Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          bZwRavKhF5WZhkzcr6+x8oNcT4u0f6OgHz4hU0PZQDo=
Subject key identifier:   E9:1F:40:0C:A2:9B:32:0C:78:FA:E8:F8:28:DE:22:CF:DA:CB:2C:34
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       019FABD0EA31E028841A94E3264784D9AA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          1553
Signing time:             Wed 29 Jul 2026 03:00:23 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:23 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:23 +0000
Files and hashes:         1: EDNpAts-6JeGE5wjiUM5BMSnB9k.roa (hash: URMxngJbXriRE2iOut0YpTm56ViTEGhL3sKLZKHuyJ0=)
                          2: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: Rii3gw5bneHwEs5RTcmsRQNRQWvHn0/axMCBnN1CSaM=)
                          3: Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa (hash: DDYkbbLPOZouFDJgBa+WHylISlZR4ujlVO/1zXw9mng=)
                          4: UBjaQjSsvCaMWIObSymTDrfellU.roa (hash: FakZBVr4LoPzsh/Z6oDhedet2QWrNOrHB6+ZNqqvw9I=)
                          5: g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa (hash: YP1AJ0q+zSM445DjhCgE/dmdRBL7ryjwtDbdKhvu3Rg=)
                          6: sAk06Tsd-_YR9NQduC3T-piAvWk.roa (hash: xw7/19cXkRCZDOVeEPf+Eoup5YiNyQhWAOUhvYY+IJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d0:ea:31:e0:28:84:1a:94:e3:26:47:84:d9:aa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Jul 29 03:00:23 2026 GMT
            Not After : Jul 30 03:00:23 2026 GMT
        Subject: CN=e91f400ca29b320c78fae8f828de22cfdacb2c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:8e:f5:89:61:1d:1b:09:77:a5:71:61:03:
                    80:c6:1f:e5:55:76:03:5d:50:d7:9a:37:41:e8:c9:
                    1f:e5:ed:c3:8f:b7:5e:5d:ee:d9:56:df:bb:ba:fe:
                    64:a4:3c:26:4e:5a:07:d0:cb:01:14:07:7b:0a:13:
                    f7:50:8a:31:69:4f:d7:83:47:32:66:41:58:e7:69:
                    01:eb:64:d1:51:31:0e:0f:fc:64:31:33:ee:61:1b:
                    1f:66:0c:27:52:bc:30:cb:d3:c6:23:65:87:e9:37:
                    7a:10:1a:97:87:ad:3c:29:8c:b1:e6:55:34:05:23:
                    2f:54:67:1a:44:1e:9a:81:43:00:76:86:47:c7:a6:
                    f6:1d:57:f5:27:18:6c:42:ac:6e:ce:b9:07:97:59:
                    54:79:63:81:f1:b9:f9:00:4d:95:15:ba:53:6e:61:
                    85:38:d4:92:60:52:c2:76:90:d3:21:c9:48:a7:11:
                    24:5f:89:d2:5d:c7:88:9e:bd:34:42:a8:7d:50:18:
                    30:53:42:fc:9a:e3:d8:ec:a5:ca:b3:9c:3b:69:39:
                    5c:2e:18:3c:4f:9e:83:2d:1b:5f:60:e3:7d:32:76:
                    44:f6:c5:1b:01:aa:e8:d7:24:da:7d:c8:a0:a5:7d:
                    6a:4d:eb:85:4a:8d:76:6d:6d:88:f1:81:62:42:5d:
                    a1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1F:40:0C:A2:9B:32:0C:78:FA:E8:F8:28:DE:22:CF:DA:CB:2C:34
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:83:4d:85:ba:69:f0:92:e6:97:6b:23:c5:c7:64:d4:d8:8a:
         22:37:32:94:27:a1:49:16:81:35:df:3a:26:b4:f8:04:f0:83:
         62:14:16:b9:7f:e5:28:b1:31:29:79:67:9b:af:bf:d2:2e:c3:
         31:8a:f0:1e:ec:7d:2c:f5:03:23:29:88:bf:e5:35:eb:c2:8f:
         23:9d:6f:40:00:3d:fd:12:1c:61:da:ee:8a:e7:7c:53:ea:c0:
         63:f6:69:55:5c:8c:0a:d4:46:88:59:70:6d:71:f6:27:79:02:
         24:3b:fd:02:9f:3f:fc:ac:ad:f6:3e:55:cc:54:85:49:e1:2e:
         7b:19:b3:76:bc:4e:9c:c6:3f:7c:5d:60:8f:ed:2e:8c:7b:77:
         0e:ac:a2:02:81:a2:c7:19:f5:2c:fe:09:df:81:5f:56:69:2f:
         b4:13:56:ab:5f:bb:b3:c8:3f:55:76:3c:cc:72:b1:df:ed:d5:
         ec:88:e6:44:cf:d8:b1:02:58:eb:34:47:e2:df:4b:e6:09:f7:
         f3:7b:a5:cd:f5:75:82:30:05:78:02:8c:f2:7b:86:31:89:d2:
         4c:5f:f9:e6:95:3b:11:ac:a7:0b:bd:65:2a:04:6d:23:c3:10:
         50:6b:57:82:a1:d0:6d:3f:43:f0:4d:61:37:eb:4a:99:ab:cd:
         73:5a:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:01 2026 by rpki-client