Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File:                     KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier:          yMbsSTihLMKydPc0N8rfE0Ut36do7IoWrMD9Yl2ZizM=
Subject key identifier:   D5:63:4B:2D:DC:5E:08:DD:9B:8D:8B:1F:AB:4C:28:C8:45:53:23:DC
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer:       /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial:       019D24712BB7977460D21FFC50886B55279A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 10:01:29 +0000
Manifest this update:     Wed 25 Mar 2026 10:01:29 +0000
Manifest next update:     Thu 26 Mar 2026 10:01:29 +0000
Files and hashes:         1: 1zH4HR_jPm-8SwLa0qimE97-P5A.asa (hash: tYxSixnm08xFTCmXHsgsP7H6MfcHJGSd+ujhmOmOLlE=)
                          2: CRy037_i_cUr7ivvwFkaM0Oecc8.roa (hash: 2BvO8Ta902Qq1EYmMVKwFCPEx1ueB5rtDCTKXW2UYFU=)
                          3: GV3rHMHaqZh85X7GW_djNwAYsOQ.asa (hash: MrfqDCvqnvYb6uuxXgWmjLxPfmlym5eT0CjhOIOM+sw=)
                          4: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: 6YUO7KsKDNwcnGAE++ILPfLpFzf1KDjK66t+Rk9H/Xk=)
                          5: mra6PNQALIJ4cXHv3iTX1S7RUK8.roa (hash: 5i9ye/QA8fnoRb0KmqSlxn4ykxEHMPNjIM5js5S5I9Y=)
                          6: nxOlTeeVwbJvP0L8gxUuYbskG8I.asa (hash: MikecboX8HHDFogf33eR5geZ8eAmOY2OzEKHUF/uBE0=)
                          7: v6LodvYpOGGUhWjXnG4-LMGPe68.asa (hash: Hf1wgRy5JTLjGpN4VTbA8OHkeD4wSqOV5xdGmFiUEDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:71:2b:b7:97:74:60:d2:1f:fc:50:88:6b:55:27:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
        Validity
            Not Before: Mar 25 10:01:29 2026 GMT
            Not After : Mar 26 10:01:29 2026 GMT
        Subject: CN=d5634b2ddc5e08dd9b8d8b1fab4c28c8455323dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fb:ee:34:33:58:14:4a:9c:c4:97:6c:09:6d:
                    c2:bc:78:d0:f7:0c:a1:4b:ef:b3:65:ef:4e:de:8f:
                    d6:76:f0:50:c6:c5:b3:96:df:cf:46:02:03:8b:60:
                    6a:67:48:80:f6:f3:dc:64:81:41:06:78:d5:14:4c:
                    88:2e:46:39:ec:4b:16:bc:52:fe:7b:b7:e0:c3:3a:
                    ae:7e:cb:5e:bf:c0:5d:68:96:75:8c:55:1f:a6:18:
                    d4:37:d4:45:8b:1c:22:10:6a:2e:e5:f5:5b:84:95:
                    88:19:dd:33:7d:e4:33:1a:38:e8:b4:c6:e2:63:b9:
                    76:ad:bf:03:3d:b3:a5:9b:eb:17:59:c0:cf:35:95:
                    0c:f0:33:37:ff:35:91:b2:53:a4:c7:a8:24:34:48:
                    30:c5:08:61:59:ca:86:11:3f:51:3b:b5:1c:ef:b7:
                    6b:e9:15:2e:d0:ec:82:e8:04:29:43:5e:f4:4d:e9:
                    dc:90:b9:82:15:54:90:38:1f:eb:df:db:23:5c:1f:
                    95:4d:1b:56:04:94:33:62:58:0e:d9:8b:5f:45:7e:
                    97:bb:56:7a:30:8c:55:0a:da:10:e8:33:ae:6b:2e:
                    4a:d5:20:f3:63:7e:b5:b7:69:11:d7:7e:10:ab:db:
                    61:91:51:27:3a:26:1e:49:60:34:62:61:a4:33:d0:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:63:4B:2D:DC:5E:08:DD:9B:8D:8B:1F:AB:4C:28:C8:45:53:23:DC
            X509v3 Authority Key Identifier:
                keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d3:24:06:47:d9:08:31:ad:22:fc:ae:26:d3:d6:73:bf:07:
         19:a3:d6:66:e5:cc:83:b5:80:83:6f:6c:6b:a4:d3:29:f5:c2:
         2b:a4:6b:9b:9c:a6:82:a0:50:a3:db:07:98:33:40:d9:52:05:
         28:01:19:2e:33:49:fc:4b:7c:c8:91:aa:e1:7e:b4:5b:89:cf:
         2b:10:80:c2:e9:0d:ea:2d:74:21:a3:2f:4d:d5:08:ab:06:f4:
         ad:a6:c7:1f:38:79:06:d9:af:46:78:52:68:7e:ed:b0:ad:d9:
         63:7c:d5:2b:78:c1:3d:e8:3e:1f:96:9d:09:00:a5:7f:21:ab:
         bd:76:cc:ba:47:07:ab:4f:10:e7:c5:c6:b8:ae:10:4f:62:44:
         ea:be:72:f3:74:03:b6:63:69:07:2c:f2:31:dd:1f:80:0f:68:
         11:e3:a2:61:24:b5:57:88:13:6f:5d:52:4e:69:ba:6d:8b:4d:
         fe:4b:a1:7e:2d:83:4c:d8:1b:f5:39:a2:cc:0b:e0:51:1b:b4:
         63:97:01:e7:a3:16:f9:ae:8e:e5:1f:10:58:7f:3e:33:6c:e7:
         4c:b1:3e:96:9b:aa:d0:8c:de:12:95:66:01:89:62:06:33:ae:
         dd:97:11:2f:a2:a9:c5:54:7c:80:46:12:97:6b:97:29:58:c6:
         44:45:dc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:30:39 2026 by rpki-client