Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File:                     kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier:          LGN8pjRWHW7RFBBIPbHuiQ0ghmDHTcrQr/Kv8+LpXqA=
Subject key identifier:   D0:9C:86:30:B4:5A:22:BE:BA:AF:EC:E8:81:2E:92:5D:B9:84:D5:6C
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer:       /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial:       019D27DFEB40C37E3E43504FD08891EAA24A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 02:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:19 +0000
Files and hashes:         1: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: aZHKT0mTBI+V8P2ZEHdHf/vjdSJ9u/rHuszFsITip0w=)
                          2: oeaJctM9Qtah90R6LCT4BqnOU4E.roa (hash: 6Vq0BN7rnnATY8BQSA0XM6bTNiKEPoqXG+oYtacEtmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:eb:40:c3:7e:3e:43:50:4f:d0:88:91:ea:a2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
        Validity
            Not Before: Mar 26 02:01:19 2026 GMT
            Not After : Mar 27 02:01:19 2026 GMT
        Subject: CN=d09c8630b45a22bebaafece8812e925db984d56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:b6:2d:18:25:a2:35:62:d6:05:2a:a7:eb:
                    9b:5b:b8:ce:82:00:5e:2f:85:7d:54:d1:88:14:f7:
                    64:eb:90:6e:ab:e1:23:b7:0b:cd:57:16:1e:08:0c:
                    d2:49:db:6e:9f:9d:a6:f4:76:31:fa:d5:43:80:a0:
                    94:27:52:30:5b:ee:11:65:41:09:6b:b4:f2:cd:f6:
                    8e:cf:66:31:39:dc:46:d5:7d:11:dd:01:ca:fe:2f:
                    2c:58:ed:4c:d3:ec:03:81:2b:fa:11:23:08:59:6b:
                    b6:23:39:4e:51:44:61:a0:3a:8a:8c:70:94:2a:5a:
                    ee:eb:63:cf:a1:9b:cf:84:94:46:7a:3a:d8:b1:ac:
                    c2:46:89:60:d6:e6:ef:72:69:b5:13:1c:fd:db:02:
                    8e:65:f4:54:7e:21:5e:ef:71:20:c8:4c:fc:57:d3:
                    0e:74:e1:c6:2a:e7:e5:95:86:7b:24:20:9f:5b:3c:
                    39:69:37:03:8f:5c:3e:d9:59:59:8a:ba:67:50:97:
                    13:9e:d9:f1:9c:15:a7:e2:da:d1:90:18:3c:88:23:
                    4a:89:26:88:dd:49:e8:3d:f7:0b:53:bb:9b:03:c0:
                    3b:07:7e:5e:e5:bc:62:27:06:04:c6:36:28:a8:08:
                    12:a8:07:c1:7a:6e:dc:cf:95:a3:2e:f1:24:5d:06:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9C:86:30:B4:5A:22:BE:BA:AF:EC:E8:81:2E:92:5D:B9:84:D5:6C
            X509v3 Authority Key Identifier:
                keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e9:21:d2:e3:eb:a0:7a:35:c2:6c:17:af:2c:c6:2d:95:e2:
         ed:06:39:85:60:b2:bc:e8:6c:e0:cb:9c:8e:af:03:2e:59:3f:
         75:ea:df:88:98:75:04:16:bd:74:57:79:b7:03:6e:05:aa:ca:
         77:74:aa:c9:7c:14:17:f4:d9:9d:83:72:ac:df:a2:df:e8:c9:
         bd:ea:e5:51:fb:16:39:75:7b:f2:37:a8:2f:66:35:9c:d8:e5:
         80:51:dd:08:62:fb:e2:74:ea:2b:67:5f:af:35:6f:bd:d5:c8:
         ba:3c:2f:cf:a2:d2:54:0c:e5:d9:8b:10:60:84:8e:c0:1e:e4:
         7d:69:10:6e:d8:9a:4a:a3:33:f1:e1:df:10:79:48:ab:e4:9a:
         02:e4:a5:cd:85:ca:69:f1:28:85:e5:3c:ca:fd:f0:4a:2b:68:
         85:e8:62:93:67:4b:a5:a5:59:f4:9a:16:47:0d:eb:bd:38:2c:
         cf:d0:0f:a2:61:e0:30:a8:13:3c:32:07:63:77:5f:c5:34:e6:
         a5:3c:b3:60:72:fd:c5:e7:d3:54:68:01:9e:92:8d:db:01:1c:
         5b:63:0d:19:1a:22:19:5c:26:56:60:3e:e4:cc:48:17:34:d9:
         85:2a:65:5e:9f:99:f2:31:54:87:c2:bc:48:d2:b2:d8:44:59:
         c8:49:89:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3+tAw34+Q1BP0IiR6qJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYWZkY2ZmN2RlM2E2NTk0NzYzMWY5MmM2N2UyNzI3Njcx
OTQ0NzgwHhcNMjYwMzI2MDIwMTE5WhcNMjYwMzI3MDIwMTE5WjAzMTEwLwYDVQQD
EyhkMDljODYzMGI0NWEyMmJlYmFhZmVjZTg4MTJlOTI1ZGI5ODRkNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gq2LRglojVi1gUqp+ubW7jOggBe
L4V9VNGIFPdk65Buq+EjtwvNVxYeCAzSSdtun52m9HYx+tVDgKCUJ1IwW+4RZUEJ
a7TyzfaOz2YxOdxG1X0R3QHK/i8sWO1M0+wDgSv6ESMIWWu2IzlOUURhoDqKjHCU
Klru62PPoZvPhJRGejrYsazCRolg1ubvcmm1Exz92wKOZfRUfiFe73EgyEz8V9MO
dOHGKufllYZ7JCCfWzw5aTcDj1w+2VlZirpnUJcTntnxnBWn4trRkBg8iCNKiSaI
3UnoPfcLU7ubA8A7B35e5bxiJwYExjYoqAgSqAfBem7cz5WjLvEkXQY0bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCchjC0WiK+uq/s6IEukl25hNVsMB8GA1UdIwQY
MBaAFJCv3P9946ZZR2MfksZ+JydnGUR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQt
MTkwYTVjOGQ5ZDk1LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQtMTkwYTVjOGQ5ZDk1
LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+kh0uPr
oHo1wmwXryzGLZXi7QY5hWCyvOhs4Mucjq8DLlk/derfiJh1BBa9dFd5twNuBarK
d3SqyXwUF/TZnYNyrN+i3+jJverlUfsWOXV78jeoL2Y1nNjlgFHdCGL74nTqK2df
rzVvvdXIujwvz6LSVAzl2YsQYISOwB7kfWkQbtiaSqMz8eHfEHlIq+SaAuSlzYXK
afEoheU8yv3wSitohehik2dLpaVZ9JoWRw3rvTgsz9APomHgMKgTPDIHY3dfxTTm
pTyzYHL9xefTVGgBnpKN2wEcW2MNGRoiGVwmVmA+5MxIFzTZhSplXp+Z8jFUh8K8
SNKy2ERZyEmJfw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:07:37 2026 by rpki-client