Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File:                     kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier:          kn7KBIMc9kUFDEa2wtuBTz78KirzkYUwH1DyFwOB9F0=
Subject key identifier:   FA:F6:2A:00:E5:80:9C:BD:60:7F:43:EE:55:71:75:F7:CE:18:3E:91
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer:       /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial:       019E216D8CB3E5448D4D4B89BFFBC04EDBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number:          1518
Signing time:             Wed 13 May 2026 13:01:28 +0000
Manifest this update:     Wed 13 May 2026 13:01:28 +0000
Manifest next update:     Thu 14 May 2026 13:01:28 +0000
Files and hashes:         1: ZLG2d-EvI3tDHtNjQT_sDlpWBXM.roa (hash: bTLO/he/cwtOoUf2Miq0EAEbluFDqTVodZfbg6upreQ=)
                          2: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: SXoLEu2YDX6ZFqrLmZMeQiW5DfqwVz2HlNtyakzhly8=)
                          3: n4P4Aw5EqVPbp0dHUGmlk-Fj3KQ.roa (hash: OBqZU1zM//7Ku6VXCPW57HKZVO1wfa+8Zttcrr4ee/o=)
                          4: t7Gq84nW0Oj9leZaX2X9wjhswgA.roa (hash: yr3zYXhfmgwWPLlesJ4m39gkLVl7WXaVbHMKkBty0Jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:8c:b3:e5:44:8d:4d:4b:89:bf:fb:c0:4e:db:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
        Validity
            Not Before: May 13 13:01:28 2026 GMT
            Not After : May 14 13:01:28 2026 GMT
        Subject: CN=faf62a00e5809cbd607f43ee557175f7ce183e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:05:79:cb:83:03:16:9f:bb:c1:65:4e:f7:
                    d2:2f:ab:5f:af:3e:98:03:38:1c:59:86:12:76:49:
                    a4:fb:ba:7d:59:3d:31:8f:8d:0d:82:45:b5:15:f5:
                    29:32:90:c4:2c:11:c3:0b:ac:fe:2f:6e:49:5e:d8:
                    72:a6:59:26:cf:cf:94:7a:c3:a0:7a:12:83:c0:bf:
                    c4:1e:e6:bf:74:0e:87:4a:59:66:c2:37:fe:a5:71:
                    2c:d6:43:f4:b0:c3:5a:eb:5a:60:2c:10:bf:59:4f:
                    07:45:4e:b5:03:86:bb:7a:18:01:58:ee:6a:bb:fb:
                    3f:d3:8f:c1:2e:cc:82:c8:b4:bf:4b:bb:87:67:51:
                    bd:3a:ce:75:b8:f1:bf:f4:59:31:77:7f:2e:03:66:
                    2d:64:a7:a5:c0:df:23:33:2a:1f:a8:af:e5:7b:42:
                    a5:f1:c9:7e:59:38:03:d3:93:c5:39:4f:77:25:7d:
                    df:09:3d:07:f8:83:df:60:0b:e8:fa:73:7d:50:5e:
                    20:e4:1f:8b:4b:0c:09:b7:94:ab:8b:05:14:a4:86:
                    f5:ea:45:a6:aa:e9:59:d2:ae:c8:44:b5:0f:02:a1:
                    47:7a:e1:8b:34:b4:cc:3e:8b:ad:6f:ec:c8:dd:99:
                    eb:84:b2:b4:73:f2:9a:fd:6e:f6:85:ce:8b:d3:b2:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F6:2A:00:E5:80:9C:BD:60:7F:43:EE:55:71:75:F7:CE:18:3E:91
            X509v3 Authority Key Identifier:
                keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:03:a3:f5:b4:41:1b:1d:1c:ea:64:f6:59:d1:e4:95:dd:19:
         e4:e6:d1:18:da:42:c3:aa:da:94:0b:e4:b3:64:57:d8:fd:40:
         a4:fd:0a:2b:9d:17:68:d4:f7:0e:58:e7:43:44:e8:e2:db:44:
         d1:b6:25:49:3b:0b:1a:93:75:8f:05:73:b7:5a:5a:e8:70:fd:
         24:aa:47:0c:f7:fd:46:be:55:65:f4:1c:01:95:a7:d0:e9:7b:
         18:7d:46:fa:50:16:a8:b5:e4:ea:10:91:01:0b:25:2e:df:66:
         cb:13:14:d7:5f:8d:a9:18:9c:5d:ce:1f:7b:a1:be:c6:db:f1:
         33:98:3b:46:44:de:1e:fd:67:ad:ec:90:40:5e:7b:9e:2e:86:
         31:7e:24:58:50:c4:cf:e7:19:e9:70:b4:00:46:24:b3:1e:07:
         4f:e4:f8:1c:fc:29:17:82:1b:1d:76:4e:59:b9:b7:fc:18:b4:
         6c:f5:67:36:7c:00:64:e2:10:63:9b:76:48:57:99:36:e9:a5:
         ad:fc:f9:e4:6e:1c:ce:70:99:6b:41:21:bd:25:f9:24:8f:c9:
         b1:69:4d:36:3b:9a:62:24:f5:ec:1b:c3:3f:5d:84:f2:22:ac:
         aa:c4:2e:5a:b8:ff:f4:ae:06:ad:86:eb:bd:d4:07:c4:2b:ba:
         b1:56:8d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hbYyz5USNTUuJv/vATtvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZmI4ZmExMGRmZjM0NzNlNjUzZGJmNjFjOWE4NjQzMjE4
MGE1YzcwHhcNMjYwNTEzMTMwMTI4WhcNMjYwNTE0MTMwMTI4WjAzMTEwLwYDVQQD
EyhmYWY2MmEwMGU1ODA5Y2JkNjA3ZjQzZWU1NTcxNzVmN2NlMTgzZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog8FecuDAxafu8FlTvfSL6tfrz6Y
AzgcWYYSdkmk+7p9WT0xj40NgkW1FfUpMpDELBHDC6z+L25JXthyplkmz8+UesOg
ehKDwL/EHua/dA6HSllmwjf+pXEs1kP0sMNa61pgLBC/WU8HRU61A4a7ehgBWO5q
u/s/04/BLsyCyLS/S7uHZ1G9Os51uPG/9Fkxd38uA2YtZKelwN8jMyofqK/le0Kl
8cl+WTgD05PFOU93JX3fCT0H+IPfYAvo+nN9UF4g5B+LSwwJt5SriwUUpIb16kWm
qulZ0q7IRLUPAqFHeuGLNLTMPoutb+zI3ZnrhLK0c/Ka/W72hc6L07LacQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPr2KgDlgJy9YH9D7lVxdffOGD6RMB8GA1UdIwQY
MBaAFJL7j6EN/zRz5lPb9hyahkMhgKXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDct
MjkzZjYxMjJhMTlkLzEva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDctMjkzZjYxMjJhMTlk
LzEva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAOj9bRB
Gx0c6mT2WdHkld0Z5ObRGNpCw6ralAvks2RX2P1ApP0KK50XaNT3DljnQ0To4ttE
0bYlSTsLGpN1jwVzt1pa6HD9JKpHDPf9Rr5VZfQcAZWn0Ol7GH1G+lAWqLXk6hCR
AQslLt9myxMU11+NqRicXc4fe6G+xtvxM5g7RkTeHv1nreyQQF57ni6GMX4kWFDE
z+cZ6XC0AEYksx4HT+T4HPwpF4IbHXZOWbm3/Bi0bPVnNnwAZOIQY5t2SFeZNuml
rfz55G4cznCZa0EhvSX5JI/JsWlNNjuaYiT17BvDP12E8iKsqsQuWrj/9K4GrYbr
vdQHxCu6sVaNnw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:17:22 2026 by rpki-client