Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
File:                     1-KK2BcWOB0aq3Fvw18vDbJMH900.mft (raw, json)
Hash identifier:          x7YWWvtQKylAlbOxGWaOW7069b0CHEwwH92fcrB7LA8=
Subject key identifier:   EE:92:7D:68:AD:BB:2F:07:C7:26:84:77:FC:42:69:AF:59:D9:D0:23
Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
Certificate issuer:       /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
Certificate serial:       019FACE3866904BBB8E703DCF2604524FA02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
Manifest number:          05A1
Signing time:             Wed 29 Jul 2026 08:00:19 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:19 +0000
Files and hashes:         1: 1-KK2BcWOB0aq3Fvw18vDbJMH900.crl (hash: Z+AcD35wN99P3zXcKE7Zs4pxQPpbEU/1Q4KNDQJ671E=)
                          2: 5lw0Z8fN3yFK1pB9OZyXHQLW53k.roa (hash: WDVA9Lawkmj9ZCv4AbTYoBdoLfCfWXIwbeGfqru0gP8=)
                          3: q2x6Xc8ZZACW9fJu899MsKHJMM8.roa (hash: pwMpRh3wZ+J+ajZgUW7mCK8jkEGxvenqPQjzyuBapnU=)
                          4: rzIgn7Bc7AW1MuiRL3XQ-BG4jx0.roa (hash: arDjnmmejpgyaF8cmbFn6SUiXjaKhcHxmQG+SV3R6fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:86:69:04:bb:b8:e7:03:dc:f2:60:45:24:fa:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
        Validity
            Not Before: Jul 29 08:00:19 2026 GMT
            Not After : Jul 30 08:00:19 2026 GMT
        Subject: CN=ee927d68adbb2f07c7268477fc4269af59d9d023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:30:2b:bc:c7:c1:6f:be:c4:9a:67:8e:ed:d4:
                    5d:91:fd:e2:34:8f:0d:2a:34:4a:6b:e4:30:b6:93:
                    0b:c1:da:41:04:16:db:5b:74:be:4f:66:11:c1:15:
                    0e:ff:d7:13:47:55:e3:5a:4e:b9:0a:3d:a5:26:fb:
                    94:06:b6:93:42:af:15:f6:cf:cf:11:e1:89:3c:98:
                    9b:c5:e0:13:22:9a:69:61:80:22:99:b0:c7:b7:ae:
                    d8:26:20:42:8a:66:d3:a6:ca:77:9c:e9:0c:5d:5c:
                    14:cc:be:65:85:b0:52:96:71:6e:76:6c:b5:97:ce:
                    40:b0:c2:af:1c:bd:51:1b:7e:35:77:58:71:28:24:
                    1f:81:c5:6d:d7:a4:0c:31:52:32:08:26:c3:40:49:
                    ca:95:01:5c:c4:44:c6:99:64:0c:b0:39:b6:48:97:
                    f7:a9:87:4d:eb:27:d8:f7:7d:5c:c3:be:8a:2f:d4:
                    a3:10:07:37:a1:46:47:bc:13:68:74:16:56:49:bb:
                    67:0b:75:33:4f:41:b5:f6:88:04:d8:dd:6c:62:e2:
                    9e:c6:6b:6d:80:5f:87:6a:72:d1:d2:77:9c:2a:10:
                    cc:de:66:6d:a4:5d:06:79:a8:cf:32:75:e8:28:ee:
                    c6:f6:4c:a1:37:18:e6:e2:d6:76:57:45:a0:00:fe:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:92:7D:68:AD:BB:2F:07:C7:26:84:77:FC:42:69:AF:59:D9:D0:23
            X509v3 Authority Key Identifier:
                keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:2d:9e:e9:6a:b0:51:a9:1b:9e:52:b3:50:03:f7:cf:94:
         ee:11:6f:dd:b9:64:b5:96:c4:08:a9:29:32:db:3a:48:bb:53:
         f5:39:c9:ee:51:e9:97:66:dc:c4:ca:12:73:9e:77:73:ae:85:
         12:53:e5:6c:4a:35:eb:a8:b0:50:01:77:7d:33:66:df:88:3e:
         ca:de:6c:a5:19:71:30:af:a0:40:9d:d8:45:a0:47:ed:fb:8e:
         ef:09:ee:b3:09:8d:00:e3:a0:b6:33:e6:a2:e8:2d:a7:7b:43:
         7c:89:9c:13:f3:c8:02:c5:67:49:96:8b:cb:75:8d:da:a6:4f:
         95:bf:cd:bb:5e:a5:0c:2a:3a:63:d2:a7:05:1b:50:96:78:f1:
         0c:06:45:7c:25:3a:61:8c:5e:07:f4:3a:64:ea:b1:4d:06:c3:
         ee:fc:ad:4b:88:0f:ee:f1:0a:37:2a:d0:63:38:3d:5f:f0:83:
         54:82:db:0e:13:5e:ef:6a:5e:0a:2f:05:38:4b:6e:ec:5b:5f:
         8f:46:95:94:e3:cf:2f:75:1d:41:fa:aa:b8:4d:20:16:a3:12:
         bc:a6:97:af:ca:a3:de:27:cf:43:f6:18:28:32:42:e1:54:ac:
         b8:1d:3e:d1:7a:ec:c1:9b:e7:1a:af:b4:9b:ae:d8:79:e3:8c:
         be:d7:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:18:40 2026 by rpki-client