Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File:                     Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier:          /ZuRwEHDg4o+yD5mV/WSBnbwDAeFlsC1ZajMC+q0D2Q=
Subject key identifier:   1F:05:73:1C:D7:C0:41:E8:AB:92:CC:C7:D1:81:ED:51:D9:40:47:3B
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer:       /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial:       019FA9E29FC215D08AB4F106B58B28B0AF4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number:          1193
Signing time:             Tue 28 Jul 2026 18:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:29 +0000
Files and hashes:         1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
                          2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
                          3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: KLDVORCOCmva2z++m9CKPrkwuMpaneKjgCfUQuIQHrc=)
                          4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:9f:c2:15:d0:8a:b4:f1:06:b5:8b:28:b0:af:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
        Validity
            Not Before: Jul 28 18:00:29 2026 GMT
            Not After : Jul 29 18:00:29 2026 GMT
        Subject: CN=1f05731cd7c041e8ab92ccc7d181ed51d940473b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:40:4e:4c:aa:a7:c6:40:f4:51:73:7a:08:
                    fb:6e:82:29:e8:b9:0d:18:c4:8b:fe:5d:b7:03:2e:
                    98:48:35:75:6d:4b:d1:5f:0e:d5:05:74:4a:ae:d6:
                    7b:54:b0:7f:4d:6c:6a:a7:f0:b2:ec:c4:e8:3d:4c:
                    f3:e5:6d:fb:26:79:2c:77:d1:3f:42:cb:a9:65:0f:
                    d6:cc:e3:b1:ca:40:90:4d:63:69:b0:d6:90:72:b7:
                    cc:90:6a:e8:ad:98:0c:56:30:76:d7:fc:af:76:89:
                    96:64:67:68:c0:69:cb:91:25:31:47:6b:69:cf:9c:
                    a4:98:2d:cc:58:f0:f1:ba:c6:8f:07:11:87:04:26:
                    b6:7c:f3:56:b2:1e:57:0e:fa:ab:5f:3f:0b:66:6a:
                    81:d7:ee:e5:d0:ef:48:59:92:14:0d:a1:af:3b:ff:
                    45:08:c1:be:89:49:92:8b:a4:64:e6:86:b6:a2:98:
                    c5:23:65:40:a9:69:7f:a5:5a:8e:0a:1a:c1:4b:9a:
                    c2:73:08:6b:38:61:8f:bb:ad:6e:46:72:4d:25:1c:
                    7e:a8:61:e0:bb:62:7a:6d:17:85:0c:30:87:d6:cd:
                    7e:56:35:a4:25:a0:7a:18:5f:19:42:9e:f3:4c:d0:
                    fd:10:d0:5e:87:c7:3a:dc:6c:96:c7:9a:5b:d3:45:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:05:73:1C:D7:C0:41:E8:AB:92:CC:C7:D1:81:ED:51:D9:40:47:3B
            X509v3 Authority Key Identifier:
                keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:33:36:a9:e1:87:2d:45:5f:be:25:e4:30:5c:5b:0c:d5:7e:
         da:09:5a:36:79:c5:18:18:1f:f5:3e:8d:52:46:a4:7f:68:23:
         81:fe:02:62:45:99:bf:dc:93:d3:6d:a5:6b:0f:2a:fa:58:16:
         d4:eb:37:85:9f:e9:11:aa:f2:ad:96:b4:6d:10:9f:cd:eb:57:
         97:15:da:c3:88:49:a3:c2:ff:7b:3b:13:83:40:a7:88:6c:d6:
         20:cc:fd:43:be:e8:d8:3c:b1:4a:b3:ef:d9:2d:43:d8:82:5a:
         80:5c:78:8e:f6:e6:95:a3:7a:6a:9f:e5:3d:32:90:d0:b6:ed:
         e7:50:0d:46:05:cc:21:84:b9:dc:fc:d4:eb:4f:86:a5:0f:2e:
         8a:f2:53:a1:9e:30:2f:d8:ba:9c:d1:5f:4d:c0:bb:be:1b:44:
         75:b1:32:29:54:c2:28:ac:9f:99:cd:a1:de:a0:52:3b:fb:81:
         27:4f:a7:1f:6e:5d:2d:db:03:c5:c5:ed:d2:54:b0:7c:72:92:
         64:9f:4a:28:94:12:29:42:d4:ee:7c:91:26:3f:1a:b1:eb:50:
         f2:80:26:0b:ca:e7:13:e4:aa:40:75:91:70:fe:4b:e4:c6:fe:
         81:1a:61:4c:15:2a:d0:a6:00:73:31:ab:06:1e:2a:9c:55:ac:
         66:a9:c2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:17 2026 by rpki-client