSVnO+QoRL7ntY20ccJSFgs1pW1bzWTclj1yE=)
                          2: BRDlyqeJrmrBAcGjXwsME96B8FA.roa (hash: jjDNz/Y1cZhGq2xfdDGq/oEMuXVbmPo8+lz5IqqCETc=)
                          3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: kWoIh8L3KlkJrMJw2a9HlEW+kuseCHeZYOwIAtf7/nM=)
                          4: nXsgPSU5eo-g-H5HVGkbUxzs-M0.roa (hash: bHUY+9ATlshHA4NGy9V8O1pXq9p6uilZoEQtRA9DmuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:91:ab:3b:da:6f:0e:06:3c:c1:69:49:7d:9f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
        Validity
            Not Before: Jul 26 20:00:16 2026 GMT
            Not After : Jul 27 20:00:16 2026 GMT
        Subject: CN=2e4a6c4fe2333764a81f2165ac356a7c1e100fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:d2:25:0a:0c:68:eb:15:c2:b5:bb:f6:49:
                    c3:28:87:61:2f:fe:f1:28:9a:fc:60:a1:68:e0:c8:
                    0b:ed:de:83:71:fb:3e:23:c7:34:bf:8b:e8:e1:f0:
                    7a:ef:bf:c7:bf:8a:34:8e:3b:28:00:09:26:16:a3:
                    0e:c6:94:4e:9f:2e:ef:72:f4:60:93:0f:1c:51:bc:
                    b7:67:d5:6b:6e:17:30:ec:de:65:41:23:a5:bb:5e:
                    90:88:84:c9:ae:6d:5b:44:b4:b9:3e:41:ee:72:a8:
                    98:7e:8c:6e:6a:04:6c:5b:f6:a5:a2:92:38:7d:65:
                    0c:a0:61:13:6a:08:d9:c8:d1:54:14:6a:05:e5:8d:
                    11:4b:de:35:61:6e:73:38:29:46:f3:9c:ff:26:cb:
                    b3:54:2f:2c:5c:6c:6f:57:56:4b:55:a6:f1:5b:45:
                    5e:89:39:ac:af:23:30:53:92:84:50:0b:b2:83:fe:
                    eb:cd:a3:a3:b8:0e:ba:08:e3:f0:c7:8e:96:e4:9d:
                    73:31:4d:11:ba:aa:96:03:58:bd:f6:dd:b2:da:b3:
                    a8:4d:48:d1:8c:4d:24:1a:27:b6:9c:e4:11:b0:97:
                    64:d1:21:5e:45:53:58:f1:b9:d4:6c:a8:6b:1c:54:
                    f6:fa:41:0f:93:20:e8:b6:4d:4c:66:b9:d8:44:07:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4A:6C:4F:E2:33:37:64:A8:1F:21:65:AC:35:6A:7C:1E:10:0F:EC
            X509v3 Authority Key Identifier:
                keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:dd:c0:3e:c4:9d:b4:60:7d:3e:2a:07:05:90:71:51:41:29:
         d7:86:76:da:50:52:4c:a1:35:92:fb:d1:50:86:74:8e:90:c5:
         f6:94:d8:04:c9:4c:c7:23:1d:02:4c:91:76:94:31:a4:ec:aa:
         96:5f:65:f4:0f:de:29:f9:08:fa:44:cc:f2:a8:af:0e:f3:19:
         59:4f:32:3f:89:2d:1d:94:b0:b2:96:a3:72:55:5c:ce:db:f6:
         8d:a5:bf:e5:2a:89:7f:3f:79:be:51:66:3e:bd:88:ce:8f:63:
         47:70:31:de:e8:57:32:cb:fe:a4:92:1e:65:38:64:a0:ce:1b:
         f6:5a:4a:3c:c1:e2:9c:01:65:6b:19:ef:fa:a2:48:a3:d8:a7:
         bb:19:4d:26:3e:ac:77:80:6a:ae:d3:e9:54:d1:5f:ae:79:07:
         ea:68:7a:62:45:bb:23:67:d1:44:a2:54:85:f9:a5:84:14:13:
         62:96:77:3d:3c:82:fa:db:51:e3:fb:2e:f4:cb:db:f7:2b:be:
         c1:a6:c6:36:59:4a:41:14:ae:6f:32:7c:08:f0:5d:8e:ed:a1:
         67:9e:19:df:4a:98:eb:d9:37:78:7d:bc:71:ad:41:c3:44:77:
         19:cb:d2:5d:11:f2:aa:25:58:98:63:a0:f2:b5:77:6c:22:97:
         3b:ac:a3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:48 2026 by rpki-client