Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File:                     KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier:          4fLOEjuAlhn4o/oInk0qD0Y/zpx2r2VcYyGNorFky8U=
Subject key identifier:   B6:3D:60:C5:D8:01:6E:56:E0:11:D8:40:99:35:E1:32:63:E0:A4:C5
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer:       /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial:       019FAC3F07AD0791E303580EEFAFC8DCA0B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number:          119B
Signing time:             Wed 29 Jul 2026 05:00:39 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:39 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:39 +0000
Files and hashes:         1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: YMCSNvei67WiGnPO6QREvGhspLJvNmntDylO7+oxedc=)
                          2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:07:ad:07:91:e3:03:58:0e:ef:af:c8:dc:a0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
        Validity
            Not Before: Jul 29 05:00:39 2026 GMT
            Not After : Jul 30 05:00:39 2026 GMT
        Subject: CN=b63d60c5d8016e56e011d8409935e13263e0a4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:69:c5:d7:bc:2e:2f:f5:92:39:7f:58:a3:
                    a8:51:dd:d4:11:5a:8e:c5:66:64:a2:2f:9d:97:46:
                    0e:af:1a:88:37:1e:d1:23:b2:f6:04:99:8c:06:5d:
                    0e:ab:cc:81:a5:07:88:a0:c9:cd:a6:99:b1:00:e8:
                    51:ba:85:c7:a5:d8:ea:e8:df:2f:5e:80:80:aa:73:
                    02:29:8c:6b:0b:22:49:0c:d5:f8:f8:a4:4d:cc:58:
                    fa:14:bd:61:8e:f9:7b:7b:31:75:8a:13:92:f5:b9:
                    d0:06:d3:cd:6a:5b:21:ab:14:1b:33:af:6e:af:2a:
                    86:e9:fd:64:66:2e:86:00:22:4e:6f:13:3d:eb:db:
                    6d:4c:24:dc:72:9f:50:3f:6f:20:3b:d0:16:9c:96:
                    a3:ca:e7:31:87:dc:68:3c:24:17:3f:1b:42:5a:f7:
                    bf:e8:c9:a1:84:7b:1d:fa:71:f9:9f:69:db:ce:aa:
                    1a:3c:e4:37:09:52:28:b6:88:fd:4a:90:bf:c2:b6:
                    77:e7:8a:9d:e9:72:15:9c:da:ce:7e:a9:25:3d:73:
                    8f:0c:c6:30:52:57:a2:be:63:54:bc:91:8c:e7:84:
                    ea:70:d0:fe:88:60:f2:b7:b5:9e:f6:84:61:fe:d0:
                    82:da:1a:51:ca:68:2d:8f:6d:24:33:8c:26:13:20:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3D:60:C5:D8:01:6E:56:E0:11:D8:40:99:35:E1:32:63:E0:A4:C5
            X509v3 Authority Key Identifier:
                keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8c:ed:40:24:6e:4a:a3:52:6c:9e:90:b9:40:c0:55:d0:fa:
         c1:75:4a:d4:be:d5:31:91:c6:2c:97:3c:0a:72:cb:fc:c7:c8:
         e4:b3:e7:07:ba:fa:8e:07:55:59:25:e9:f1:9b:a6:05:22:85:
         96:81:28:5c:2d:d1:92:c5:db:15:95:9e:69:ce:25:a7:a5:f6:
         06:ee:78:f0:7d:b4:bc:52:c0:d9:ac:30:e6:84:dc:69:53:b4:
         4f:de:a2:f9:9f:50:55:0c:49:a9:1f:21:2b:0a:44:b0:b8:f2:
         cc:09:c6:22:91:12:49:e6:9a:23:b5:c4:dc:c6:25:10:dc:71:
         9c:45:fb:59:3f:ba:3d:e6:d4:0d:a0:27:77:c0:e4:36:da:41:
         4c:1a:b8:d0:0b:45:ad:83:20:e7:82:a9:7a:7f:47:42:c4:bc:
         1f:a2:c7:72:10:0e:fd:1e:4e:aa:b4:8e:13:ba:9c:04:b4:dc:
         88:60:ec:e1:e1:b3:15:b4:5a:c0:9f:ae:41:8b:10:0c:a4:8a:
         23:24:db:e5:48:5d:28:63:f8:78:d2:93:2b:be:29:a7:87:60:
         ad:7c:70:d8:bb:6f:4c:e3:4b:01:98:93:a6:08:9e:a9:56:99:
         5b:2c:89:7a:4d:e9:1e:64:a5:1e:48:a9:4c:d3:64:ba:27:b2:
         b4:6c:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:07 2026 by rpki-client