Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
File:                     kMDxVcgmfsgeEIO337k_NOm5Aa4.mft (raw, json)
Hash identifier:          W1e7FSmoV/4wJn9o6MLJEt5wISONbogUsDrCpt9aaNM=
Subject key identifier:   77:E6:2D:B5:1B:CD:57:1A:F1:F3:93:5F:26:FE:58:5B:F4:BC:3E:F0
Authority key identifier: 90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE
Certificate issuer:       /CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae
Certificate serial:       019D37897D61187DC69A50E684ADF5405741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
Manifest number:          0194
Signing time:             Sun 29 Mar 2026 03:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:50 +0000
Files and hashes:         1: 7LWHjRPRc5Mqc6PjEVvxHU9li60.roa (hash: rkyd9gjKfsmzi2GqgoHu5uafY8E9ecEWsP84KwNsmfU=)
                          2: kMDxVcgmfsgeEIO337k_NOm5Aa4.crl (hash: LSOANEfyanCkBCYVb5G1apIrtEHsfg81Ot+Knznxx1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:7d:61:18:7d:c6:9a:50:e6:84:ad:f5:40:57:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae
        Validity
            Not Before: Mar 29 03:00:50 2026 GMT
            Not After : Mar 30 03:00:50 2026 GMT
        Subject: CN=77e62db51bcd571af1f3935f26fe585bf4bc3ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fe:9e:eb:fa:6e:3e:ac:6e:fa:b2:99:6c:6c:
                    2d:69:c2:85:8c:98:ee:06:f9:ab:3a:46:dd:41:27:
                    50:54:ae:4d:f4:a1:3f:c3:bb:68:42:af:73:14:26:
                    86:23:62:14:19:d8:27:66:1a:74:b7:d3:e4:cc:11:
                    13:95:a8:43:7d:b2:54:03:01:33:f3:b5:e0:19:ac:
                    2b:b4:2e:64:e3:08:7a:c0:1b:27:b6:40:f8:d1:26:
                    ed:54:e7:75:1d:a7:38:cf:26:fa:d1:a6:70:8e:55:
                    09:36:c7:9d:89:59:45:bf:1b:ad:57:4a:c1:68:c2:
                    c2:4a:81:00:a8:f2:1c:84:38:85:aa:99:d2:32:f5:
                    76:da:5f:ee:a1:75:c3:af:37:7a:98:fe:f4:fa:6f:
                    df:14:01:fa:b7:af:fd:8d:5e:f5:66:31:4b:ce:99:
                    74:04:11:ad:b7:fb:9a:5a:d3:61:f5:78:33:40:28:
                    64:90:3e:61:77:93:58:48:ba:e4:e9:3f:0c:5e:f2:
                    dd:e9:b5:76:c5:18:b9:00:a1:a0:a0:c2:47:6d:2a:
                    5e:0e:4a:7e:63:02:dd:ef:45:43:39:0f:2a:dd:de:
                    37:2d:87:da:c2:17:f5:55:2b:dd:1c:04:0f:cf:ba:
                    a4:b4:a7:6b:e2:6a:03:29:31:dd:9d:17:d6:ec:f9:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E6:2D:B5:1B:CD:57:1A:F1:F3:93:5F:26:FE:58:5B:F4:BC:3E:F0
            X509v3 Authority Key Identifier:
                keyid:90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:44:5c:3b:a8:99:e8:9b:cb:99:30:18:f5:6a:8e:47:95:46:
         ec:31:98:1e:84:30:3a:a9:76:97:f2:4a:75:47:c4:3b:86:ed:
         e4:5b:ff:79:d0:fb:17:b3:54:9c:36:43:9a:df:dc:8c:5f:a0:
         b3:60:8a:99:ae:f8:ef:16:26:bd:fd:66:d0:08:30:fa:e3:3e:
         7e:a5:7d:41:b4:98:b7:cb:8b:00:85:a1:65:61:76:ad:2a:d6:
         94:8f:0f:3f:6e:99:e4:4d:73:be:53:f5:51:be:ad:03:fd:90:
         30:45:cf:a0:b6:df:c1:c4:4e:1e:4a:3d:60:b6:c4:80:b1:87:
         3e:10:2c:96:0b:e2:4f:3d:6e:bd:b5:7d:df:cb:26:4e:a8:75:
         35:fd:55:d6:25:2b:e5:85:d6:41:cd:79:84:c1:fc:ef:4b:ec:
         ef:ae:be:19:80:c7:f8:ab:df:c7:d4:47:73:f4:04:66:d3:36:
         74:1a:5e:55:75:35:5e:15:3e:e3:4b:3a:47:37:32:fe:38:be:
         33:72:7a:e4:f3:d4:d6:ee:ed:a5:c9:3d:be:51:0c:68:f6:32:
         88:f0:e8:79:e1:24:7a:6e:8b:1d:ca:d7:1a:dc:84:d6:d3:37:
         15:a5:8c:01:eb:04:6d:d6:c6:70:ab:14:91:db:27:1f:8f:38:
         0c:cc:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:11 2026 by rpki-client