Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File:                     KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier:          ZzM3leVU6nPo1uU/DNjcGDuQCEt1jdTs6S4C7kGoeGg=
Subject key identifier:   45:DA:54:F4:F0:FF:F2:C5:3A:A3:22:2C:8A:31:2C:A3:58:59:69:A2
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer:       /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial:       019FAA884D6FBEA28284835EB868F246CD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 21:01:27 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:27 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:27 +0000
Files and hashes:         1: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: fXv3/L1mX1eZA5tIXa6YgKNaPM7m7ivSA62/sed5CKo=)
                          2: REMIC3qlblupLlRlDy8YWtuHeGs.roa (hash: Jx2qxwn04q0eIKP0O31CsM6H6HSDWevmv7hr0SA1D6o=)
                          3: jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa (hash: J6Uk//qcGJOT6wNTUI4e5Z8Vod7CmZ9RrMaWF9PPJeM=)
                          4: rrH1j10hPF7JqcYJAD3BPexcKzg.roa (hash: +IMZpUPrslETwFxcXPRLWmZpXfSU9RCOH9gP9Q/CH5w=)
                          5: y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa (hash: K08tIX67yafvJ07B2O/CtxAn2jeh7RiwSsp1rC6qb3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:4d:6f:be:a2:82:84:83:5e:b8:68:f2:46:cd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
        Validity
            Not Before: Jul 28 21:01:27 2026 GMT
            Not After : Jul 29 21:01:27 2026 GMT
        Subject: CN=45da54f4f0fff2c53aa3222c8a312ca3585969a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:c2:c4:42:c2:0c:6c:54:08:d5:5b:2d:14:
                    2f:a2:d3:97:4d:4e:57:83:c0:02:b6:75:6f:a0:44:
                    59:1e:4f:62:33:41:b4:43:45:06:ba:0a:b1:e0:1c:
                    8b:69:f9:a1:1c:cd:63:ca:a7:79:79:12:c5:62:1a:
                    37:91:9c:da:1f:e1:4d:fa:8f:0e:70:ee:3a:d4:f0:
                    c0:56:6e:ab:f5:0b:76:94:76:17:95:18:bc:74:cc:
                    9e:bb:51:2b:f8:06:0e:46:2d:93:c5:46:a9:2f:91:
                    0f:d3:2a:57:9d:2a:79:9a:ea:ee:5e:6e:40:ec:45:
                    5a:20:a6:93:0d:11:4c:ab:ed:47:d3:fa:e9:de:ab:
                    da:e9:cd:7e:7b:46:43:83:df:2b:24:b9:0a:7f:a6:
                    5b:ad:ec:d4:bb:a2:a3:6b:5c:ee:a2:08:16:2e:d7:
                    40:9f:ab:71:f1:7d:de:d8:fb:65:ea:f8:2a:bf:10:
                    d3:85:bd:93:82:db:a1:65:3c:d9:e3:17:74:8e:33:
                    4d:21:5b:f8:d0:61:65:b6:1f:fa:fa:58:e5:7c:24:
                    8a:eb:93:1c:c0:5e:b4:8f:93:4a:83:6b:1b:a1:dd:
                    09:f3:b1:a0:06:f0:ec:40:ad:d0:90:2b:2a:d6:5c:
                    06:75:fa:ff:27:95:3f:69:7b:a7:a4:7b:85:2a:79:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:54:F4:F0:FF:F2:C5:3A:A3:22:2C:8A:31:2C:A3:58:59:69:A2
            X509v3 Authority Key Identifier:
                keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:39:69:28:38:c9:96:8a:00:7c:59:76:af:b3:c7:5b:cc:0f:
         05:2c:e3:95:6f:df:81:0c:d8:68:46:4f:f6:5b:71:b2:f0:66:
         f1:f9:d3:59:71:69:ba:70:36:35:51:c9:24:a8:86:ad:1a:c5:
         1e:0b:6f:4e:de:de:4a:05:fc:fc:cb:01:89:cb:29:eb:ea:f6:
         6e:98:18:80:79:17:ea:28:2c:9c:bb:2b:9e:69:ad:8d:84:2f:
         50:c0:9a:89:3c:fd:b4:60:d8:0c:f4:d4:ca:14:d1:36:9f:0f:
         68:6c:be:22:01:60:93:8c:a7:b5:3b:38:df:4c:75:b6:25:83:
         4b:b5:fc:86:cd:75:9c:9c:67:52:eb:85:e2:45:c6:2a:45:5a:
         a2:2c:61:79:f6:4d:6b:61:bb:b5:60:07:be:a5:d8:9f:54:e3:
         68:93:53:5c:33:e2:37:0d:e9:97:04:d2:4f:9e:76:36:9c:20:
         d2:a3:0f:86:a7:96:c7:97:e0:a9:77:b6:b0:84:53:36:e1:63:
         54:d8:e5:b1:d9:1f:6f:22:0c:9b:d1:e9:88:d4:ca:9b:5f:ab:
         2b:28:1e:7e:c2:c0:5f:67:32:e2:bc:1a:29:d0:56:81:26:0e:
         eb:13:9a:aa:0a:cd:e8:5b:eb:fb:20:5b:db:41:cb:fe:04:fc:
         ac:0e:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:52:53 2026 by rpki-client