Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File:                     Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier:          w27GG3H9vzNlMwSwBzSrPBDir21o8ArZk/OR+tUmjAk=
Subject key identifier:   B5:6A:2B:4A:36:84:F8:1D:F0:D9:00:8E:05:99:DB:F8:63:6A:AB:B0
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer:       /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial:       019F95B6D5F98CD996056ED60CC233E8AD3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number:          168C
Signing time:             Fri 24 Jul 2026 20:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:15 +0000
Files and hashes:         1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: 5et6xkSrZ/5lTSZklVwk4EizDglkFOwSqYaIt0QqnAQ=)
                          2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
                          3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
                          4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
                          5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b6:d5:f9:8c:d9:96:05:6e:d6:0c:c2:33:e8:ad:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
        Validity
            Not Before: Jul 24 20:00:15 2026 GMT
            Not After : Jul 25 20:00:15 2026 GMT
        Subject: CN=b56a2b4a3684f81df0d9008e0599dbf8636aabb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f3:4f:07:27:81:a8:f5:77:71:a3:9e:bd:c8:
                    ef:b2:67:f9:aa:eb:8f:60:4c:5a:52:d8:eb:05:35:
                    ed:87:8b:80:69:8a:7a:a7:1f:75:88:8d:87:41:94:
                    89:7f:37:d1:9e:7b:0d:01:36:b6:a6:be:2b:f2:32:
                    81:77:ae:52:05:f6:bf:f5:a1:f2:7b:fd:fc:ff:b3:
                    7e:be:2f:b4:5b:fb:ef:fc:f0:a5:72:4d:d7:6c:ab:
                    47:4a:09:28:08:a9:ad:39:d0:d3:f9:f8:a2:00:11:
                    7f:67:3d:7c:8a:31:9c:9a:f4:91:de:e8:c1:09:00:
                    95:e0:9a:e7:b4:0f:97:7f:c4:63:ed:e4:1d:0a:2e:
                    bc:29:59:70:c6:72:a1:51:60:25:af:8e:0d:c7:0c:
                    a7:f1:e6:e7:9a:42:f8:46:b1:a6:8a:e1:3d:04:49:
                    5e:8a:a0:a0:1e:f5:7f:e2:f1:10:6b:62:60:57:b9:
                    c2:40:04:0c:ad:d9:48:d4:21:28:f8:7c:5c:07:5a:
                    46:c4:83:aa:cf:06:20:2d:ba:63:d1:42:97:81:b9:
                    5f:f1:3d:42:59:07:7f:16:f9:96:ae:62:27:b7:ca:
                    ce:07:19:ff:f3:24:c3:c5:c5:02:39:6f:dc:f7:95:
                    16:eb:0b:ee:a0:ff:1b:c2:ab:f4:ee:18:59:3f:93:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6A:2B:4A:36:84:F8:1D:F0:D9:00:8E:05:99:DB:F8:63:6A:AB:B0
            X509v3 Authority Key Identifier:
                keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7e:59:79:30:4f:3f:75:b0:0c:7d:68:6a:79:0d:23:a7:27:
         27:60:e6:95:9f:dd:82:6a:7a:0f:e6:53:2a:e6:93:3a:6c:b5:
         a8:eb:a7:c4:f2:d1:57:47:87:aa:7c:1f:4c:49:53:d8:ae:01:
         48:18:fb:5d:64:f7:0c:11:52:c5:17:57:92:37:ff:ab:ef:76:
         59:5a:05:c2:1c:79:b7:57:49:d7:d2:d2:46:f4:17:41:f1:4e:
         4c:c6:e0:1e:03:c4:ad:0b:b3:15:35:40:ac:c2:54:66:44:e3:
         16:c8:f2:1f:83:98:4a:21:42:1d:5b:cd:61:b5:58:7e:b8:59:
         1b:91:b3:25:84:fd:74:e1:ed:e3:a6:bc:99:0b:95:ca:cb:e7:
         6c:50:2b:40:ba:1c:4b:a9:f5:fc:41:af:70:15:1c:f6:ae:21:
         01:e8:55:19:54:15:ef:5c:a4:24:1a:f5:d3:db:23:6b:b6:ee:
         ce:44:90:50:fd:e3:32:b6:4e:27:f3:15:40:ea:a1:a2:ff:31:
         6b:29:01:18:35:6e:71:46:20:be:57:8f:29:cc:ea:98:4c:a9:
         9e:70:e2:56:4b:9a:72:ac:4c:c5:f4:49:a2:1d:80:70:89:fd:
         d0:8a:75:1a:67:06:1c:0c:90:e5:3c:59:65:56:e3:a3:73:10:
         54:cc:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:39:05 2026 by rpki-client