Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File:                     krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier:          PIDAbFCGvRxfc7dQJIvM7QxPDMJ98aPzPeMWXjP0BZM=
Subject key identifier:   7C:71:50:F7:AD:0A:84:00:08:F6:E0:24:23:FE:5B:57:41:98:C4:44
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer:       /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial:       019FABD0F1844AD0E6AFAEDD9902B3D15DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number:          18FA
Signing time:             Wed 29 Jul 2026 03:00:24 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:24 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:24 +0000
Files and hashes:         1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: TuLpHwRVJmPj7Ix7TnShpOSANOf+f02ZOVahMpcEOMk=)
                          2: zOvOdvEFDu9Mo4Hd8BTTn_Gseog.roa (hash: i7r8dEO0PV70SWBxos0ykVviEGzZou2X66tLzrHIOKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d0:f1:84:4a:d0:e6:af:ae:dd:99:02:b3:d1:5d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
        Validity
            Not Before: Jul 29 03:00:24 2026 GMT
            Not After : Jul 30 03:00:24 2026 GMT
        Subject: CN=7c7150f7ad0a840008f6e02423fe5b574198c444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:44:4b:b9:63:e5:99:82:e1:a1:e1:58:12:
                    0c:c6:f7:8a:6f:4c:31:75:17:59:cc:01:9c:bd:e0:
                    01:56:3c:8c:06:d9:22:44:b5:e3:58:06:3f:8d:c2:
                    48:75:10:72:ca:a5:1b:d1:20:be:08:a6:d5:a8:79:
                    3e:27:7f:08:f0:74:c3:b9:04:ab:f2:96:50:c8:79:
                    c9:e5:ce:10:82:5b:5b:8a:5d:3c:3d:ee:ae:70:8b:
                    a8:e5:03:79:c5:3c:f6:6d:78:fa:5b:37:5f:67:4f:
                    65:21:44:8e:bd:94:bf:55:24:58:63:d5:9c:03:fd:
                    f4:a1:89:eb:58:42:d7:92:a3:40:03:c5:74:0b:20:
                    7a:8f:6d:da:8b:ec:e5:32:be:8c:a8:d1:ba:9d:8a:
                    7b:ef:66:e6:09:35:cc:c2:5f:70:cc:51:60:30:81:
                    9b:53:aa:39:51:bb:3a:3b:8d:54:ef:00:6a:1a:83:
                    33:7a:82:47:0a:85:df:90:72:54:d8:de:e1:03:eb:
                    b5:a5:7e:3c:48:d1:ee:c9:c0:b6:a1:34:48:1f:44:
                    f0:59:7b:d0:c0:91:4e:55:a3:5e:03:be:fd:e8:d9:
                    26:74:72:54:fd:38:7b:c8:8f:8d:b5:d4:c4:a4:1c:
                    77:71:89:88:12:e9:bc:77:a6:46:dc:18:b4:d4:75:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:71:50:F7:AD:0A:84:00:08:F6:E0:24:23:FE:5B:57:41:98:C4:44
            X509v3 Authority Key Identifier:
                keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:16:f5:d0:f6:27:5c:0b:a0:5f:40:42:08:c2:2b:0e:9a:fd:
         26:8f:cb:0c:65:cd:27:c6:90:91:89:d6:e9:74:14:6c:f7:60:
         15:0f:34:ce:48:0d:b8:44:87:87:d0:7d:46:1b:86:76:87:6a:
         08:15:e0:29:40:b7:c4:d0:30:59:6e:a2:9b:04:d0:0a:b8:3b:
         f3:1c:b9:6b:e9:ec:7b:56:58:a2:8d:b0:7c:e3:3b:4f:99:bd:
         5e:5f:d8:86:82:a5:bd:c6:60:a0:35:f7:63:e2:40:fe:48:c5:
         50:c8:53:e9:a3:6a:51:e9:81:79:6c:53:df:e7:10:38:87:04:
         39:1f:c5:ed:1f:52:26:ae:8d:e2:40:7c:46:62:dd:6c:b2:c3:
         13:a8:0e:60:89:fb:25:5c:fe:94:f5:cf:5f:42:08:3d:85:5d:
         d4:c9:51:df:06:ab:e5:e9:23:cb:15:8f:33:66:ac:43:71:27:
         95:25:58:be:a8:56:d5:e4:3f:f1:59:7c:cd:f5:c7:45:1a:a4:
         c9:c8:6e:d9:b7:43:4a:a0:1f:a6:1e:d4:31:65:43:cd:6c:a7:
         e2:d4:c6:63:96:ea:f2:8f:dc:c2:63:1b:07:b4:c8:08:42:79:
         47:15:63:7a:ae:a5:14:5a:bc:87:01:b9:ac:42:ab:8f:c2:85:
         e5:c7:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:17:02 2026 by rpki-client