Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File:                     KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier:          TH3/xkbzN7dQkuFtQYpVQIfJQcaoL6cewUV6GFrxQ/4=
Subject key identifier:   7C:12:4C:14:28:64:7C:48:74:8F:97:D3:82:1B:66:C1:23:5F:1A:6D
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       019E1EA3BD52CA630B0D2D535FABA2FEC730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number:          1100
Signing time:             Wed 13 May 2026 00:01:47 +0000
Manifest this update:     Wed 13 May 2026 00:01:47 +0000
Manifest next update:     Thu 14 May 2026 00:01:47 +0000
Files and hashes:         1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
                          2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
                          3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
                          4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
                          5: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: 6yxf6gUK3eMpsCP2/T4GmPeii5UUW9j66dQPTl5tkiM=)
                          6: ax3hJrj1jKccen4LkvygGa6u_zk.roa (hash: YPVLrZ9Q05uGWBIZMWGr1R3Ivd6hvxv84SERSuRddso=)
                          7: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:bd:52:ca:63:0b:0d:2d:53:5f:ab:a2:fe:c7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: May 13 00:01:47 2026 GMT
            Not After : May 14 00:01:47 2026 GMT
        Subject: CN=7c124c1428647c48748f97d3821b66c1235f1a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:fb:b9:40:ba:76:59:81:98:52:35:f8:8a:
                    7c:78:00:c1:ef:bf:f6:e7:80:41:54:63:17:52:3e:
                    18:3b:20:63:18:4c:60:27:69:9e:ea:04:fc:5b:7a:
                    38:84:1c:4e:38:6b:09:39:38:8f:a1:1d:34:6b:8c:
                    48:34:dc:b7:fc:8d:67:ac:32:a6:0b:ee:41:38:c6:
                    aa:92:93:ed:8c:1e:20:47:64:7a:56:07:be:5f:98:
                    a8:f1:36:da:7e:f3:f7:bd:ec:8b:40:7e:d0:5b:7f:
                    05:ec:8d:b5:28:42:b0:ae:c1:63:4c:c9:4f:48:01:
                    c5:e9:9e:0c:31:14:1d:6d:10:ec:c0:94:df:40:0c:
                    88:a2:fd:73:98:e5:d3:83:a0:4e:f7:a9:b8:f5:09:
                    f4:4c:50:63:96:a9:4f:92:25:f3:a3:18:a3:1e:4d:
                    27:56:f2:00:ed:87:16:56:aa:0a:9c:67:c6:8b:d9:
                    de:7a:18:dd:18:77:1d:31:7e:08:8c:dd:3a:57:28:
                    47:95:79:46:c4:61:e6:f7:d3:1d:16:c2:f4:3e:f7:
                    50:cf:4b:5a:b6:a3:1e:58:c0:5e:a4:38:ba:25:8c:
                    99:63:55:ff:26:32:7b:d4:5f:c4:10:84:29:55:88:
                    1f:ae:33:51:ec:60:9a:e5:c6:a8:1e:f4:c9:1e:73:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:12:4C:14:28:64:7C:48:74:8F:97:D3:82:1B:66:C1:23:5F:1A:6D
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:05:bf:b1:21:55:71:7c:c3:20:59:fa:41:07:66:db:c8:cc:
         76:a4:50:c7:82:89:70:df:b3:4d:16:df:b9:79:38:63:a3:63:
         61:2f:7f:60:dd:74:1f:c6:5f:98:ba:f6:ae:0d:4b:1d:14:a7:
         37:fe:c3:6a:df:88:c7:c2:c0:43:ab:9b:02:77:c6:f7:96:48:
         67:32:87:d2:20:72:a7:45:39:1a:7d:68:5b:b4:27:32:7d:4a:
         90:42:90:57:32:79:2b:32:d1:df:56:e6:31:fb:a0:1e:d3:5d:
         dc:21:6b:58:cf:b3:e1:b1:6d:63:e5:85:f7:c7:13:6a:cf:86:
         62:1d:3f:23:eb:07:6e:8b:11:88:85:b6:1f:28:06:2f:06:0d:
         2c:b1:e9:eb:e5:56:7f:03:e3:88:fd:c9:53:c4:5a:6d:78:0e:
         ca:45:b2:ef:9d:e7:76:82:d5:9a:b7:47:3e:0b:ba:e5:5c:40:
         9b:37:46:07:57:4f:43:56:ba:2a:a1:80:ad:a8:4f:5c:3f:54:
         05:b6:1f:ed:fa:59:c0:e9:d7:c4:ed:43:86:d9:4e:20:0a:ca:
         d1:ce:7e:83:3d:58:52:f3:fa:0f:c1:e1:ce:d2:05:97:86:60:
         79:69:ad:0e:92:f9:dd:9b:3e:ad:b6:23:08:f4:fe:0c:05:6f:
         c0:e5:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:57:44 2026 by rpki-client