Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File:                     K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier:          9v6FNh7adzjHR4quar7uBii4Q99oysRgxkcQlN33EN4=
Subject key identifier:   98:DA:A8:31:FF:B1:9C:78:6E:D3:4B:63:7C:04:64:85:4B:6F:BE:2E
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer:       /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial:       019FAB9A00D2131B39A7F3CA86ECD29C20D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 02:00:24 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:24 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:24 +0000
Files and hashes:         1: 2UmZFRrJ0P-2mwYSao7Xzkep2iA.roa (hash: N9+wOT3ic7u1Pc0UnkkcEFa7DljVTAIJF/p2BSuaQHw=)
                          2: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: z9tKEKBNxuWIvfymHBdgg8n+fDEV07g+o7cUReP9Oy4=)
                          3: a8hAdaOdxZFivnzP3avRHvD9kUw.roa (hash: FzlX7CBWyvP5RQUSSHhztLWIzIWu2YtxzCw2ArYeCTU=)
                          4: ncypf2iinEe-q_LnbnKjYSF5rJc.roa (hash: X77xC4nNcyrrbUpykZ9gvEucbXtxd0H2H3Sybmc5J48=)
                          5: sZzlwoV7VUnP0rnAO0okZeo6Iak.roa (hash: WXgl70GjiFz6sqLRQIYx3xNCuabeBF1y/DzdVPV9mJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:00:d2:13:1b:39:a7:f3:ca:86:ec:d2:9c:20:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
        Validity
            Not Before: Jul 29 02:00:24 2026 GMT
            Not After : Jul 30 02:00:24 2026 GMT
        Subject: CN=98daa831ffb19c786ed34b637c0464854b6fbe2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:57:4a:18:84:9c:53:74:4e:fe:04:6f:74:
                    cf:47:75:9b:ca:d4:bd:ae:f9:db:f7:c2:2c:66:2e:
                    78:3e:a1:20:81:23:af:e1:e8:5f:e9:a7:db:9a:3e:
                    8f:12:39:9d:9f:78:af:d5:aa:5a:d9:d8:63:75:7e:
                    4d:53:bd:f8:e1:99:36:ae:7f:6b:0d:09:4e:ba:83:
                    b5:4b:82:c7:4d:fb:a6:8d:df:88:cc:fc:3e:bb:80:
                    96:22:8c:a7:88:cd:92:dd:33:14:c0:2b:a8:78:cd:
                    88:88:a8:06:e6:fd:cd:92:6d:17:5c:a5:7f:3a:15:
                    32:f7:79:e1:de:33:fa:c6:cb:08:72:0b:55:da:c9:
                    58:99:fc:f2:7b:85:88:ff:ab:e0:9e:1d:c6:3b:66:
                    3a:8e:97:ec:6d:0e:e8:ca:96:1e:ac:eb:67:bf:3b:
                    b4:98:0f:9d:7c:64:24:e1:39:99:4a:78:06:42:1f:
                    54:d2:3a:e9:18:f6:c0:5c:a2:d0:44:5a:a7:ec:dc:
                    96:77:78:c4:c8:4f:77:58:8c:c4:95:ac:72:1b:10:
                    a1:7f:9e:fe:01:71:89:25:fb:e3:c5:cc:94:e3:8e:
                    cf:84:ee:3b:60:4a:93:0d:fc:6d:8e:e2:7b:b5:fe:
                    08:30:7d:85:77:08:70:5d:58:25:c0:59:d2:19:c8:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:A8:31:FF:B1:9C:78:6E:D3:4B:63:7C:04:64:85:4B:6F:BE:2E
            X509v3 Authority Key Identifier:
                keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:32:58:1e:f1:f2:ac:24:95:02:cc:af:d1:66:d9:34:a4:79:
         48:fd:92:a1:74:55:c5:bb:e7:14:96:26:a3:83:a5:4d:88:4a:
         47:80:24:e2:dc:1c:43:8b:4d:52:99:80:96:f2:c4:92:a6:83:
         e6:1b:07:0d:59:d6:b9:a4:66:db:9b:32:42:b7:2d:9c:1a:8a:
         76:95:b6:0a:0d:e8:45:74:23:dd:72:76:3f:24:31:38:e5:cb:
         4a:f5:cc:86:98:e3:3a:8a:af:aa:34:4b:44:14:9a:ab:d0:5f:
         b4:09:ea:16:30:cf:10:65:63:51:29:25:c0:55:47:86:b7:31:
         0b:75:30:15:27:ba:21:75:cb:bc:da:c9:e2:0c:7f:ca:48:a8:
         40:b0:51:54:6a:80:f6:31:52:62:92:af:e8:82:a9:b8:5c:f0:
         bd:d3:2f:a5:86:1f:cb:0e:9c:5a:90:fc:87:cb:c5:90:2c:6e:
         aa:66:8a:64:8f:92:0b:91:43:be:bc:a0:b4:02:cb:3d:99:ea:
         99:3b:ca:80:d6:c3:b4:bd:dd:2b:f5:72:eb:04:90:1e:d6:67:
         bf:c8:21:72:92:90:1d:1c:29:35:d5:2c:ed:c2:6b:98:d9:be:
         80:d0:3c:21:26:89:fe:db:f9:23:11:df:da:cf:17:46:56:e8:
         5e:d1:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:54:52 2026 by rpki-client