Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          w+mO6bgY1MnUin0LGrSlswPFBLgs0aja75MN8Q/TAhs=
Subject key identifier:   3F:92:3A:26:36:F5:4B:D4:2F:75:39:F7:34:0C:3C:AB:04:D1:53:C7
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       019FAAF57ACA0485C071490933CA9C493609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0E55
Signing time:             Tue 28 Jul 2026 23:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:42 +0000
Files and hashes:         1: NLxAAvM0yrk_gaW8UTYZlpD_aSU.roa (hash: koZQTWGtu/yZU8GbkdRNcGGY7bBAtyvzqtTowhwY4EE=)
                          2: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: xnHVFZqHMOy6fpalwbUynwSGBE5f5dDe4L84KmGFudM=)
                          3: oyIHnleaxdQmed-d8OgAoabLOCk.roa (hash: SzJ8FmuzjIl9sC++X+hnrkenbzU5J/9NekanXVA8b6o=)
                          4: pqVBy_JjEYGo9euG10lbD9kfoPc.roa (hash: RPXgn9O4fhCi6PomLx2N6apcSA2xga46Z6S9gI5YVpU=)
                          5: vYxJpv5POvG_3gvqhMqXcCuX_hM.roa (hash: wpDWTjfQBDPG5OjIvThUgTmIIfXP/UypeEU6fjlCrZU=)
                          6: yEbtzhh5wc4rY7MHu27W_dwYhu8.roa (hash: h2s6dV+bwm8ecYVBUiiK45LeIcpS1pxSfpxppjXQ+aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:7a:ca:04:85:c0:71:49:09:33:ca:9c:49:36:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Jul 28 23:00:42 2026 GMT
            Not After : Jul 29 23:00:42 2026 GMT
        Subject: CN=3f923a2636f54bd42f7539f7340c3cab04d153c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:fc:c7:95:9e:85:e5:cb:77:be:26:16:a1:
                    99:d6:20:4a:ba:b5:7f:7d:32:f4:c3:a4:d6:be:c7:
                    3a:62:a4:67:bb:94:60:16:2a:24:d4:8a:19:66:d2:
                    1f:18:d6:ff:ce:38:be:e1:d9:7e:4b:de:6c:10:82:
                    5c:78:b1:30:d9:79:70:ad:d0:7e:8d:00:25:93:45:
                    6c:0b:55:73:23:40:9c:cd:a2:e3:0d:0f:4b:38:ab:
                    f6:c7:7e:cb:16:94:45:64:2c:0f:c1:ff:fb:49:07:
                    70:2d:bc:4e:1c:c8:62:80:f8:33:4c:d0:bf:d9:04:
                    86:1d:a3:6e:cd:f4:c1:25:dc:18:be:bd:da:4a:7a:
                    7f:f1:e2:e6:95:af:83:00:e5:be:5f:ea:88:f4:51:
                    0a:fe:d2:74:e1:c0:ce:bf:bd:82:a3:6a:cf:85:a4:
                    75:ba:96:e0:ee:e7:b1:3c:a7:9b:d6:cb:d2:d2:0f:
                    73:b2:f9:d1:ba:27:63:66:34:a8:59:c7:b7:0c:f5:
                    5f:ee:f4:43:32:d9:84:e5:b3:51:82:b3:f9:34:62:
                    30:40:1b:22:7a:1d:50:ba:5e:09:b2:5a:a8:d6:86:
                    eb:32:22:7a:73:8a:e9:4f:37:4c:d5:c2:c1:e3:4a:
                    cc:c3:22:a2:43:f7:10:34:ce:a6:bd:91:8e:ce:f7:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:92:3A:26:36:F5:4B:D4:2F:75:39:F7:34:0C:3C:AB:04:D1:53:C7
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:5e:cd:99:74:4a:16:ff:03:5d:81:8f:91:89:c0:c1:15:
         70:bc:b8:9b:69:c9:78:6f:18:c7:91:30:77:c1:76:ff:8c:4e:
         93:44:24:88:7d:8a:1e:af:6b:06:c9:fc:f5:f7:5c:5f:f3:3e:
         b6:e6:95:a4:40:98:9d:ab:d0:05:d1:2a:62:65:5f:41:e7:2d:
         9a:c1:00:ee:bd:3c:72:2e:d0:a9:77:42:18:7b:10:b3:ec:f4:
         d3:d5:a4:49:71:04:dd:dd:d8:90:1b:57:1e:b6:21:70:dd:16:
         98:f4:26:73:35:1b:b4:e9:f0:2c:fc:b7:f5:09:8c:a7:2f:52:
         8f:f1:a0:6c:45:65:b4:8d:7e:8a:46:d7:f0:9a:5b:6c:8d:c3:
         76:e5:55:9d:13:11:71:d9:55:42:14:d1:ab:1e:e1:4d:31:fd:
         60:fa:5f:3e:b6:3d:bd:9e:15:c8:3d:fd:d2:60:23:30:3f:cd:
         c3:5b:a3:e5:fc:c8:89:c6:0e:27:93:77:41:3b:b3:f4:2a:2f:
         d3:b6:0d:b5:cd:70:d3:1c:b3:23:a7:33:74:13:8b:48:88:da:
         b0:36:56:51:5e:74:47:07:1a:2e:b3:75:af:bd:95:5a:29:f6:
         49:e2:7a:60:ac:cd:a9:87:1f:35:ea:89:d1:54:40:e6:67:c2:
         79:4d:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:27 2026 by rpki-client