Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          b/TL+D9GPlnHugFT+LUa6owztH1zA10nq/n9YOZWDNY=
Subject key identifier:   8F:3A:01:D5:36:AE:DE:45:E9:A9:8D:C7:E3:00:CA:83:63:FE:35:E0
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       019FA1BBFADE55677D0B2D752A80CBF933A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0F30
Signing time:             Mon 27 Jul 2026 04:01:18 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:18 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:18 +0000
Files and hashes:         1: 2D7Qmm8lOUAmehGAGFV4EjXSwO4.roa (hash: 671n1l8f6dvtaMMT0K6YZEwm63zrF391tyZLMVtMits=)
                          2: 5pnLPx_2hpy3VygTZwAGCHra7kE.roa (hash: 1oHSHq2YY2wBUKVcldVeO85+GN6kBhjSJ3cQgz8RWLo=)
                          3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: n8CNu8ivGO3NOiSPfadBEWdp/XNUlHscF7vLqgxKlIQ=)
                          4: KnbEX4UkCWaV7O0wuCkr7A4YupA.roa (hash: LLlXw5GN0fkhrRlbhrlywwISvztA4DkGKjffqRJI8NQ=)
                          5: ZlWEEzGYFVqbln14VFTl7vY0xlM.roa (hash: 4+sTiTIEM7Q8B0+aFICyPTm4dchReZ/Z4NBsp9md7hs=)
                          6: hARTp8Mibx8WODEuOIUHpvobncw.roa (hash: xaYjb6X7y2C4MO+aFX5sY8YM6es27SbRjICMp6w4VYw=)
                          7: yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa (hash: Yz2sZPO7RTS7G2x7CfUC5DUG1B3ygbMjzbaefkWF+54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:fa:de:55:67:7d:0b:2d:75:2a:80:cb:f9:33:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Jul 27 04:01:18 2026 GMT
            Not After : Jul 28 04:01:18 2026 GMT
        Subject: CN=8f3a01d536aede45e9a98dc7e300ca8363fe35e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:4d:86:93:64:02:74:5c:b4:87:25:47:2d:
                    4c:c3:3c:bb:b6:b3:1b:ac:c7:c5:3c:89:7a:ae:bf:
                    c1:6b:a8:57:6e:02:c7:a3:3b:08:83:99:be:d0:e6:
                    e8:80:b0:bf:00:79:ab:b4:60:5d:29:5f:fd:a7:69:
                    5e:96:bb:80:9f:56:2e:b0:63:e6:44:cd:d5:3b:a2:
                    31:29:22:a0:36:df:c5:0b:49:28:8f:ee:d8:98:28:
                    13:22:56:c6:4b:a1:5b:9d:20:79:15:8d:5f:3c:e1:
                    85:71:b1:e0:9f:ed:e8:7b:c1:1a:b1:92:b0:8e:fa:
                    63:e7:89:62:03:e2:3d:52:58:9a:50:df:b6:25:ef:
                    bf:a2:d9:d0:87:f2:99:ff:03:dc:0f:dd:11:ee:98:
                    e4:ed:6d:c6:60:c7:61:d1:22:5a:bb:4b:04:8c:fc:
                    42:57:51:bd:5d:a0:85:a3:ff:c4:5b:dd:8a:4c:e7:
                    40:aa:6e:45:36:50:89:5e:a4:19:3b:9e:4e:ba:94:
                    05:55:ef:27:f7:e3:2a:eb:f5:b5:75:ca:5c:82:db:
                    23:22:73:04:c2:bb:25:db:29:b0:21:2f:45:2e:e3:
                    6c:d6:61:b5:5b:4d:47:d4:a0:3d:af:f3:c8:b1:44:
                    3b:3b:74:f5:05:ce:8c:51:ff:9c:66:60:7a:75:e0:
                    04:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3A:01:D5:36:AE:DE:45:E9:A9:8D:C7:E3:00:CA:83:63:FE:35:E0
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:65:31:2a:43:52:fb:fb:e8:c5:d6:a2:4e:7a:6d:36:86:
         17:f2:d3:5f:e2:45:9f:4b:93:92:b3:32:bf:33:c8:4b:9b:9f:
         2c:88:b5:f6:07:63:cf:55:f7:8b:87:22:d5:1e:d5:8c:a9:a8:
         db:55:26:e9:f0:61:0d:77:af:bc:f8:7a:74:ba:b2:f6:ad:02:
         40:c6:a7:99:80:8c:fa:fe:72:db:4f:7e:c8:ae:b3:96:57:e7:
         19:14:08:90:8c:0d:20:ee:d0:00:60:1a:d3:0a:4c:b0:74:7b:
         9a:75:6e:4c:a1:33:76:d6:f4:18:24:08:75:32:47:16:37:17:
         f3:4d:4e:50:01:3f:4f:a4:4d:c3:82:44:32:7f:d6:e7:a0:af:
         b4:23:2f:2d:13:16:33:41:4c:f5:39:19:d7:19:9b:7c:77:6f:
         39:7c:ec:44:02:88:19:9e:c1:54:bb:7f:35:5f:ad:bc:13:90:
         ee:de:72:26:5d:0e:b0:4b:d9:3f:1d:e8:05:3f:89:12:44:7f:
         96:c7:63:70:76:05:63:ad:93:40:cd:05:e9:de:3e:e9:72:5c:
         cd:58:ed:0e:74:d5:74:9a:a5:af:b9:0f:a1:fa:8c:65:b6:11:
         d8:25:e4:f2:89:74:55:c8:93:00:46:d8:ce:ac:a9:f7:85:5f:
         95:60:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:30:06 2026 by rpki-client