Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          hy1WBaaceI+n+gDDaKqfBM18v/Um/hhn0iT04VOmhgk=
Subject key identifier:   62:B0:ED:52:30:7A:1F:4B:4C:D2:83:79:05:E7:9A:8A:DF:EC:46:1A
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       019FE0642842AB1C802C379D49EA2FA3AC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          1A1A
Signing time:             Sat 08 Aug 2026 08:01:28 +0000
Manifest this update:     Sat 08 Aug 2026 08:01:28 +0000
Manifest next update:     Sun 09 Aug 2026 08:01:28 +0000
Files and hashes:         1: DEnwWvywXaQoWX5uv792ebbZYus.roa (hash: UKmQiudj85vaQt2LZdYW4fQWF3MpXue2FudeO7Dr3eo=)
                          2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
                          3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
                          4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
                          5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
                          6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
                          7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
                          8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: KRf4fWjKELjBpPQM5Fe9RYQzF44bdRFnW9LasEi/sgM=)
                          9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
                          10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Aug 2026 08:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e0:64:28:42:ab:1c:80:2c:37:9d:49:ea:2f:a3:ac:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Aug  8 08:01:28 2026 GMT
            Not After : Aug  9 08:01:28 2026 GMT
        Subject: CN=62b0ed52307a1f4b4cd2837905e79a8adfec461a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:73:50:1f:05:36:b9:c4:aa:6d:4f:68:9c:
                    50:7d:f2:96:d5:bd:4c:b2:2d:39:44:c7:de:e5:cd:
                    f0:3a:e0:4b:a0:26:64:08:5b:8d:b7:48:6f:17:42:
                    e4:0e:c6:3b:d0:f4:e6:d7:58:ca:79:09:b3:c7:d7:
                    24:e0:3b:d1:f7:c3:54:a7:f6:97:62:5c:41:ba:b7:
                    d0:e0:63:b7:43:b6:bb:bb:f4:8b:0f:d7:63:de:e8:
                    a0:8b:a9:62:bc:d1:7e:17:d2:b2:4b:cf:f4:19:c1:
                    28:77:d1:36:03:7f:0f:1e:a4:4f:e7:28:fc:1b:5c:
                    1c:c0:20:76:5e:d5:53:3c:86:d8:ce:c1:9f:e4:77:
                    8f:a8:6e:42:c0:c5:4e:3f:b3:d3:1e:30:22:ed:c2:
                    11:4d:a5:e2:46:61:cc:b0:ef:43:e4:e9:29:c9:09:
                    8d:32:a9:ac:9a:02:fa:c2:38:05:02:86:7f:35:86:
                    9c:1a:48:fe:ea:03:8c:71:5f:8f:e7:af:a3:f9:11:
                    55:01:b5:9f:39:41:c6:22:e0:c2:8e:b8:06:05:9c:
                    89:fe:53:96:10:ad:44:c0:d1:cd:34:6b:ed:db:4a:
                    46:f7:82:66:9c:c5:a7:83:8e:08:fd:11:b7:e8:e3:
                    a1:85:5e:74:05:41:a0:98:8e:31:29:be:35:43:f9:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B0:ED:52:30:7A:1F:4B:4C:D2:83:79:05:E7:9A:8A:DF:EC:46:1A
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ad:09:25:49:18:2d:44:da:ec:a5:f7:c2:49:75:1c:01:d1:
         52:c0:5b:98:ba:02:6e:6e:0b:22:fa:ea:3a:f7:64:87:02:38:
         92:3e:2f:9e:c8:ec:78:0c:92:e7:2c:5b:8b:08:3b:5e:02:ed:
         6c:a8:81:d0:43:88:ad:16:92:19:ab:2d:74:1a:f0:fa:f9:a6:
         dd:29:b2:bc:cf:19:1d:e4:18:c1:4b:02:9e:b0:a5:42:16:c7:
         c2:51:6c:48:6a:73:ea:16:14:43:ea:29:5a:e5:de:d8:1e:a2:
         45:34:6b:13:22:88:46:b8:b9:b2:ce:21:c5:78:87:38:8a:2a:
         5d:ae:84:4f:22:cf:d6:04:0c:39:d8:8e:07:0b:15:56:3e:3e:
         25:e2:54:0a:03:41:37:e9:f1:0e:39:87:fe:b3:52:c8:b0:37:
         a7:03:d0:a1:e8:b3:e4:16:6e:1c:cf:38:a0:55:bf:82:2f:85:
         ad:79:aa:11:b3:10:36:48:90:50:74:58:17:f1:3a:7d:ef:de:
         72:79:b3:ad:04:4d:59:c2:11:12:cb:82:55:29:34:db:4a:6c:
         3b:b2:58:d6:62:0d:8d:07:e7:41:33:42:6f:5e:10:57:95:98:
         9c:44:4e:e3:ad:81:c8:a1:00:a9:e0:b2:5b:c0:c5:3d:b7:18:
         3e:34:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 12:39:13 2026 by rpki-client