Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File:                     KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier:          XsGYSoizozOUKG17pP/HU7W2qSOn74pOGQ4Aloxvr5M=
Subject key identifier:   82:C8:F5:40:DA:D1:ED:CF:AA:8A:76:B1:26:56:2D:A1:3E:A2:4F:F1
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer:       /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial:       019CE523D056163CEB0122FB77105D7F516F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number:          1864
Signing time:             Fri 13 Mar 2026 03:00:55 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:55 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:55 +0000
Files and hashes:         1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: 11pI3jea8i7TrZDn8NTtbp+vjN6DtLr+IZBONylICZo=)
                          2: eqDlx1dCrwgrxlQ0ydAQFa9N1j8.roa (hash: AcOLiKex+34XfbpE/I3e+xkSlJ3+mpg+qWqvKQ2QsM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:d0:56:16:3c:eb:01:22:fb:77:10:5d:7f:51:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
        Validity
            Not Before: Mar 13 03:00:55 2026 GMT
            Not After : Mar 14 03:00:55 2026 GMT
        Subject: CN=82c8f540dad1edcfaa8a76b126562da13ea24ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:f7:aa:73:e8:d1:44:16:4b:c5:b1:e9:32:
                    62:9a:73:7a:b7:79:8d:60:7c:86:84:b8:15:3b:c4:
                    b1:d8:e0:a7:fe:a2:49:8a:66:bf:e1:ed:f9:e2:b4:
                    c3:9c:c9:bb:25:4a:bf:2a:7a:27:e9:0a:85:a6:46:
                    cf:c5:d1:0e:6a:a2:ee:4f:d3:a4:7a:f5:1b:7f:82:
                    f8:82:a3:09:2b:68:24:b9:70:34:d1:c6:75:8c:e8:
                    d3:1f:b4:e1:85:b0:a5:e7:6d:ea:ca:5b:ec:9b:cb:
                    ec:d6:41:a9:2e:cb:13:56:8d:a9:7b:c2:81:3c:8d:
                    47:df:c4:cb:6c:d2:45:b1:22:9b:5d:49:59:4c:7a:
                    02:8e:9a:01:1c:79:5c:d6:df:eb:77:3c:0e:80:e4:
                    c6:c6:01:69:8a:df:68:1c:23:5a:d7:2c:7c:fd:13:
                    86:f6:b6:1b:44:69:13:53:60:b9:f9:60:2b:47:6b:
                    e3:eb:ca:e0:ab:9a:93:99:e6:00:8a:2c:66:d3:e2:
                    d4:e9:30:62:9d:9b:4a:b2:44:fa:80:ce:41:f8:1b:
                    43:d2:61:4d:68:df:e7:58:d7:32:34:de:51:b5:85:
                    cd:16:f5:69:98:ff:03:53:42:91:0f:09:eb:1b:3f:
                    b4:6a:ee:59:e4:ff:69:f7:aa:06:09:59:0e:dd:74:
                    8c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C8:F5:40:DA:D1:ED:CF:AA:8A:76:B1:26:56:2D:A1:3E:A2:4F:F1
            X509v3 Authority Key Identifier:
                keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:e4:9a:10:ac:08:9e:ae:cf:41:38:b7:5d:34:2f:fa:11:c3:
         85:98:5c:6c:be:94:88:d1:56:4a:d3:c3:78:2f:c5:b4:d8:e8:
         04:76:a9:ff:b9:77:d7:25:29:c8:29:b9:53:18:39:e4:6f:03:
         80:94:b6:ba:2a:03:21:69:46:e0:92:22:94:09:2d:ff:10:f6:
         ff:a3:9a:7e:a3:4a:8d:59:cf:9e:05:a7:39:e7:95:1b:65:54:
         c9:9f:db:55:c6:70:bb:0a:04:ba:0a:d3:86:42:cc:a1:d4:6a:
         54:34:bd:ea:98:6e:f0:14:11:64:5c:69:ac:a0:b6:61:57:ee:
         4b:5f:e6:14:e5:19:1b:b4:c6:35:2d:9e:d0:d2:9c:f8:f3:c9:
         1a:c7:62:9f:12:82:62:05:69:e0:bc:41:27:70:78:67:2b:8f:
         fd:45:41:02:00:87:f4:fe:98:4b:a5:05:55:f6:69:07:72:41:
         c4:77:7d:f6:3a:1a:ad:f0:c7:7a:a1:22:6b:db:75:89:74:45:
         2a:ae:18:67:91:a7:6a:72:cf:e2:ce:83:f0:10:36:12:a2:59:
         45:3f:5b:ab:cd:16:c1:ef:bd:4f:69:7d:49:58:51:ee:a8:46:
         fd:d0:02:04:98:8c:d4:c4:75:be:bd:7a:f4:f3:a7:45:b0:ab:
         12:6c:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:35:15 2026 by rpki-client