Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
File:                     KseP1RenX3fz9P0imsXmcyVgxuE.mft (raw, json)
Hash identifier:          BujQRloZ2JfYdhaJmuhlxzDR/pX9xJcH1qdI7tCt3Ps=
Subject key identifier:   D9:94:46:9C:FE:9B:3E:AB:1A:B4:B4:F6:11:11:BD:F7:A3:5F:26:EE
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Certificate issuer:       /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial:       019D2583FFBD8BA003104C02F7A6DE09DA6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 15:01:40 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:40 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:40 +0000
Files and hashes:         1: I_ecBbii9WMS-xscmeRtbpKrhSo.roa (hash: ZkycRFhn+SYuv4ysUEIlsNeF6vjl8gsTu3WtZg0CKCM=)
                          2: J40_KlT3-Sey5bAIRfdyYW8QH2w.roa (hash: ktrLXwF2mH8HpV61DUldxAl7PN7AxEoLl+QT4NZrtPw=)
                          3: KseP1RenX3fz9P0imsXmcyVgxuE.crl (hash: BzPlUM5WdH9t291FhBgrux01iR24Au13wAYIWe99kAg=)
                          4: Qm62m9hHZrhnWMpJhoDzXXnxIA0.roa (hash: H6TNwxkengl9/iIC3W0hXj/WoaVVJ6PzeMW/vUfiWE0=)
                          5: Vov-E8svAft1k9iFrH6MFFzUMKM.roa (hash: STMeX+L0qb8+gOF3y3YwWiwH+e0544gnUujaYmW8eHY=)
                          6: zhaeqdUVvKYeCdJMCSTAXUedtAo.roa (hash: 69QOcglIh7qqL96KGzZOqCntWc9IcDdFTSQUzsEJIeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:ff:bd:8b:a0:03:10:4c:02:f7:a6:de:09:da:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
        Validity
            Not Before: Mar 25 15:01:40 2026 GMT
            Not After : Mar 26 15:01:40 2026 GMT
        Subject: CN=d994469cfe9b3eab1ab4b4f61111bdf7a35f26ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:26:ab:7c:86:10:61:a7:3e:0e:8d:b8:18:
                    cc:58:c1:59:36:9e:29:48:66:6f:44:01:c8:ef:13:
                    36:08:e4:5e:a0:86:1a:d2:b0:52:fc:62:d2:4f:3d:
                    f2:f2:8d:4e:68:2c:5f:a6:6b:59:ae:b0:5e:e2:7a:
                    1f:31:3a:89:ee:7e:6b:56:3c:39:ac:9e:ad:3f:55:
                    2a:1a:8c:f9:1a:d2:4b:5e:9e:bd:aa:e7:f9:a7:30:
                    0d:c0:d5:db:26:fb:8e:76:79:1e:ab:8c:01:3b:f0:
                    ec:a8:ed:60:db:ba:59:b6:2c:73:e3:92:17:30:3d:
                    93:a1:03:e0:2c:40:c5:58:b2:9c:3c:15:0f:e5:61:
                    ed:29:b6:62:ba:21:41:1f:b2:26:16:e3:95:ad:e3:
                    18:42:e4:bb:6f:51:0f:61:15:53:2e:e5:1b:5a:3a:
                    a8:88:ed:84:b7:cf:1f:c7:68:d4:5e:b0:51:b0:4a:
                    60:4d:9b:05:cb:57:11:f6:65:11:9b:5a:9b:9c:26:
                    c1:62:f9:eb:af:1a:e3:90:36:a1:b7:33:41:fb:de:
                    d2:fb:09:5c:c8:bd:15:ae:b5:9d:47:e5:23:88:65:
                    a7:d1:2a:1e:93:e5:54:84:c9:fd:3b:d9:3e:82:82:
                    32:12:0f:89:b3:dd:8e:62:4f:55:31:fd:59:82:e3:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:94:46:9C:FE:9B:3E:AB:1A:B4:B4:F6:11:11:BD:F7:A3:5F:26:EE
            X509v3 Authority Key Identifier:
                keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6e:09:4c:56:d5:91:9d:94:7c:0d:61:97:0f:bf:59:96:3f:
         bf:f4:33:6d:d2:67:e2:06:93:18:ca:15:08:a2:58:12:96:3d:
         24:78:51:e6:40:8a:c4:3c:62:3a:99:ae:79:b0:ca:e0:c0:d2:
         f0:df:70:65:b5:47:80:02:9d:43:1f:a1:40:72:53:15:5c:64:
         3e:b3:af:d9:1f:56:4b:7c:fb:ef:8f:02:cd:ab:4e:80:3b:32:
         1e:32:37:02:6c:72:e7:fb:da:a0:80:96:11:50:90:ac:f6:9c:
         7d:7c:76:69:d9:97:4e:1f:5b:e1:ef:a7:ff:a7:d5:ef:13:af:
         3b:59:43:5b:ce:38:d2:37:dc:c0:f6:ec:b5:84:47:08:f1:33:
         92:3e:ab:3d:11:99:82:72:7b:66:4f:c4:5b:e2:7c:a5:b0:e2:
         46:6a:1b:4a:40:14:1b:02:63:5a:fa:d4:07:93:52:b2:01:70:
         83:49:9f:f2:35:e5:c3:5e:f5:d5:bf:29:29:d6:86:29:f5:d8:
         d4:b2:a2:30:63:28:79:35:1e:07:43:22:f8:fe:0f:43:72:7c:
         10:e0:85:d5:e9:db:57:c1:6e:f7:27:c1:c7:7c:84:f1:9c:c3:
         a4:b2:53:8e:29:08:49:20:45:29:cf:c4:20:69:e9:2d:22:f1:
         dd:f7:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:39 2026 by rpki-client