Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          E2IlFUhkWfNDiEEOEHA7wMJIbcmd7hOCEOjQVnPfIfI=
Subject key identifier:   61:F1:96:1D:B9:2B:A1:C1:CF:F3:D3:4E:52:9C:52:D7:17:05:EC:14
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       019D28F24B4E271F77F05F0768537A2B5EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          15E7
Signing time:             Thu 26 Mar 2026 07:01:00 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:00 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:00 +0000
Files and hashes:         1: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (hash: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM=)
                          2: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (hash: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo=)
                          3: DSzDYKP0Eliter60MSyPBC3uoBo.roa (hash: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY=)
                          4: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: hTcHIyj28O4rKz+puZQxkumwIWrEH98WCT2LAkk56lM=)
                          5: o-d6O05K7BPSIDagH_dA7QNFluU.roa (hash: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:4b:4e:27:1f:77:f0:5f:07:68:53:7a:2b:5e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Mar 26 07:01:00 2026 GMT
            Not After : Mar 27 07:01:00 2026 GMT
        Subject: CN=61f1961db92ba1c1cff3d34e529c52d71705ec14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:68:48:a0:2e:27:0f:7f:62:89:29:30:b5:
                    98:03:5c:ac:c0:1f:82:3c:82:ba:1a:ea:e4:a2:a6:
                    78:ec:e1:04:35:1c:61:6a:8c:67:da:be:73:7f:2e:
                    ba:63:40:47:17:6d:75:24:92:03:68:6d:65:f4:53:
                    df:a3:b9:65:63:b7:3c:7d:f2:6d:0c:0c:0b:f9:89:
                    b1:5e:94:fa:4a:fa:e0:e2:80:f2:a1:1c:fb:c6:f5:
                    38:d0:ba:82:91:9f:20:0d:f1:a3:16:b6:46:d3:4c:
                    e1:16:b7:1f:de:81:b5:b6:eb:5d:f2:2c:97:5e:b1:
                    04:43:3d:e2:9e:de:26:2c:af:3e:44:54:7c:7a:13:
                    32:5b:06:80:af:8a:84:95:e0:6e:f3:c2:d6:50:f6:
                    ac:65:29:84:fe:55:7b:b5:3c:19:3a:0f:66:fb:4d:
                    9a:2b:40:fa:eb:08:ca:be:99:ea:2d:08:e0:c1:40:
                    23:7d:e3:df:a8:cc:95:cd:cb:8b:7d:f1:01:2c:1e:
                    a6:63:45:fd:16:58:41:ed:a4:9f:80:3c:1f:7d:b8:
                    c7:9b:55:37:c3:82:35:06:ed:9c:67:07:7d:50:e4:
                    df:28:e5:02:8b:1f:57:d0:05:0c:8b:33:68:d2:19:
                    a4:b0:1c:0d:dc:91:76:51:77:a6:55:eb:6f:33:34:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F1:96:1D:B9:2B:A1:C1:CF:F3:D3:4E:52:9C:52:D7:17:05:EC:14
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:b5:0a:2e:8d:4a:c1:ed:48:fc:97:41:ab:5e:8d:3f:2d:
         e3:28:d5:dd:29:61:f6:78:4d:79:57:fb:34:a2:fb:5d:70:bf:
         0c:6d:08:64:b3:d1:85:e6:c8:76:9e:6a:f4:98:90:13:eb:20:
         c3:88:6c:25:71:e1:79:50:42:b1:68:5a:27:fb:0b:2d:35:9e:
         36:e9:4c:57:b0:7a:a0:00:12:fa:66:c6:ae:73:90:94:ab:af:
         f6:10:16:30:11:d7:78:9a:7b:fe:72:d1:a5:7a:c0:1f:5b:1d:
         8e:50:18:60:a4:3f:67:5b:30:ab:10:a1:20:0f:0b:ea:ce:34:
         ee:f7:f2:1f:e9:af:1c:cb:00:b5:76:bb:a2:f9:22:02:e4:f8:
         c8:05:a2:c4:66:a4:60:7b:6b:ca:b8:7b:b6:ac:65:db:6a:14:
         82:80:c4:1d:68:e9:7b:ed:e9:cd:be:f3:d3:2e:01:58:9f:1f:
         c5:f2:50:dd:82:ef:b6:98:aa:72:20:af:4a:7a:97:e5:a9:69:
         61:08:9a:ff:96:69:90:f8:de:6b:c2:8f:ff:52:13:0b:9b:4f:
         e2:e3:34:98:1e:d3:fe:f1:8c:a4:1d:94:a7:bd:23:d2:8f:96:
         46:fe:a9:96:08:fc:ae:e8:2e:cb:5c:c2:21:97:fb:c3:d0:6e:
         b6:d9:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:34:18 2026 by rpki-client