Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          Mc8zaVOSYRU8f+qY2vYTUZeBhX2ZooYZ2uB8kL8vh40=
Subject key identifier:   75:84:F8:26:C8:45:B4:11:38:2C:DB:61:0A:09:AB:1D:DD:7E:7C:69
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       019FAA79754E8CBF78A4187936F3E13A3BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          19FE
Signing time:             Tue 28 Jul 2026 20:45:14 +0000
Manifest this update:     Tue 28 Jul 2026 20:45:14 +0000
Manifest next update:     Wed 29 Jul 2026 20:45:14 +0000
Files and hashes:         1: DEnwWvywXaQoWX5uv792ebbZYus.roa (hash: UKmQiudj85vaQt2LZdYW4fQWF3MpXue2FudeO7Dr3eo=)
                          2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
                          3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
                          4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
                          5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
                          6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
                          7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
                          8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: BxeDLp/C7HCM9SAla9OXZFoKovetOtdaKdzvqQwXz6E=)
                          9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
                          10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:79:75:4e:8c:bf:78:a4:18:79:36:f3:e1:3a:3b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Jul 28 20:45:14 2026 GMT
            Not After : Jul 29 20:45:14 2026 GMT
        Subject: CN=7584f826c845b411382cdb610a09ab1ddd7e7c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:32:9f:8f:ff:25:ad:a6:b9:0c:ce:f9:2e:
                    e7:ec:c6:27:8d:87:1c:ff:bf:d3:de:54:22:9f:78:
                    b8:a5:a5:66:a4:be:59:09:88:26:2d:ac:ef:41:cc:
                    76:26:2d:2c:09:e3:80:82:ad:e5:ec:2a:7a:9d:8e:
                    bd:b2:86:02:d5:1b:02:be:cb:61:18:61:18:ec:22:
                    52:11:9c:64:d4:f1:40:41:60:60:c9:20:a3:4b:2f:
                    73:5a:b4:ad:3f:fd:aa:54:76:b4:95:16:c8:be:9a:
                    05:33:7d:08:38:3e:6b:d2:37:4b:b6:e2:36:0c:3d:
                    d8:7b:19:1e:35:51:b5:7e:98:01:b1:7b:b7:04:dd:
                    2c:fb:ba:43:aa:16:20:a8:76:c5:67:7f:87:ad:f6:
                    b0:16:9d:5d:69:71:f4:25:c2:8e:e6:f5:ad:dc:ac:
                    6e:ca:c4:28:38:d0:b0:13:d8:16:de:64:70:01:cf:
                    f8:d5:e1:46:e6:2e:48:3d:86:db:a4:9c:14:a2:62:
                    af:9d:ea:5d:d8:0b:2d:fe:20:5b:5c:4e:21:6b:93:
                    af:6a:0c:58:9a:1c:2a:9e:d1:0e:ce:99:b2:e9:9a:
                    c5:43:3d:ad:99:28:41:9f:ad:86:81:bb:99:4b:63:
                    d9:3e:86:38:df:9f:f6:91:75:ed:f8:81:1e:c4:a3:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:84:F8:26:C8:45:B4:11:38:2C:DB:61:0A:09:AB:1D:DD:7E:7C:69
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:a9:86:1f:27:8f:31:b5:1c:ec:1c:8a:02:67:d6:11:27:
         35:8e:9a:6f:9e:4f:e0:f3:00:4e:c7:00:f3:1a:f7:4e:b4:56:
         69:2f:93:5c:a1:7d:18:27:40:15:8c:da:3d:00:ea:ad:a5:5c:
         60:af:40:89:9a:d7:a2:25:78:bb:ba:a1:15:78:90:ab:fa:c4:
         d1:7e:31:95:0b:08:aa:48:57:9d:16:27:5e:f6:0f:6d:0f:d6:
         c1:58:d7:3d:82:28:6c:d3:13:0e:07:d1:33:dc:4a:61:cb:fd:
         d2:d6:ba:c3:55:dd:b6:32:6d:6e:2b:a2:e5:c1:d6:54:be:60:
         5c:9d:ce:d4:20:dd:a9:9a:6e:51:17:2a:89:63:54:ac:59:4d:
         b2:c9:44:fa:99:dd:40:75:25:3a:d6:43:86:24:bc:fb:1b:91:
         ff:76:28:1d:10:02:18:bf:84:54:44:57:b9:0f:de:14:23:f9:
         0f:6c:a5:32:e6:fb:c8:c8:0d:65:e6:5c:70:a6:46:ab:75:dd:
         47:50:18:4a:4b:b6:03:8b:be:96:72:f2:45:f4:d7:21:d7:fa:
         07:1f:cf:05:36:41:a6:c5:6c:1b:56:bc:78:cf:0e:04:33:0a:
         27:8e:6f:0a:72:8f:1a:e2:65:14:9f:2e:6e:aa:02:b6:61:ba:
         38:82:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:12 2026 by rpki-client