Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
File:                     kY-mQPg8SCrJWskFF0tSN9doN5s.mft (raw, json)
Hash identifier:          q+1JQZrCyiuH6BykydbEuSLMVmgsPm+2UUICm8v8ulQ=
Subject key identifier:   A1:00:91:76:0D:6B:FD:9A:C9:F0:AE:3B:65:52:24:AA:89:AA:78:14
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Certificate issuer:       /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial:       019FA899E1F47C0A831F525ED6816D02E814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:24 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:24 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:24 +0000
Files and hashes:         1: 251AqFOyskaKWs66aZFawfV5z14.roa (hash: XUxs9JPcVOmTRxaAw3XtUXshA8geswAzFtASBhH4g6w=)
                          2: 2WVr5p2H7r2azbb2WIvSV483tPM.roa (hash: IwiB9DNZvI6+xxe/bmcy9dKCy2z4spHmBIdmUbXkKUo=)
                          3: LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa (hash: npyymPGB2JJn3weBX4RtZOrvbRJhsnjy2HLem4uOQMI=)
                          4: Vt_o83jeAXwgrEV6QfNyihxJdG0.roa (hash: Fgpr0tl2Jx7B2BNewOwkF0HNqx/3fOLm+uiSmIq6TZQ=)
                          5: kY-mQPg8SCrJWskFF0tSN9doN5s.crl (hash: 6Cq/tjhihpolAErQhl7Bsb5hog1CItC6n9xY3EYzpik=)
                          6: k_p0G99T-kOb8IDRnsd82pe43DM.roa (hash: fAHyhB6wFFezzUaln2OnR6OxOwi0d6bOr/s4KfY2WbI=)
                          7: xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa (hash: zVFYnjswOeC1o9AjP9zhGvgKqOwrSI1huC/5Bh7oUPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:e1:f4:7c:0a:83:1f:52:5e:d6:81:6d:02:e8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
        Validity
            Not Before: Jul 28 12:01:24 2026 GMT
            Not After : Jul 29 12:01:24 2026 GMT
        Subject: CN=a10091760d6bfd9ac9f0ae3b655224aa89aa7814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7c:58:df:79:71:c9:06:a0:cd:7b:bd:65:03:
                    9f:39:2f:f8:6b:bc:23:fb:73:ef:9f:7a:f0:6a:11:
                    bb:9a:54:10:f5:ed:7b:1d:e9:dd:c0:57:c4:6d:ea:
                    0b:85:37:ad:28:24:b0:87:61:b5:79:3e:df:46:1d:
                    68:f6:ac:cd:ad:59:77:26:5b:24:10:ff:b5:9a:3c:
                    8a:b5:03:d0:da:12:36:5c:f6:8a:a4:df:02:b0:21:
                    1b:d2:60:50:8c:6a:c3:b6:85:f6:ec:ff:ff:da:3b:
                    a3:6b:63:6d:19:36:9e:f2:24:b9:27:58:b5:63:4e:
                    c5:82:4e:c3:47:63:6d:c9:90:f1:04:f5:90:f8:07:
                    3b:c3:76:54:f7:01:50:d3:b3:4e:9b:8a:75:98:09:
                    c7:b4:e4:1b:9f:5c:66:35:68:c9:12:9f:48:60:09:
                    68:1f:19:cc:6e:38:8d:02:c9:c2:f7:17:de:d1:70:
                    ff:c5:0c:03:df:aa:f3:d1:a3:e0:66:8f:96:6b:18:
                    95:13:6b:74:a9:eb:6f:35:fc:7a:bd:c7:5e:19:4b:
                    80:58:3b:51:cb:98:87:dd:85:6c:e8:3a:2c:6d:6d:
                    c4:d4:c2:ca:4d:24:f0:c5:bd:b7:60:af:5d:75:22:
                    47:27:7c:ae:a1:3d:08:b2:95:07:a0:56:db:a3:29:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:00:91:76:0D:6B:FD:9A:C9:F0:AE:3B:65:52:24:AA:89:AA:78:14
            X509v3 Authority Key Identifier:
                keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:02:3e:6b:6e:41:60:f9:8a:46:23:98:ff:e8:c0:45:ae:21:
         11:d0:2b:da:7d:51:e8:8d:fe:1d:7f:93:11:0b:88:7f:89:f8:
         a9:8e:8f:42:f2:49:90:56:3b:08:01:2b:75:cc:80:84:68:d3:
         61:b9:26:5b:72:bf:d8:b5:43:1b:7a:2b:72:90:2e:2f:c9:33:
         18:34:f5:28:c8:21:03:fc:c8:52:96:8f:d4:15:24:7f:5e:0a:
         90:ce:7b:a4:55:96:be:e0:84:a0:f3:85:bd:6e:08:70:71:11:
         52:0c:da:3c:37:c3:9b:46:99:ce:e5:db:b2:82:e0:a1:78:1b:
         d6:a5:6a:4d:54:6a:8f:1f:12:25:8d:4f:ed:9c:d2:f2:d4:95:
         b2:5d:8a:84:af:b9:4e:7e:45:70:6a:bf:f5:c4:6b:36:3f:c2:
         94:9a:ef:ad:83:6e:f6:39:d5:a5:5c:19:1d:a3:50:72:13:1d:
         f9:7b:d1:0c:00:16:cd:3c:a4:12:35:9a:bc:bf:3c:d2:bb:df:
         18:09:94:79:f5:49:3a:d8:b8:43:e1:0b:49:c9:f3:dc:45:50:
         ee:30:8b:5c:3c:56:ca:32:3f:ba:30:3f:f3:c3:ea:2f:d3:f5:
         75:4c:1c:6d:bb:87:05:15:6d:87:f4:b3:e6:66:a5:61:d2:77:
         74:af:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:37:44 2026 by rpki-client