Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File:                     KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier:          dA3kO/fxAEq0J5KIsn1HK6L751KI/KTkcxNAOh+1cKU=
Subject key identifier:   87:75:25:09:4F:7D:15:8C:D5:6A:38:4B:9C:08:6C:B5:B8:E6:C2:22
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer:       /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial:       019FABD1AE3792265FFC6586FDC687558585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number:          0DB9
Signing time:             Wed 29 Jul 2026 03:01:13 +0000
Manifest this update:     Wed 29 Jul 2026 03:01:13 +0000
Manifest next update:     Thu 30 Jul 2026 03:01:13 +0000
Files and hashes:         1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: K6JR18e2wL3AlgYUX2ToCcUfG5eQOaErmQ7JkVZo9YM=)
                          2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
                          3: PRcnKHrqlJcrd4HqtNpbJQskQ6A.roa (hash: aiGpWQ3cJ5Y8dalcsV9/+PGb+c10COEmzHR9vf++QS8=)
                          4: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
                          5: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
                          6: gt6O10M70oZpClO9a6i6El8hrUo.roa (hash: eGC6/RzGV3nXmQHjfKro3h+k1W53IQpH+vbs4ORuu8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:ae:37:92:26:5f:fc:65:86:fd:c6:87:55:85:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
        Validity
            Not Before: Jul 29 03:01:13 2026 GMT
            Not After : Jul 30 03:01:13 2026 GMT
        Subject: CN=877525094f7d158cd56a384b9c086cb5b8e6c222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2f:34:4d:07:34:5f:fc:42:26:96:4a:81:8a:
                    4b:fe:fc:64:86:31:fe:bd:22:c8:b6:ad:7b:4c:db:
                    4f:75:f3:84:0a:5b:91:45:c8:b3:4d:49:8c:9c:fc:
                    85:cb:22:5f:11:44:0a:53:6d:9d:d1:97:7b:b9:aa:
                    45:21:b2:36:6c:da:32:d6:1c:fa:44:5d:a7:fb:7b:
                    96:9b:3f:13:f4:76:ff:de:9c:da:e2:46:df:0d:16:
                    74:98:20:e3:1f:3f:82:a1:25:02:28:de:ad:2e:2b:
                    bf:72:bc:40:87:5b:70:a6:5a:a5:72:88:24:85:6b:
                    ce:87:59:3f:85:39:3b:be:2b:ec:30:28:86:28:49:
                    72:71:03:1d:97:a2:1f:fa:d7:5e:9a:81:6e:67:42:
                    14:9f:3e:ca:08:a6:88:e5:4c:8a:65:2f:33:e3:f1:
                    8d:6e:1e:0d:5c:d2:de:a6:69:74:33:60:1c:0a:7e:
                    b3:b2:bb:35:76:8c:f8:1f:08:55:51:b8:1a:dc:96:
                    3c:9d:ae:ec:3e:69:e9:64:4f:67:3c:3d:d5:63:dc:
                    fa:22:ab:41:76:8d:28:ad:dc:cc:28:6d:ef:45:d3:
                    fd:b6:cb:f8:fa:1b:3b:6f:06:10:04:04:94:6e:db:
                    19:e7:de:3f:5f:18:4a:84:3c:59:fa:04:85:01:2e:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:75:25:09:4F:7D:15:8C:D5:6A:38:4B:9C:08:6C:B5:B8:E6:C2:22
            X509v3 Authority Key Identifier:
                keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3b:7d:d9:ad:d1:bb:b2:34:6b:79:3c:29:47:57:08:bd:2c:
         71:39:46:ba:6e:23:96:dc:bf:a1:8d:c4:d4:6d:20:7a:71:b8:
         bb:b8:2c:47:ee:28:36:d9:5e:aa:7b:7c:e8:43:fc:da:d9:c3:
         e3:2e:73:22:c7:a0:09:1d:00:12:37:b2:a0:b5:45:26:4b:d2:
         3f:4d:25:15:91:25:7d:68:37:d9:c9:a3:ef:bb:83:c4:f0:4d:
         4d:e8:71:3c:5a:02:ce:4d:70:b2:aa:16:66:e0:35:9d:f5:7a:
         51:9e:08:a5:7c:83:47:64:be:29:ef:35:97:c3:82:1e:79:32:
         85:bf:63:d4:c0:22:3a:ba:f3:30:cb:1c:4b:73:2d:6c:1c:69:
         cd:85:cf:ab:20:ac:71:af:ba:f8:52:1b:31:ec:7c:4a:d3:a8:
         fd:24:60:52:65:ae:33:b4:dd:88:87:2b:0a:c7:50:31:77:b0:
         bd:50:dc:c4:27:1c:2e:96:bb:05:fb:0e:fd:6a:92:38:8f:5b:
         a4:83:74:e4:3f:5d:d2:50:bd:bf:e7:95:52:63:b1:2e:71:c5:
         43:af:3b:8d:b1:91:9a:74:a1:ac:24:5f:b5:b1:38:b2:d1:66:
         1e:40:2a:02:ae:90:59:23:26:83:50:52:7b:be:01:82:5c:f9:
         06:fd:d7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:30 2026 by rpki-client