Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File:                     mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier:          66SUyNmHUFRO10eDfCUZC0/Zwg/OXAxevufrWGrWvlY=
Subject key identifier:   DC:92:38:02:75:D1:AB:52:17:B7:98:A3:6A:59:DA:E1:D6:FE:8C:B1
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer:       /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial:       019FAC080EF25890228D42E8E1B40F2EABA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number:          19DF
Signing time:             Wed 29 Jul 2026 04:00:36 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:36 +0000
Files and hashes:         1: SYtSh6MgqpX8fZ4WHojx0wxmwAU.roa (hash: qfAbswAstxuSdJu35mimEN1jiqsDnLeGp+g0coBMNag=)
                          2: YIp8U7durT_VOWJi51t_EhaEZmc.roa (hash: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs=)
                          3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: vRwZmEc0LOjj6bMQ/EysDK8JqKxbPaSdN0xCwANqT+c=)
                          4: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (hash: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:0e:f2:58:90:22:8d:42:e8:e1:b4:0f:2e:ab:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
        Validity
            Not Before: Jul 29 04:00:36 2026 GMT
            Not After : Jul 30 04:00:36 2026 GMT
        Subject: CN=dc92380275d1ab5217b798a36a59dae1d6fe8cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:45:30:00:e9:a8:92:b9:90:96:88:00:fe:
                    8d:fd:c7:5b:9c:8f:a7:c3:17:85:99:93:17:64:77:
                    ea:90:e4:76:61:02:3c:38:51:90:08:62:25:f4:5d:
                    49:64:a0:08:e9:07:2f:0e:a1:a5:17:e2:78:4e:b3:
                    45:bd:87:9c:b5:f6:e0:f4:90:30:ff:68:f5:f4:57:
                    03:21:81:42:33:b6:7a:9f:5f:d2:f5:01:ff:3d:d7:
                    cb:2a:f7:fb:f3:36:04:f5:41:30:6a:0b:8c:a6:0b:
                    73:44:ab:e8:7a:d4:49:f8:ca:f8:50:88:b1:d8:e0:
                    2a:e4:11:b7:78:ff:33:ac:2b:b1:82:f0:fd:91:ca:
                    d7:7d:2c:ba:5a:97:74:72:9a:e2:ea:82:ee:85:a3:
                    7e:a0:69:ef:45:44:0e:64:88:d2:36:26:bd:2f:94:
                    a7:b4:11:8d:87:1d:1e:be:86:a7:38:34:f4:c2:61:
                    75:a5:b6:a9:f0:1b:18:60:e6:d1:cc:7a:56:b3:63:
                    d9:5b:49:71:f1:42:5c:da:83:2e:11:ee:91:4c:53:
                    f9:bd:bb:3f:e5:b4:14:ff:33:df:6a:d1:5c:70:9d:
                    9b:f3:3f:f6:71:9a:c0:a2:03:bd:71:3f:78:21:3f:
                    3a:19:18:96:30:70:23:15:f0:d7:76:6d:95:65:d3:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:92:38:02:75:D1:AB:52:17:B7:98:A3:6A:59:DA:E1:D6:FE:8C:B1
            X509v3 Authority Key Identifier:
                keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ff:cc:ae:dc:fc:fc:3e:1e:f3:73:6d:16:89:a1:4a:db:ef:
         1b:ed:91:ab:4c:7c:2e:76:fd:dc:02:73:c2:60:6e:73:e8:0c:
         d9:a7:20:e6:7c:20:b2:7b:2c:7e:9b:85:b1:fc:fa:f6:54:b2:
         04:51:9f:7d:24:59:9f:7c:24:b3:23:c5:25:5b:8b:cc:14:0f:
         27:00:2c:54:c0:94:90:e6:4e:ae:33:c9:e1:c1:fa:b4:cf:9f:
         c7:9b:dc:4e:db:55:a8:c8:00:3d:f2:7c:cc:ea:0b:cc:9e:38:
         4c:f8:5f:04:18:e4:93:e6:58:bb:02:b6:81:e1:91:f2:43:17:
         39:70:c0:ae:b4:5c:84:53:d5:b1:5f:94:74:3c:2c:08:64:8f:
         a4:29:8b:fc:93:71:9a:1e:c4:13:51:44:c0:c1:3d:77:c9:46:
         98:bb:c6:39:ce:d8:3b:9e:12:94:1f:27:a2:17:9e:35:a3:88:
         c8:8e:ca:f2:d4:b1:7e:47:d7:16:55:61:b4:9d:e6:1b:f0:52:
         1a:b1:18:22:2b:d4:47:58:d9:eb:11:85:8d:c4:b7:0e:f0:08:
         bd:f4:be:75:95:4b:b0:e6:4e:06:c5:6a:9a:81:01:84:c5:5c:
         05:5c:b9:5b:4c:44:21:9f:bb:4d:17:d6:3d:7e:17:20:79:4e:
         29:3c:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:53 2026 by rpki-client