Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File:                     Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier:          635qShRSSaQ7uX50qgU5MvQA08qvR/Lk76wntQXb4Uc=
Subject key identifier:   F6:19:DA:DA:4D:CB:ED:62:B0:41:5C:A1:D6:FA:80:BB:4B:A4:BD:1F
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer:       /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial:       019FAD51BBD7D8AC541D302D16102F4060B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 10:00:42 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:42 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:42 +0000
Files and hashes:         1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: Hy4IkwDDy7IXtPpSJ+Gn+pv39FDSW143FqpbSF57xj4=)
                          2: Mg9CIEP-XkNK3HjRwB4U97AixZM.roa (hash: QNXNP032rfC9FKERXA++HNZyYYvFs9+9TJ5FNJnFvfQ=)
                          3: WFvPF_8VC-S0qgsTBdvqpE6pWug.roa (hash: hC9en9kRQ4ZgWYQeZCnrellhiIJNeme26ezCh3FsZRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:bb:d7:d8:ac:54:1d:30:2d:16:10:2f:40:60:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
        Validity
            Not Before: Jul 29 10:00:42 2026 GMT
            Not After : Jul 30 10:00:42 2026 GMT
        Subject: CN=f619dada4dcbed62b0415ca1d6fa80bb4ba4bd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f5:53:85:c4:e4:31:1b:33:36:81:97:71:9c:
                    92:04:53:6a:63:c6:73:53:7c:ef:33:2e:7b:fd:62:
                    d8:ec:ee:0b:d8:9a:d2:61:52:2a:84:52:f7:4b:10:
                    f0:07:f7:00:4f:65:b7:0b:96:60:f5:d4:c5:c7:6b:
                    fe:b1:9d:20:ee:c4:c1:1b:96:61:29:58:93:3c:5c:
                    5f:38:43:2e:ef:92:de:c4:7d:27:aa:be:18:f9:ba:
                    65:a9:b4:99:e3:7a:db:ff:59:93:0b:47:48:c5:1e:
                    e2:1d:fe:c1:75:32:28:d1:3b:8b:05:1e:1f:85:47:
                    45:c2:55:5d:ce:58:02:45:55:81:de:79:25:3d:c7:
                    d6:f5:a9:5c:12:31:0e:92:63:13:e5:a2:78:90:32:
                    91:e4:cb:0e:aa:cc:1b:bb:43:03:46:36:95:8a:cc:
                    28:c0:be:e2:0a:27:6f:01:1b:46:56:f1:96:c4:ce:
                    53:10:3d:ec:ca:5f:55:22:be:a8:0c:db:8f:14:e8:
                    62:3f:3a:c4:d5:e6:8b:7b:54:3f:84:bc:39:75:3c:
                    e2:5d:12:8b:3c:35:80:6f:8d:cc:ca:6f:69:dc:43:
                    3e:18:7f:7e:59:23:6d:d7:03:60:78:45:08:57:dc:
                    16:52:26:29:15:3c:ec:65:a1:dd:42:ff:9d:4f:58:
                    b4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:19:DA:DA:4D:CB:ED:62:B0:41:5C:A1:D6:FA:80:BB:4B:A4:BD:1F
            X509v3 Authority Key Identifier:
                keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e7:21:93:13:85:a2:ac:b8:48:c6:a6:67:99:76:d3:2b:aa:
         25:30:69:52:88:b1:ad:67:19:d0:c8:e2:07:5d:76:93:54:e2:
         2a:93:ed:87:9e:a4:ab:e6:5e:9b:22:89:9c:02:a9:6f:69:7f:
         d9:d2:31:4e:53:11:15:a3:94:73:80:8e:bc:18:eb:3f:68:19:
         ad:58:6a:64:69:52:4e:8e:41:40:3e:80:34:6e:8c:32:4d:17:
         80:e0:3f:40:73:12:43:65:5c:cd:c8:2b:d5:e3:b4:17:f9:fa:
         18:46:e3:d0:7e:b3:68:00:16:3b:57:e9:bc:02:3f:bd:de:05:
         01:af:2b:83:d6:fb:c1:16:19:b6:4a:19:1c:25:7e:d6:8b:22:
         01:5c:79:b6:a2:72:2f:c3:65:1f:49:13:46:65:6c:2b:56:6c:
         88:dc:2d:b7:d5:63:a0:fc:58:32:d0:7c:6b:6e:a0:12:61:d8:
         c6:6c:3b:3b:89:3c:15:90:9f:19:ee:dd:b4:72:dc:8d:28:68:
         99:82:8b:a3:97:84:f6:97:42:d4:00:63:90:2f:26:ba:4e:d2:
         55:1d:65:d7:66:4a:c3:d1:1f:7b:0e:4a:5e:f9:91:7d:36:63:
         f2:3a:89:ff:4c:f8:73:a9:6a:82:82:d5:ea:66:5d:49:e5:7f:
         20:83:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:28 2026 by rpki-client