Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File:                     Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier:          9vmVyGwFMF4F1RSNKCMUE2NY6T0GDP182AU/l60lA40=
Subject key identifier:   00:18:74:2A:E5:9E:E8:2D:40:2A:E4:78:45:F9:22:3C:3A:66:D4:8A
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer:       /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial:       019FAC08F2B2B0BF47CCB75FBC10663FF793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number:          1223
Signing time:             Wed 29 Jul 2026 04:01:35 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:35 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:35 +0000
Files and hashes:         1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: ybsa0lXeiTC+Cyj0BLlX3Em+iPV6CbPkcxwnKR3TNuk=)
                          2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=)
                          3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
                          4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=)
                          5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:f2:b2:b0:bf:47:cc:b7:5f:bc:10:66:3f:f7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
        Validity
            Not Before: Jul 29 04:01:35 2026 GMT
            Not After : Jul 30 04:01:35 2026 GMT
        Subject: CN=0018742ae59ee82d402ae47845f9223c3a66d48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:7c:f5:30:11:63:e0:ae:58:c3:a7:7d:7e:
                    4c:8f:a7:16:a0:ad:7d:db:67:94:f8:c6:3b:e2:27:
                    e6:90:d2:82:58:11:76:9b:61:92:ed:1f:a5:07:fc:
                    dd:fa:be:cd:c3:b3:0f:73:b0:82:3a:9c:6b:2f:3c:
                    af:ef:69:0f:09:64:31:94:33:97:67:0a:c5:19:df:
                    64:78:c6:c2:30:94:23:1d:ab:77:dc:f5:35:f9:02:
                    e0:5f:f9:f8:02:b6:3d:12:a7:4b:19:e3:72:85:bf:
                    61:f2:bf:aa:ca:5f:96:e2:8b:03:33:47:2e:d8:5c:
                    62:4e:27:18:c2:6a:10:9e:8b:1d:2e:66:81:9f:8c:
                    30:d9:9f:7b:97:41:f8:27:e0:3b:9d:b3:cc:23:26:
                    63:7d:95:bc:e5:ca:1f:a7:77:07:36:8d:07:ae:94:
                    71:86:93:0a:9e:78:0b:df:4c:00:cd:22:4e:8f:41:
                    e9:2f:49:8e:26:85:2e:c2:7d:b2:f5:fe:40:18:9a:
                    b7:f2:3e:48:1a:49:90:bb:88:07:95:65:09:7e:d8:
                    3d:a9:e6:1c:b5:27:6e:31:eb:ff:e8:6e:6a:9f:81:
                    d2:74:37:6c:0c:1a:fe:db:78:4c:38:9f:35:8f:34:
                    01:31:7f:76:6a:68:36:f3:c5:af:f8:4b:32:40:69:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:18:74:2A:E5:9E:E8:2D:40:2A:E4:78:45:F9:22:3C:3A:66:D4:8A
            X509v3 Authority Key Identifier:
                keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:30:90:ea:9b:d9:6f:61:27:50:3b:28:a4:10:6f:ab:a2:13:
         69:48:df:f9:db:68:67:ee:79:42:e7:54:a5:3e:1f:6d:73:a3:
         9a:8c:24:4b:7f:4d:38:d6:28:81:08:3c:33:de:dc:15:1b:d8:
         00:c4:1f:1d:ba:ac:36:01:b0:dc:15:84:d8:1f:1f:49:c4:3d:
         b9:3a:3a:0d:f4:60:e2:e3:ca:0a:0f:37:f5:9c:a3:1f:27:4a:
         db:8c:e3:c7:25:d5:94:1f:68:61:4a:d9:82:f4:6e:95:82:7f:
         e3:6a:53:19:ef:1b:ed:8a:b6:72:aa:a6:3d:c3:56:a5:2c:38:
         5a:fd:33:4b:18:15:e8:1c:5a:c3:be:9b:45:36:49:16:96:7a:
         c2:9e:d6:b8:ea:ab:52:1a:12:47:82:a2:3a:1e:77:19:e4:d6:
         97:f4:55:6b:ef:25:6b:dc:9f:54:0c:db:a1:bc:82:ba:41:fa:
         db:7c:67:b4:1b:0d:8c:08:88:ab:84:36:bd:ea:98:11:1c:15:
         d3:69:2c:16:dc:c3:93:c7:54:ee:f8:8c:65:a4:47:7e:62:06:
         77:f6:23:86:4c:71:dd:ff:25:86:55:74:8f:e1:d7:d7:26:f8:
         12:ff:f3:16:24:08:2d:32:48:c7:10:68:47:2d:55:30:e6:ba:
         e2:35:ce:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCPKysL9HzLdfvBBmP/eTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4
ZmUzY2EwHhcNMjYwNzI5MDQwMTM1WhcNMjYwNzMwMDQwMTM1WjAzMTEwLwYDVQQD
EygwMDE4NzQyYWU1OWVlODJkNDAyYWU0Nzg0NWY5MjIzYzNhNjZkNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWp89TARY+CuWMOnfX5Mj6cWoK19
22eU+MY74ifmkNKCWBF2m2GS7R+lB/zd+r7Nw7MPc7CCOpxrLzyv72kPCWQxlDOX
ZwrFGd9keMbCMJQjHat33PU1+QLgX/n4ArY9EqdLGeNyhb9h8r+qyl+W4osDM0cu
2FxiTicYwmoQnosdLmaBn4ww2Z97l0H4J+A7nbPMIyZjfZW85cofp3cHNo0HrpRx
hpMKnngL30wAzSJOj0HpL0mOJoUuwn2y9f5AGJq38j5IGkmQu4gHlWUJftg9qeYc
tSduMev/6G5qn4HSdDdsDBr+23hMOJ81jzQBMX92amg288Wv+EsyQGnX7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAYdCrlnugtQCrkeEX5Ijw6ZtSKMB8GA1UdIwQY
MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt
MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2
LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTCQ6pvZ
b2EnUDsopBBvq6ITaUjf+dtoZ+55QudUpT4fbXOjmowkS39NONYogQg8M97cFRvY
AMQfHbqsNgGw3BWE2B8fScQ9uTo6DfRg4uPKCg839ZyjHydK24zjxyXVlB9oYUrZ
gvRulYJ/42pTGe8b7Yq2cqqmPcNWpSw4Wv0zSxgV6Bxaw76bRTZJFpZ6wp7WuOqr
UhoSR4KiOh53GeTWl/RVa+8la9yfVAzbobyCukH623xntBsNjAiIq4Q2veqYERwV
02ksFtzDk8dU7viMZaRHfmIGd/Yjhkxx3f8lhlV0j+HX1yb4Ev/zFiQILTJIxxBo
Ry1VMOa64jXOJg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:29 2026 by rpki-client