Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File:                     KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier:          AvLkkkxvpl5QeEmrAB+WMpdSwN1o4c71iO3Vj5sP4T0=
Subject key identifier:   E1:74:40:FA:11:5A:E9:AD:CD:2E:8E:64:13:59:E3:C7:C5:68:FD:91
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       019D29618CBEBE9263F4A026455F661779CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number:          1081
Signing time:             Thu 26 Mar 2026 09:02:31 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:31 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:31 +0000
Files and hashes:         1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
                          2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
                          3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
                          4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
                          5: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: ShxRsq8LO7A7GdtVdVYrNmjGslWqTy7E8GTK888hyFE=)
                          6: ax3hJrj1jKccen4LkvygGa6u_zk.roa (hash: YPVLrZ9Q05uGWBIZMWGr1R3Ivd6hvxv84SERSuRddso=)
                          7: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:8c:be:be:92:63:f4:a0:26:45:5f:66:17:79:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Mar 26 09:02:31 2026 GMT
            Not After : Mar 27 09:02:31 2026 GMT
        Subject: CN=e17440fa115ae9adcd2e8e641359e3c7c568fd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:75:33:55:3f:d0:9e:0a:e6:fc:85:00:ff:
                    a6:21:af:e8:0c:8a:bb:5c:a4:a7:5e:72:26:49:fe:
                    87:5f:86:58:cb:7c:cc:38:a1:a3:d0:93:ad:07:8c:
                    ce:46:45:56:5f:9f:15:ff:99:af:ad:98:9e:ce:81:
                    90:98:bf:1e:39:53:27:2d:22:2a:91:c7:3c:a9:5f:
                    d4:78:61:70:ed:9f:27:ad:94:c5:47:d1:b4:ba:8d:
                    08:24:d5:bf:1e:18:8f:59:b1:22:17:a4:24:62:57:
                    e8:93:c1:a6:52:2f:d9:7b:e8:db:f0:c6:da:bb:10:
                    da:b6:47:b0:15:f8:72:b7:56:a8:7e:43:44:cd:22:
                    9a:2e:e2:fa:c7:cc:da:7f:c7:f1:3c:95:73:6e:17:
                    ed:53:22:2e:d8:1a:3c:5c:03:2f:67:b9:f2:35:a3:
                    a3:8c:1e:c4:3e:7f:e2:c9:d7:27:43:13:ce:57:21:
                    41:ba:1b:ee:e3:dd:1b:c9:6d:7e:29:7e:4f:c9:41:
                    d3:3f:ea:90:73:16:9a:0d:4b:d5:1f:cd:c7:8e:25:
                    ca:fa:bc:a8:94:72:1a:a6:2e:fa:3c:fb:4e:d8:78:
                    97:92:bb:fc:59:83:70:87:fd:bf:3e:51:de:ba:67:
                    74:3a:d6:ff:9b:8e:00:56:39:f3:86:06:1d:c3:e0:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:74:40:FA:11:5A:E9:AD:CD:2E:8E:64:13:59:E3:C7:C5:68:FD:91
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:9f:08:f9:3a:fe:b1:cd:4c:3c:f1:ac:2c:42:bf:81:e0:
         83:f3:db:96:fc:8b:a7:83:c1:dc:75:53:f5:af:9f:12:31:6e:
         40:5a:9f:d8:c1:53:57:ac:93:93:9e:22:4e:c5:77:da:c5:45:
         37:24:2b:0e:96:ab:72:f5:5a:e3:33:37:6f:18:97:f7:ea:2d:
         8f:56:c8:54:f7:ea:62:eb:53:ff:63:52:c6:6c:b0:3b:aa:03:
         ec:da:81:6e:9b:85:14:18:27:a5:eb:a4:a0:2e:71:83:30:03:
         67:99:1c:c1:d4:0c:49:de:1b:85:c5:cb:c5:69:72:0d:a0:92:
         df:86:4a:cf:d7:aa:50:e6:87:03:ee:03:35:18:e0:21:7a:8f:
         9b:12:70:5f:24:fd:89:4d:12:69:d6:b2:f2:d9:9d:d0:4d:dc:
         c9:61:d1:53:b1:57:01:db:56:1f:4d:b4:c2:13:7f:04:47:c4:
         d1:ea:75:5d:95:bf:ab:9d:d9:30:ec:96:db:73:15:c4:73:ea:
         3d:50:0c:11:ef:52:a8:09:a5:98:52:08:b7:bb:fa:9b:38:57:
         1a:80:6b:ec:ed:31:ee:5b:a9:b3:32:5d:87:31:3f:d0:45:b0:
         cc:60:7a:f2:ad:ec:13:4e:da:20:6f:67:f9:7f:d5:10:72:57:
         0b:01:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:20 2026 by rpki-client