Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File:                     kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier:          KDiwwIQvFShokLBUvHHQDMDqrcOHGpcMh7cC32EyItU=
Subject key identifier:   A4:2A:24:79:9E:29:80:73:6A:4F:D7:0B:DF:FF:11:61:D4:A7:AB:1D
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer:       /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial:       019FAB631ADEA610B8755BC5C94718181846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number:          0463
Signing time:             Wed 29 Jul 2026 01:00:26 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:26 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:26 +0000
Files and hashes:         1: 2gUkVkvBn7Q1vmsW6vZYesIru3E.roa (hash: 3mugJDdnEmraVaKho4WrwncKKVb68YhcTwc6RXDfj/k=)
                          2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: Kwh2XsUPNttpfV3r4OValsa5F0NA+L4MuVpizR+Mucc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:1a:de:a6:10:b8:75:5b:c5:c9:47:18:18:18:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
        Validity
            Not Before: Jul 29 01:00:26 2026 GMT
            Not After : Jul 30 01:00:26 2026 GMT
        Subject: CN=a42a24799e2980736a4fd70bdfff1161d4a7ab1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:e2:6d:a3:b2:29:11:f0:d5:7b:94:04:33:
                    45:48:3d:11:84:da:b0:63:c2:74:0f:50:3c:f1:cf:
                    c1:15:10:74:f5:0a:1f:44:1c:76:ff:44:00:96:88:
                    c8:8b:16:56:24:ef:34:39:eb:d9:60:76:78:f7:e4:
                    b6:6b:32:bd:5a:d4:ea:85:d9:2f:0c:c7:26:78:21:
                    15:5b:7d:15:10:09:52:68:15:fb:c9:24:dc:4d:43:
                    66:08:d5:56:34:f0:e7:22:8d:48:99:41:f3:e5:ad:
                    89:64:19:22:e8:29:e0:7d:2b:42:e8:91:a8:b4:f5:
                    66:f1:09:4a:ca:1a:e2:49:ba:d0:f7:5b:d5:03:57:
                    7f:91:38:80:8a:01:58:3f:6e:86:0a:36:08:97:f4:
                    c4:64:f3:15:de:40:ea:dc:da:ae:e1:18:20:dd:8e:
                    3f:35:1e:bd:d1:9e:14:7c:59:70:be:06:1d:fc:99:
                    ad:ed:4c:fd:25:c8:5c:fa:51:ad:1c:70:34:a1:47:
                    28:f1:16:71:2d:70:53:34:da:e2:d2:87:fc:14:0b:
                    63:b9:45:3f:f8:ce:06:5e:73:2f:08:7f:df:71:04:
                    4f:27:ee:e4:d7:94:19:52:de:83:c1:a8:bc:8c:66:
                    e5:29:9f:4e:d2:6e:cf:3d:d8:3d:2c:22:98:a0:22:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2A:24:79:9E:29:80:73:6A:4F:D7:0B:DF:FF:11:61:D4:A7:AB:1D
            X509v3 Authority Key Identifier:
                keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:1b:9b:f0:b6:55:fd:08:b8:90:9a:f9:26:f0:61:a1:4a:
         d3:b8:d7:52:c1:49:51:70:d1:6e:4d:35:46:ec:5a:a2:c2:da:
         54:5c:22:57:d9:cf:b3:b9:a9:36:95:b9:6d:7c:55:67:d8:68:
         67:58:49:0c:02:28:03:a2:63:86:53:9e:b8:21:3b:e1:98:ef:
         e0:00:6b:17:11:af:91:0a:56:f7:30:9d:09:e5:51:b7:d1:79:
         4f:6f:e3:81:73:d7:ca:1b:7f:c7:fa:ab:52:69:f4:c2:28:64:
         11:89:f2:e2:de:57:31:98:f1:90:5a:0d:f0:8a:cf:39:30:4f:
         94:fe:a2:b0:6e:5e:de:6c:f3:2c:32:ef:d1:41:1d:09:9b:ad:
         9d:cb:b6:f3:0e:15:fd:ec:5e:2a:ad:a8:53:75:76:7e:1a:7e:
         a4:33:d0:23:05:9d:1a:a3:db:cb:cb:18:f5:6b:e6:ad:ed:4c:
         93:2e:85:31:ef:29:5e:0a:00:d8:83:fa:f2:82:31:3f:b9:f7:
         19:99:c9:ba:e7:78:7b:27:ef:4b:77:21:41:69:ca:22:f1:e0:
         72:07:d4:87:bd:6a:b8:02:55:0c:06:30:01:60:1e:7f:cb:6f:
         49:5f:23:ec:f4:5c:78:06:0b:e7:68:62:4d:d1:f7:b7:e0:20:
         8c:fc:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:29:03 2026 by rpki-client