Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          x+CcT8dfHGHGfE2e/q7WS1iB5DHiegJHIFMk5Pt1jYY=
Subject key identifier:   B9:CE:F1:25:65:4D:99:5E:AB:8B:22:70:15:08:EB:79:DF:03:4F:CA
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       019F9FCD1B9326A9973FEF559352528C7A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0F2F
Signing time:             Sun 26 Jul 2026 19:00:46 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:46 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:46 +0000
Files and hashes:         1: 2D7Qmm8lOUAmehGAGFV4EjXSwO4.roa (hash: 671n1l8f6dvtaMMT0K6YZEwm63zrF391tyZLMVtMits=)
                          2: 5pnLPx_2hpy3VygTZwAGCHra7kE.roa (hash: 1oHSHq2YY2wBUKVcldVeO85+GN6kBhjSJ3cQgz8RWLo=)
                          3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: I+/zMZnLM9qpn5dof8auFhaK4v+gnf9U4XVnpRTLI9E=)
                          4: KnbEX4UkCWaV7O0wuCkr7A4YupA.roa (hash: LLlXw5GN0fkhrRlbhrlywwISvztA4DkGKjffqRJI8NQ=)
                          5: ZlWEEzGYFVqbln14VFTl7vY0xlM.roa (hash: 4+sTiTIEM7Q8B0+aFICyPTm4dchReZ/Z4NBsp9md7hs=)
                          6: hARTp8Mibx8WODEuOIUHpvobncw.roa (hash: xaYjb6X7y2C4MO+aFX5sY8YM6es27SbRjICMp6w4VYw=)
                          7: yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa (hash: Yz2sZPO7RTS7G2x7CfUC5DUG1B3ygbMjzbaefkWF+54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:1b:93:26:a9:97:3f:ef:55:93:52:52:8c:7a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Jul 26 19:00:46 2026 GMT
            Not After : Jul 27 19:00:46 2026 GMT
        Subject: CN=b9cef125654d995eab8b22701508eb79df034fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:78:8a:32:64:83:76:50:6a:23:27:cd:cb:
                    1b:0d:67:80:f7:1e:28:74:6f:c8:d9:04:5d:df:c3:
                    97:e9:e4:23:d0:91:e4:3a:91:e1:ef:c7:5e:53:4f:
                    43:c1:3b:19:68:bc:9d:15:bf:c8:88:2c:71:40:a8:
                    86:30:40:4d:a6:cd:58:24:42:5a:50:5e:46:76:38:
                    b0:2c:62:dd:bb:3a:92:e8:44:4c:40:e4:f5:6c:68:
                    ee:ec:13:58:88:d0:8b:d0:00:d0:90:1e:62:da:c8:
                    0d:f0:2d:7e:31:46:20:09:23:9c:ff:0f:1b:3e:eb:
                    03:f2:5d:d8:3a:9f:2b:7e:c0:12:1e:b1:43:65:b4:
                    a5:df:ad:be:6b:f9:a8:6a:d8:e8:7b:8d:57:8d:b0:
                    66:ab:7c:02:b9:80:2b:db:6d:09:36:bb:73:7c:30:
                    59:cd:10:35:40:1e:e9:f4:50:ff:59:ee:8f:52:f1:
                    6c:98:89:25:bd:4f:75:0b:75:57:8d:0b:2a:e1:ff:
                    e5:e8:dd:15:ba:aa:d4:5e:ca:13:ca:0a:78:8b:7f:
                    06:bd:22:2b:cd:c5:44:a3:84:4a:61:b9:c8:d1:e1:
                    14:c8:d3:bb:57:6e:fd:7e:b1:71:1a:f2:36:ce:e3:
                    74:0a:bc:d1:62:51:58:09:2c:f6:2b:23:e5:6c:0a:
                    cb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CE:F1:25:65:4D:99:5E:AB:8B:22:70:15:08:EB:79:DF:03:4F:CA
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:15:f5:cc:57:80:f7:8d:8c:80:13:7d:1c:49:94:5d:ea:14:
         05:95:b5:da:49:f7:cd:dd:f9:c6:c6:66:34:5e:99:2a:50:4b:
         5f:68:3a:6f:e5:e7:ad:2f:35:cc:ed:d6:74:b2:50:50:76:80:
         83:f7:a5:6f:d3:9c:f8:95:5e:52:6d:9e:50:7a:6c:20:ad:50:
         d9:1e:d3:e5:42:5e:4c:95:70:45:e0:94:57:8b:f6:2c:77:db:
         77:12:d1:34:b9:5c:06:a9:8a:64:43:93:2f:7c:43:d6:24:e7:
         1e:bb:41:d2:eb:d6:ce:a6:fc:6c:d3:37:e0:2d:16:e8:aa:36:
         9d:72:b7:c4:cc:5b:71:b0:f8:24:d5:c8:53:ac:e6:1c:f3:9d:
         83:77:0b:74:a5:1f:bc:23:72:18:ea:01:80:fa:ce:54:d3:f4:
         e8:94:f3:71:4f:d6:9b:12:f5:51:29:e3:81:e7:8b:69:e2:81:
         67:1f:16:3c:39:d5:c2:0d:95:46:76:68:64:20:84:d5:b6:c6:
         81:a0:12:90:89:53:ea:4e:cd:a6:f2:c8:70:f8:f5:02:f4:81:
         af:6e:cc:f2:dc:cc:a2:0d:a2:70:a3:02:ba:53:cb:12:27:c2:
         e9:d3:14:44:71:9c:37:80:c2:62:8e:02:90:c1:ae:79:ae:64:
         da:66:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:15:33 2026 by rpki-client