Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File:                     KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier:          a6G52qBXaseavZmb+TNxtAApu1lo57tqkUy1l9FuTJ0=
Subject key identifier:   A9:D3:29:B5:A0:BD:4C:2B:3A:15:69:42:90:DA:C3:62:6B:BD:A6:65
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer:       /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial:       019E1FEC928B950D9A8C7BA70ECE6CCB977E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number:          0112
Signing time:             Wed 13 May 2026 06:00:58 +0000
Manifest this update:     Wed 13 May 2026 06:00:58 +0000
Manifest next update:     Thu 14 May 2026 06:00:58 +0000
Files and hashes:         1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
                          2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
                          3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
                          4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: 8VbaRO2mx3k2Vy2wHOKn4L4W6iJMbPLeWhW+r6BI16g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:92:8b:95:0d:9a:8c:7b:a7:0e:ce:6c:cb:97:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
        Validity
            Not Before: May 13 06:00:58 2026 GMT
            Not After : May 14 06:00:58 2026 GMT
        Subject: CN=a9d329b5a0bd4c2b3a15694290dac3626bbda665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:1f:e1:7d:36:d3:9b:6c:00:2d:e3:bc:be:
                    bd:62:0d:42:ce:d4:b8:72:eb:20:6e:a6:10:0c:bd:
                    60:e0:94:38:76:fc:b6:4f:b7:5d:b7:95:0c:36:e2:
                    e6:5a:a8:db:2b:e9:56:cc:62:76:60:15:23:fb:c6:
                    98:61:e2:02:78:24:0b:78:44:42:45:c7:5b:e5:1a:
                    52:7f:8c:21:4a:37:2c:ca:2a:1c:60:b2:0a:4f:a8:
                    58:f6:20:88:5a:8e:c4:a2:35:c3:15:55:10:ae:6b:
                    a7:b6:8b:7a:e0:1d:65:ea:a8:1a:29:95:5f:06:43:
                    c0:d5:ad:47:ce:8d:9d:8a:72:de:f4:c4:c3:5e:08:
                    e8:7c:0e:1d:ba:1d:2f:61:ad:af:07:ab:26:54:85:
                    44:cd:09:59:a0:22:98:a7:38:eb:dc:e1:7c:f9:a8:
                    e4:62:48:a5:d4:0c:70:f3:96:58:c8:a7:7f:66:a5:
                    a1:6e:c4:41:33:1a:88:87:df:6c:0c:33:ed:a5:bd:
                    72:78:42:57:75:59:1f:9e:bb:52:72:b2:6d:19:bf:
                    2a:9e:3c:3e:9f:2f:fe:63:60:92:f4:e4:21:08:24:
                    fe:d9:97:09:bf:48:a7:53:ce:f8:93:98:54:9e:a2:
                    b3:3e:ca:9a:94:ec:0a:7d:6b:db:0b:e3:09:b3:16:
                    26:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D3:29:B5:A0:BD:4C:2B:3A:15:69:42:90:DA:C3:62:6B:BD:A6:65
            X509v3 Authority Key Identifier:
                keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:46:f0:56:fc:a2:09:16:68:e8:71:13:66:16:06:e7:b1:ac:
         17:80:25:40:a8:34:e9:9c:18:67:b4:30:1c:92:c0:49:54:f0:
         d3:c8:8d:93:8f:46:61:c3:8e:e1:c5:28:d4:9f:5a:1a:2c:91:
         fb:6a:e2:74:13:69:ca:b7:c3:c8:61:23:83:ae:88:03:86:37:
         6b:4d:be:86:76:9d:44:79:ad:3a:31:94:30:37:8f:58:11:aa:
         a9:8b:97:bf:16:c6:19:32:25:ec:c6:ea:3d:2c:f8:b3:e6:1d:
         eb:2f:16:29:b5:e0:a9:a1:20:98:0f:43:24:55:ae:55:6c:4b:
         9b:e8:0f:c6:97:3e:9e:37:3c:3b:9d:59:d1:24:54:f7:c9:13:
         9c:32:23:9b:60:ff:48:ba:29:1c:d9:6e:31:7b:9e:de:48:81:
         0b:1d:9c:86:28:b3:9a:51:c2:16:91:15:6a:4c:f6:46:5b:0f:
         66:61:0a:fc:8f:71:4b:21:59:93:0d:82:2b:ec:42:27:a9:d4:
         59:b9:51:67:5d:96:aa:20:9d:80:11:e5:f4:70:4d:87:cb:60:
         f4:51:a5:0d:a6:f5:92:f5:46:3a:7a:a1:44:ff:21:f3:02:95:
         cb:6f:99:88:b8:10:d7:ad:bf:36:8d:fa:2a:79:6e:43:1c:c3:
         ca:d8:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:49:28 2026 by rpki-client