Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          544NkpG+o3dml4sG+bQfIFXi5pFzRAM62MI3WLkXtTA=
Subject key identifier:   21:9E:41:93:A8:C7:7D:D1:A7:F6:E5:CF:C6:0E:AD:D5:CC:8D:36:2C
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       019D2816F8F40D085D87F8E7C6E4C0278A4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          188E
Signing time:             Thu 26 Mar 2026 03:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:27 +0000
Files and hashes:         1: 6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (hash: z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=)
                          2: 8k1WvdzAQ1Go-lpgTPWDZAKZfQE.roa (hash: us5ahjVDdrm7/ofacEwTdXV/iwMapsRRug2V01x/llc=)
                          3: KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa (hash: qRSzgiwPczkOjtugbEXqYuJbcG64mRS3bSrnTP92V5I=)
                          4: Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa (hash: 6rtcBWZHj5iKfuxNemjzbQDA3WB3EhCTz3MwF017Ko8=)
                          5: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: ebkIrhPryB8f2jStmM9bZYs/rT3VZbcqDxwHzYyHo8M=)
                          6: q_--4kminZxQx-8CqaEaNqwj4jE.roa (hash: ryH9qdfaBeMvb/1G2KPwMdilt+m41DaYZGZeqOGsiAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:f8:f4:0d:08:5d:87:f8:e7:c6:e4:c0:27:8a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Mar 26 03:01:27 2026 GMT
            Not After : Mar 27 03:01:27 2026 GMT
        Subject: CN=219e4193a8c77dd1a7f6e5cfc60eadd5cc8d362c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:a0:44:ee:3e:ef:dd:9d:fe:ba:1b:8a:d6:
                    62:e6:27:6c:5c:ba:76:de:0c:54:5a:95:c6:82:65:
                    2d:fc:f5:ac:c1:d7:72:17:e5:01:52:0f:17:82:b0:
                    5b:e7:c0:d9:e5:6f:f4:87:68:48:e8:08:a7:3a:51:
                    89:8d:66:c3:1e:87:69:e8:2e:67:75:23:fa:35:d6:
                    19:f6:62:c4:56:c1:cd:3d:70:81:b4:29:5b:9c:17:
                    96:5a:e3:a4:63:4c:a1:11:ea:83:6b:42:bc:ad:90:
                    76:cc:cb:41:59:35:65:52:13:c4:92:f3:b3:6a:14:
                    c2:92:26:0b:71:c3:4c:c4:14:28:e5:7c:ac:e3:ea:
                    c9:97:56:ea:d2:d4:56:42:6e:a1:10:b3:a5:a6:20:
                    3d:b0:0c:86:16:6a:65:9d:32:39:06:cd:4e:ea:86:
                    15:5e:4f:89:c1:f7:d8:67:ba:9b:0f:56:9a:f1:a6:
                    ad:84:e7:70:81:33:7c:b3:7b:28:f1:20:a6:25:0e:
                    42:4f:d4:2e:81:0e:e2:17:25:8e:f1:73:1d:bd:5e:
                    5c:99:d5:2f:7d:f7:2a:3a:b0:3a:4d:a9:d1:cb:1d:
                    af:97:7a:ef:83:d1:a8:9e:bf:89:24:d6:b3:db:ab:
                    3c:3e:df:02:8d:c1:6a:50:e0:69:d7:b2:a9:6e:70:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9E:41:93:A8:C7:7D:D1:A7:F6:E5:CF:C6:0E:AD:D5:CC:8D:36:2C
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7d:88:2c:ea:39:aa:b7:9e:f2:5d:bd:d5:b7:60:e7:e9:2e:
         7f:d1:ed:ac:78:fa:1c:77:f9:62:ed:60:90:19:0d:c3:ef:cf:
         49:6f:cf:9d:53:82:8a:0a:7f:58:aa:31:51:a6:ce:21:d5:4b:
         fc:b1:ed:ee:20:41:64:5a:90:9e:4d:32:95:3f:da:4b:4b:7f:
         82:af:cf:a0:02:07:2d:92:17:c3:16:f3:32:b8:9f:93:d4:5a:
         14:0c:61:a9:ac:dd:8f:66:57:f3:24:e3:cb:c2:24:31:18:e4:
         c8:7e:83:dc:a6:36:72:53:6f:62:11:48:0f:3c:6e:3c:c5:98:
         f3:44:80:06:47:ed:cf:9c:d4:27:6c:58:24:6b:d5:5a:2e:a3:
         f7:db:3c:59:dc:46:d5:03:3a:a1:ab:99:9d:49:82:58:ea:80:
         97:2b:97:cb:99:3e:49:fe:71:e4:13:06:40:6f:6d:80:23:9a:
         22:da:09:97:a7:48:ff:c5:3a:41:10:e9:8e:1f:df:8e:d1:5e:
         c2:c8:a2:cf:a8:4c:6a:20:43:41:2b:17:2b:a0:d0:98:94:fc:
         2d:e9:d7:67:ef:67:0e:10:51:cc:04:09:d4:48:53:20:10:1b:
         c7:c1:93:47:c2:87:89:10:26:09:fd:a3:f7:a6:67:22:fb:ac:
         4c:ce:7f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:00 2026 by rpki-client