Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File:                     koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier:          uIBwe7zGW1/0DYAtydDmfS9YlrhLbnQaMdk/LywZ6Gw=
Subject key identifier:   FB:81:C3:EA:CE:C4:B5:80:36:8F:01:C6:D6:DE:B7:C9:C3:83:2F:B3
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer:       /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial:       019FAB2C6959559C69ADD0A74C11C2738898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 00:00:42 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:42 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:42 +0000
Files and hashes:         1: f1xxhacm7jnvbldN6spjT65Vwn8.roa (hash: rqkDD8hNvJtlHHJ4fiGoQKM/oQxgw1TdOWMEVdkAPbI=)
                          2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: CoDdVcqxnNpEu2MkEiOq5H/nNqsFwTKMxJN7uc3KtgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:69:59:55:9c:69:ad:d0:a7:4c:11:c2:73:88:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
        Validity
            Not Before: Jul 29 00:00:42 2026 GMT
            Not After : Jul 30 00:00:42 2026 GMT
        Subject: CN=fb81c3eacec4b580368f01c6d6deb7c9c3832fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:f5:ac:cd:bf:c7:89:df:9b:a1:e7:34:96:
                    02:1c:ee:22:ff:09:e1:2f:74:d2:9f:58:8f:8b:e6:
                    87:d9:ad:df:aa:59:3a:de:5f:02:9e:10:b8:4c:23:
                    e2:7a:51:df:f5:b5:4c:d4:9c:12:fe:1c:4b:48:64:
                    ff:01:ef:b3:8c:13:33:92:a3:f6:e0:11:e3:b5:e0:
                    c7:9d:e7:3b:fc:20:1c:ff:b1:a5:2e:ff:57:8b:9d:
                    50:f6:76:26:31:f9:09:da:71:2d:6c:dc:7e:43:5c:
                    c2:48:d6:4f:85:25:76:c6:eb:99:9a:4d:3a:40:36:
                    29:0c:ff:cd:ef:4c:a6:d3:55:e7:4d:db:2f:a8:7f:
                    6c:41:b8:3d:2d:d7:11:7c:f5:a5:35:8c:64:f7:2f:
                    42:a4:fb:75:76:d1:25:a0:fa:2d:1d:6b:93:17:7d:
                    20:ae:03:51:05:96:4c:7c:75:dd:4a:a6:20:78:91:
                    5c:ac:a6:49:64:5e:0c:bf:92:61:cd:fe:df:4d:f4:
                    a5:4b:8d:bd:14:92:4d:a9:5e:1f:ac:71:d5:99:4f:
                    06:cb:ad:7e:bf:bf:43:a7:5f:6e:b7:00:d5:3c:58:
                    c4:9e:7f:b4:31:1f:78:ce:21:0b:2f:96:b5:43:0f:
                    37:58:f5:c7:bc:b7:4c:ca:55:83:3d:31:44:9b:52:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:81:C3:EA:CE:C4:B5:80:36:8F:01:C6:D6:DE:B7:C9:C3:83:2F:B3
            X509v3 Authority Key Identifier:
                keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:ec:75:c6:c8:47:e7:17:0a:99:39:0f:0e:b1:a2:55:e4:
         84:96:70:f2:7d:5e:04:50:de:f1:b5:6e:d7:3b:71:8c:cf:03:
         39:8e:c8:e2:b9:f9:82:85:08:b8:98:47:49:84:02:f3:af:44:
         0f:15:03:80:49:7d:5f:99:a0:f7:b4:83:5d:9c:0c:34:b5:78:
         ec:e0:01:54:41:90:02:c3:ab:d8:ee:9d:3b:e6:ef:eb:a7:e8:
         6f:8f:0e:c5:c7:cd:ca:99:6d:34:90:3d:32:83:f5:e5:e6:86:
         0f:87:76:a7:50:c0:93:0f:d6:c1:dd:43:e1:fd:60:12:ca:51:
         39:bd:7a:a6:fd:c6:4a:bd:d2:3e:47:ee:a1:a4:98:07:0a:1d:
         d2:b6:f2:09:ff:9e:56:ea:57:3a:e9:16:9c:83:f7:9a:e0:90:
         d8:4f:3d:f8:9e:f8:46:49:c3:03:ca:bd:49:d8:34:5a:39:44:
         60:87:c6:f2:26:e2:07:71:f0:38:06:8b:bb:b5:83:cb:e8:00:
         b0:58:2d:b7:23:a4:4f:ab:39:fc:24:11:1a:ac:7e:e4:40:a0:
         30:5f:6b:14:15:32:0f:1e:23:23:ee:2a:f7:1f:c9:8d:a0:cc:
         0b:04:1f:e7:97:28:98:9a:f1:fb:cc:db:fc:3e:11:8e:2f:e4:
         d9:b1:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:05 2026 by rpki-client