Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          tUEKfGzY6RU0QZlghlTt73TDuXYqZlNykU5/ZM3l/Mg=
Subject key identifier:   2E:58:6E:52:77:D9:98:BB:ED:3F:E7:9C:B9:28:E1:C3:22:E5:89:B8
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       019CEC386F854319014487EC02827A429045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          186F
Signing time:             Sat 14 Mar 2026 12:00:47 +0000
Manifest this update:     Sat 14 Mar 2026 12:00:47 +0000
Manifest next update:     Sun 15 Mar 2026 12:00:47 +0000
Files and hashes:         1: 6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (hash: z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=)
                          2: 8k1WvdzAQ1Go-lpgTPWDZAKZfQE.roa (hash: us5ahjVDdrm7/ofacEwTdXV/iwMapsRRug2V01x/llc=)
                          3: KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa (hash: qRSzgiwPczkOjtugbEXqYuJbcG64mRS3bSrnTP92V5I=)
                          4: Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa (hash: 6rtcBWZHj5iKfuxNemjzbQDA3WB3EhCTz3MwF017Ko8=)
                          5: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: 0RuGaQQ1GlIuY2Qho2WAhYYF55bxo1VbOJZ7o4Rz4yA=)
                          6: q_--4kminZxQx-8CqaEaNqwj4jE.roa (hash: ryH9qdfaBeMvb/1G2KPwMdilt+m41DaYZGZeqOGsiAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ec:38:6f:85:43:19:01:44:87:ec:02:82:7a:42:90:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Mar 14 12:00:47 2026 GMT
            Not After : Mar 15 12:00:47 2026 GMT
        Subject: CN=2e586e5277d998bbed3fe79cb928e1c322e589b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:81:0f:52:69:83:94:0d:e6:d1:2e:b3:b2:
                    d1:38:41:f8:86:a2:53:ef:6b:e0:ec:14:32:19:f2:
                    cd:b6:f8:a3:80:3a:6a:76:c6:e5:42:7c:46:d2:c9:
                    d0:88:07:94:20:7f:1e:72:af:33:82:fe:2f:8c:56:
                    01:a4:4e:8e:31:a1:52:60:0e:a0:7a:08:78:64:db:
                    44:db:69:48:b3:57:e8:80:e3:2e:e4:cd:fa:1a:22:
                    37:a2:3e:d3:f0:52:48:c3:d7:89:d8:59:45:01:ad:
                    da:35:60:09:1a:7f:6d:e1:89:22:4e:76:f4:92:d9:
                    a9:18:c2:a2:05:38:90:ed:31:64:1a:cf:a7:12:4c:
                    c4:a3:dd:2e:3c:6c:83:e3:23:21:35:ce:6b:72:7c:
                    71:a4:16:7f:f1:29:d3:c5:7f:3d:44:78:28:13:8b:
                    a2:1c:47:b5:8e:f6:2d:85:f4:a6:94:68:e6:70:c1:
                    cf:e3:80:59:d0:c9:98:02:ae:7d:b2:59:60:30:ff:
                    20:d2:f1:61:0d:eb:34:13:82:be:e4:48:cf:be:18:
                    ae:86:23:60:96:79:31:20:5d:b6:a3:9a:51:4d:f8:
                    47:5a:35:d4:d4:24:d2:c3:f4:af:a6:40:94:ff:75:
                    1e:13:75:8c:07:c3:38:5c:80:da:d5:69:13:90:82:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:58:6E:52:77:D9:98:BB:ED:3F:E7:9C:B9:28:E1:C3:22:E5:89:B8
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:22:1b:df:ae:9e:66:90:92:82:41:b7:6d:26:89:65:04:79:
         8d:5e:04:25:d1:94:17:9b:e7:98:10:32:d8:6f:18:47:85:cc:
         6a:b6:0b:3d:57:53:c4:f8:c1:bc:ad:0a:1e:0a:42:20:00:66:
         5a:42:ee:37:a0:95:7e:4c:f5:74:f2:f0:55:20:5d:5d:24:35:
         a3:c8:2a:48:6e:5b:9c:fe:82:b5:f6:b1:64:28:f4:8c:0b:dd:
         8c:38:f3:62:bf:af:4d:64:a5:ff:b2:be:98:72:03:11:90:31:
         ce:0a:0e:63:5f:32:07:34:f0:f9:29:31:f3:03:92:00:0b:be:
         f9:e4:36:8f:94:44:9d:fc:31:e8:ac:7c:a8:92:bd:41:e1:14:
         60:54:c1:74:f5:4d:93:d6:80:af:02:eb:69:31:0f:16:ce:b4:
         a5:07:f7:01:ff:da:28:ec:c1:f7:de:c3:e1:cb:9d:45:7c:3e:
         5d:6c:5c:32:35:12:ee:b3:ac:6b:2b:3d:55:be:55:f2:bd:02:
         f1:5f:3d:44:eb:24:dd:91:1c:d4:5e:c5:ee:8c:a6:36:48:79:
         dd:3d:a3:66:fc:97:0f:c1:d6:9a:80:59:f9:eb:6b:31:9e:f8:
         a4:f4:b3:46:a1:96:23:5b:4e:d7:9b:e4:09:8d:7d:6b:28:6f:
         bb:d2:2d:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzsOG+FQxkBRIfsAoJ6QpBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4
NGZhNDEwHhcNMjYwMzE0MTIwMDQ3WhcNMjYwMzE1MTIwMDQ3WjAzMTEwLwYDVQQD
EygyZTU4NmU1Mjc3ZDk5OGJiZWQzZmU3OWNiOTI4ZTFjMzIyZTU4OWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu52BD1Jpg5QN5tEus7LROEH4hqJT
72vg7BQyGfLNtvijgDpqdsblQnxG0snQiAeUIH8ecq8zgv4vjFYBpE6OMaFSYA6g
egh4ZNtE22lIs1fogOMu5M36GiI3oj7T8FJIw9eJ2FlFAa3aNWAJGn9t4YkiTnb0
ktmpGMKiBTiQ7TFkGs+nEkzEo90uPGyD4yMhNc5rcnxxpBZ/8SnTxX89RHgoE4ui
HEe1jvYthfSmlGjmcMHP44BZ0MmYAq59sllgMP8g0vFhDes0E4K+5EjPvhiuhiNg
lnkxIF22o5pRTfhHWjXU1CTSw/SvpkCU/3UeE3WMB8M4XIDa1WkTkIJrLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5YblJ32Zi77T/nnLko4cMi5Ym4MB8GA1UdIwQY
MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt
OGNjOTgzMzYxMWU2LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2
LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0SIb366e
ZpCSgkG3bSaJZQR5jV4EJdGUF5vnmBAy2G8YR4XMarYLPVdTxPjBvK0KHgpCIABm
WkLuN6CVfkz1dPLwVSBdXSQ1o8gqSG5bnP6CtfaxZCj0jAvdjDjzYr+vTWSl/7K+
mHIDEZAxzgoOY18yBzTw+Skx8wOSAAu++eQ2j5REnfwx6Kx8qJK9QeEUYFTBdPVN
k9aArwLraTEPFs60pQf3Af/aKOzB997D4cudRXw+XWxcMjUS7rOsays9Vb5V8r0C
8V89ROsk3ZEc1F7F7oymNkh53T2jZvyXD8HWmoBZ+etrMZ74pPSzRqGWI1tO15vk
CY19ayhvu9Itxg==
-----END CERTIFICATE-----
Generated at Sat Mar 14 19:11:17 2026 by rpki-client