Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File:                     kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier:          94qSiz3JgonSpUXLPVn0DvC7LYFNpSouS9Nbq/b1PTM=
Subject key identifier:   38:E5:04:16:4C:B3:CF:12:9F:B5:D3:D2:F0:85:3B:A2:DA:DB:15:A6
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer:       /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial:       019FD127DE42B81DB65EA925D721156450B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number:          19EA
Signing time:             Wed 05 Aug 2026 09:01:18 +0000
Manifest this update:     Wed 05 Aug 2026 09:01:18 +0000
Manifest next update:     Thu 06 Aug 2026 09:01:18 +0000
Files and hashes:         1: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (hash: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4=)
                          2: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (hash: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w=)
                          3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: VDDiYVuJLSGoXMBOw5eB94bMwIbkYkzHBElQmbKx3TM=)
                          4: lMgoDA5bIRwWymuV894cK1NqlE4.roa (hash: 1MayWUj9g/XYEFJmVMWNXWfQS/ghagEhZ1TszpoNUJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d1:27:de:42:b8:1d:b6:5e:a9:25:d7:21:15:64:50:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
        Validity
            Not Before: Aug  5 09:01:18 2026 GMT
            Not After : Aug  6 09:01:18 2026 GMT
        Subject: CN=38e504164cb3cf129fb5d3d2f0853ba2dadb15a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:89:f2:bd:82:b0:be:ed:85:d9:ba:81:fb:8e:
                    fa:03:87:8d:e9:bc:df:22:a8:ec:6a:ce:c8:c1:23:
                    3f:f9:da:b6:fe:e1:f6:b9:ae:f9:43:be:d8:6f:90:
                    f3:ee:c3:06:e9:28:85:a2:d8:c2:b1:23:3f:4a:06:
                    d4:d2:ed:e5:f0:43:df:61:36:81:a9:10:67:e2:2f:
                    69:7e:ce:d2:33:c8:6d:e9:52:e5:35:53:c2:5e:a3:
                    56:bf:0f:73:98:1a:19:27:c3:91:0b:84:83:14:4b:
                    c8:40:f8:3c:e3:79:1b:01:50:c6:e9:52:69:97:68:
                    df:51:9c:a8:a6:67:67:e3:c6:23:1b:fc:c2:fa:d7:
                    c4:e8:99:1e:b0:87:64:e0:00:f6:76:75:02:a5:55:
                    1e:11:16:2b:9b:11:35:89:6f:1c:c3:4b:80:36:ea:
                    bd:41:cb:36:70:fb:b4:e2:2c:88:dc:4b:e3:17:80:
                    2a:c2:02:bc:43:08:9b:49:b9:6a:c1:be:54:59:2a:
                    5e:85:71:e8:dd:2f:1e:ee:e7:10:2d:26:88:b7:65:
                    a3:f9:0d:d9:2f:73:9b:dc:3a:48:13:56:30:d7:34:
                    34:fe:e0:d1:14:01:5e:e6:3d:5c:41:2d:18:ab:51:
                    1f:ee:b8:f7:dd:1e:0a:b1:96:27:48:b6:29:8a:ad:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E5:04:16:4C:B3:CF:12:9F:B5:D3:D2:F0:85:3B:A2:DA:DB:15:A6
            X509v3 Authority Key Identifier:
                keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:03:8b:f1:f9:e8:78:72:b0:2e:0a:a6:cb:87:dd:f0:64:56:
         ad:c4:fe:7e:0d:22:8d:16:4a:06:48:ef:f0:54:02:6a:61:cf:
         7a:f5:c4:19:14:e2:7a:5c:75:7c:ce:c4:d6:01:32:37:29:52:
         c3:42:c6:c4:26:2a:a7:dd:58:b2:54:69:14:ce:51:f4:b6:34:
         c8:42:65:5a:1a:b3:41:a1:72:03:3c:05:f9:3a:dd:b8:ff:42:
         53:78:00:b9:5f:75:cf:a7:08:bd:70:79:d6:b7:fc:ed:19:ca:
         e1:b8:fa:73:f9:88:44:89:07:40:7d:f1:ad:cd:77:70:54:47:
         e1:2b:2d:9c:f1:62:5d:68:11:75:dc:64:76:8e:fa:d4:07:fc:
         7f:93:ef:9b:aa:b5:e8:5d:6e:64:d9:ce:bb:30:60:8b:10:d5:
         9e:34:8c:0e:80:ca:e9:41:f4:60:51:4a:2d:83:4b:b3:ee:4a:
         e8:60:03:65:eb:58:22:7a:07:8d:7b:17:29:9d:8e:79:c0:51:
         aa:2f:c5:58:4e:56:53:21:c9:5f:46:00:f2:1f:d5:1e:13:1b:
         76:b0:85:25:1a:0d:c8:07:41:c2:df:96:1b:ee:a6:e1:51:74:
         6d:a8:0e:ed:a0:5c:79:e9:09:78:11:9d:67:3d:85:06:8f:df:
         86:bb:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:59:28 2026 by rpki-client