Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File:                     kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier:          otGKT7BG+gEmMI+U99htbkjUix0coupwKvQTW6ZAYl0=
Subject key identifier:   65:CA:0E:E0:5E:0D:C2:D4:3F:EC:6C:A6:07:3C:4B:6D:1E:F5:4D:C6
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer:       /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial:       019FA003FCE9078F7AFC17EE965A4FE9FE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number:          121F
Signing time:             Sun 26 Jul 2026 20:00:43 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:43 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:43 +0000
Files and hashes:         1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
                          2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
                          3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: +C2vI8gz+F/49AWQj18xFRfJQuGKjGFnE+FJ3Z1I90U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:fc:e9:07:8f:7a:fc:17:ee:96:5a:4f:e9:fe:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
        Validity
            Not Before: Jul 26 20:00:43 2026 GMT
            Not After : Jul 27 20:00:43 2026 GMT
        Subject: CN=65ca0ee05e0dc2d43fec6ca6073c4b6d1ef54dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:c4:8c:a2:1b:1e:10:06:62:1c:81:30:d2:
                    4e:aa:fd:5e:38:18:07:18:36:15:94:7b:53:1d:df:
                    b2:69:6b:3c:fc:c4:a5:8f:00:84:6c:66:5a:eb:fe:
                    d3:df:a5:e2:98:a3:51:ce:14:6e:d8:41:05:dd:3e:
                    2b:f4:22:98:f2:7b:5c:a5:74:0e:35:00:ea:01:d0:
                    17:9f:54:0e:41:c1:6c:b5:fa:67:66:58:f3:f5:9e:
                    73:e7:3b:2f:0b:f2:20:d3:7a:80:c4:a3:0c:fb:13:
                    34:ee:22:88:c7:3f:f5:23:e9:f0:ae:59:f4:91:d2:
                    53:2e:fd:13:3a:ed:15:40:db:a6:0f:fb:51:21:8b:
                    fb:29:21:19:11:c1:00:30:80:b8:39:8b:6e:1f:53:
                    fb:41:bc:19:3c:f9:fa:b2:6c:16:2a:52:fd:ba:ee:
                    12:79:8a:e0:22:76:9b:10:54:dc:78:03:1f:af:34:
                    34:6b:61:57:25:f9:9b:e8:f1:75:e2:de:cf:c0:c7:
                    52:0f:c4:eb:ec:9d:50:c2:3f:9a:53:43:21:44:14:
                    ff:5c:99:d6:da:74:77:ab:e1:05:da:1e:94:ee:db:
                    75:d1:56:db:19:19:46:64:6b:71:eb:fb:14:20:26:
                    a7:4e:df:93:1e:af:d0:9f:c8:90:f3:83:e2:74:6c:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CA:0E:E0:5E:0D:C2:D4:3F:EC:6C:A6:07:3C:4B:6D:1E:F5:4D:C6
            X509v3 Authority Key Identifier:
                keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:ac:d3:4f:38:e7:11:c6:0f:06:e6:a9:06:f9:71:e0:2a:
         fe:23:a9:b1:a3:72:be:5f:c7:84:c2:25:31:a6:3e:cd:56:7f:
         9e:12:37:3f:17:01:0a:ac:2c:73:9b:5f:ee:90:ac:47:94:ca:
         e3:9c:9a:87:4d:f2:7f:75:55:26:cc:26:14:5d:93:1a:4f:e6:
         df:61:9b:f3:12:32:74:e1:33:92:4c:87:e3:78:dc:99:d3:1d:
         ce:bf:0c:77:72:b2:ef:ea:dc:91:dc:13:26:7e:ed:61:3c:af:
         02:51:db:f1:9a:86:05:96:fc:bb:22:e4:5b:47:be:ab:f1:86:
         ce:bf:6e:4d:8d:17:a2:84:c4:f1:65:31:68:47:12:76:7e:52:
         8e:99:ce:de:94:4a:f8:34:93:43:e1:da:90:39:b3:09:fc:f7:
         a8:cf:da:08:4d:b4:77:43:8e:a3:d0:35:66:0f:61:b2:8e:64:
         a6:9f:03:2a:08:33:86:38:fe:bf:30:cb:5c:0a:9f:58:71:a8:
         55:1e:d5:66:10:e2:0f:4e:8e:71:bc:b8:99:52:52:ee:bc:48:
         26:5f:38:f6:c1:87:10:b0:a3:97:34:04:d8:aa:82:78:06:e3:
         86:b0:76:bf:d3:b5:5a:b7:32:4c:d5:63:34:b3:c1:ce:6d:82:
         45:c3:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:32:11 2026 by rpki-client