Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
File:                     KZkwB8fJLfYXjny0MYP9f1KlJtg.mft (raw, json)
Hash identifier:          EC62ZL/ot6mR9EZXcMmQY5AGrVFr8/TMt2izwBNYv18=
Subject key identifier:   83:6C:46:4E:31:42:82:2B:CC:85:D4:CD:C1:F7:D3:CF:DB:B8:82:37
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Certificate issuer:       /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial:       019E29CBC61777A12E969B34E050F65B7A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
Manifest number:          06BB
Signing time:             Fri 15 May 2026 04:01:20 +0000
Manifest this update:     Fri 15 May 2026 04:01:20 +0000
Manifest next update:     Sat 16 May 2026 04:01:20 +0000
Files and hashes:         1: 7f4UvQlMdpfAbI5t8bFTk5iRj8k.roa (hash: /N2n+SGiRBz3V3eyWEIptUhy7tOM9oDQMEZwfy867yE=)
                          2: CGspQAEXscYtnhUkcO43B4rOMYI.roa (hash: ZmpcN0BqbrZBIrGn5PsZ/DSc38P9usOvQmrKlG150S0=)
                          3: JdmDASsiVF3OIVzqa3C7Cim1k98.roa (hash: nFwnLYcc5xw59Kim5t3Ysus4IUlGUDLjCzJ6lO8Sg5o=)
                          4: KZkwB8fJLfYXjny0MYP9f1KlJtg.crl (hash: LHisHmZldHd6wRO/AsDWUNgeSyiqSap0Ub+gd7id1AA=)
                          5: c_SCSSOMfndQeyUkFaC27pfW1mU.roa (hash: uAY189SdMJyDwdqEHdr62YdMVXHkgzdNjAsXqKard7o=)
                          6: zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa (hash: QDKMvUQqB0HqtMyuZtPJ5BCeeeIwdd+NrKPpEKtzi6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cb:c6:17:77:a1:2e:96:9b:34:e0:50:f6:5b:7a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
        Validity
            Not Before: May 15 04:01:20 2026 GMT
            Not After : May 16 04:01:20 2026 GMT
        Subject: CN=836c464e3142822bcc85d4cdc1f7d3cfdbb88237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:79:9e:c6:63:28:c5:c3:e5:a3:01:69:d5:
                    14:14:80:b0:49:76:0c:98:04:47:ff:d4:39:4f:07:
                    42:56:88:f8:26:70:e6:03:3e:69:f8:47:76:16:4c:
                    9b:74:3f:ce:3b:6d:5a:47:e6:14:0e:2f:de:f7:cf:
                    65:d5:54:2a:8a:d0:9e:ee:c0:33:93:3c:33:7a:38:
                    43:b1:bd:28:8e:1c:e8:8c:51:a7:b4:07:d5:74:08:
                    ac:d3:75:e5:c0:46:0d:96:89:3b:e1:88:c0:29:ed:
                    88:26:32:f3:98:3e:a4:d6:d3:92:23:d4:f1:48:0e:
                    05:b8:52:10:4d:00:fe:a5:20:20:0a:3e:45:62:79:
                    67:1f:2d:1d:7f:c7:36:34:a7:6a:05:68:a1:8e:40:
                    12:48:6d:1a:34:ee:bb:48:f6:89:48:62:e3:69:94:
                    b5:bb:4d:b9:12:08:81:c2:6d:38:c3:f9:26:cf:f2:
                    cd:ca:fd:39:1b:bc:9e:9f:d7:45:79:ff:88:2b:35:
                    77:9d:62:51:5f:b4:86:10:3c:97:2b:47:05:bb:d5:
                    f9:10:f1:b5:d3:db:2f:b6:bf:60:94:39:19:4b:a9:
                    0a:57:c0:e6:f2:d0:bb:14:ce:5b:28:7f:bc:7d:ca:
                    e2:f7:e1:68:e3:16:dd:99:57:6c:70:88:3b:07:a3:
                    6a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6C:46:4E:31:42:82:2B:CC:85:D4:CD:C1:F7:D3:CF:DB:B8:82:37
            X509v3 Authority Key Identifier:
                keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6d:89:f5:78:b6:b2:15:b3:25:f5:49:dd:3c:98:66:2e:a9:
         91:dc:b8:21:67:c2:0a:44:fe:86:d4:cf:f8:89:7a:bc:08:4a:
         84:6f:8f:f0:f2:5e:ce:5d:b5:b1:5c:fe:5f:cf:3d:f5:7f:eb:
         13:80:ee:f2:4a:5f:ec:14:f6:95:55:da:22:e4:45:57:0b:0a:
         98:11:90:45:fd:42:aa:cb:5f:71:7e:e1:1e:67:9e:1a:8f:99:
         26:0d:61:16:11:de:8c:d2:e1:db:cf:74:ce:20:47:09:87:0d:
         89:f6:91:fb:92:b7:7c:d4:f3:9e:18:69:b8:15:c0:36:63:7d:
         37:52:ef:fc:9d:1e:37:0f:af:94:cd:02:24:97:13:8b:f3:da:
         79:40:f3:1b:83:8f:d5:c6:dd:b4:68:5e:0c:fc:11:8c:17:b2:
         3c:65:53:0f:0e:8e:34:ed:b9:e0:38:ee:78:fd:fa:8a:bc:05:
         95:05:7d:e4:f8:71:10:d4:8a:a0:58:1f:6e:84:b7:de:19:fe:
         2f:9c:77:e8:fe:55:49:e8:ba:81:61:79:65:f7:4e:98:67:df:
         f0:56:d1:38:cd:ae:13:4a:b0:fd:d6:ff:c9:7e:41:55:ca:20:
         53:ac:83:90:92:e6:8d:e2:ec:0b:71:e1:d2:20:91:a0:d2:0c:
         82:29:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:55:28 2026 by rpki-client