Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File:                     KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier:          swrxIZ86qDUKTWrBGwTvnf/yZDyTLFXFjcIm+nw1XGE=
Subject key identifier:   5D:C3:BB:59:03:26:04:0C:12:D9:69:42:36:FD:3F:96:F8:59:B6:33
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer:       /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial:       019EFC8412CAE4692AADDB714B2147B0D692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number:          09D3
Signing time:             Thu 25 Jun 2026 02:02:54 +0000
Manifest this update:     Thu 25 Jun 2026 02:02:54 +0000
Manifest next update:     Fri 26 Jun 2026 02:02:54 +0000
Files and hashes:         1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: /BQAxoMSR3rdO94P+rtpo4VakxoTTXeHo2TtGHBpCKA=)
                          2: RxNLLXxR-CzB0lCNzFXnXse6o58.asa (hash: +bxHDoutbQA8pq/ltILKkfOw9KUe0ujPJE9JrTsk4Fw=)
                          3: YVLbsPphUzr0gk62ZWqr-AU_xYs.roa (hash: 40/VqOwzeKbDNYjqt9gFE2PfKWEcwlXPJGHdZ1QMGtM=)
                          4: gV3lWCZGEL7TywDCIp2kVK10Glc.roa (hash: kcop4NfBtpHkYykeiA98ibh1BPUfzjJD5yzNWc+dbDg=)
                          5: xhu-0mZ6I_dG18XDHBeHb4pHzuI.asa (hash: Ckg17sZrLC7ovu4WHIS5uCgsXOtfqzHSeiiwzrs9BRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:84:12:ca:e4:69:2a:ad:db:71:4b:21:47:b0:d6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
        Validity
            Not Before: Jun 25 02:02:54 2026 GMT
            Not After : Jun 26 02:02:54 2026 GMT
        Subject: CN=5dc3bb590326040c12d9694236fd3f96f859b633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:53:89:97:e2:cb:a0:ca:b1:6c:a7:19:71:
                    0b:f2:28:ff:97:85:3f:11:19:87:2d:8c:5d:e0:1a:
                    59:85:4a:49:30:b3:d4:6d:8e:d5:fa:4c:83:4c:7d:
                    11:cd:43:cd:7d:3b:79:e2:16:df:0c:d0:cf:2f:bd:
                    f2:d4:8e:e4:71:79:59:85:14:1a:b6:5b:7c:2e:4c:
                    71:e4:4d:38:67:ce:df:91:3f:61:b4:c7:41:d1:57:
                    76:de:b4:f7:0c:45:fa:9a:ce:ef:a7:e8:3b:9e:5e:
                    2b:1d:12:d7:20:76:cc:6a:53:b0:e0:b8:f0:31:72:
                    47:95:3d:4f:0f:2b:8e:69:13:f0:89:cb:c6:0e:3f:
                    f8:37:81:6c:b9:dd:8a:e1:e6:f7:23:88:9b:8a:b4:
                    cd:ff:1e:02:0f:4a:f2:d4:07:07:bf:03:9e:dc:37:
                    d1:e3:63:6e:43:38:7a:d6:0f:6a:67:af:ee:8e:33:
                    65:e9:6b:2e:08:fa:01:e5:ab:4d:62:13:91:05:a6:
                    32:0f:54:63:d1:48:d2:58:19:49:8d:dd:cf:25:e1:
                    85:2a:74:36:91:84:a3:b7:b7:3c:f1:88:7f:93:89:
                    c4:12:86:f6:7b:02:ae:aa:f3:ce:38:f1:d1:53:3f:
                    28:5f:e4:39:95:e9:4a:30:16:b5:84:00:37:b3:da:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C3:BB:59:03:26:04:0C:12:D9:69:42:36:FD:3F:96:F8:59:B6:33
            X509v3 Authority Key Identifier:
                keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:44:67:50:bd:17:84:da:20:0f:26:8f:07:2f:8b:37:7e:db:
         88:1e:de:fe:9b:d7:79:84:d3:ff:55:20:69:6d:17:74:e6:65:
         86:22:44:87:81:64:65:c3:52:91:3e:a1:18:59:c9:8f:28:ac:
         b6:61:c9:9c:e5:4b:3e:e2:bf:15:6b:ea:f4:0f:97:a1:59:d1:
         f5:23:8e:07:03:f1:d5:db:f3:2a:4c:a3:80:e0:7d:41:4f:b0:
         b2:b2:b4:76:dc:ee:d0:d4:cc:a7:cf:f9:d7:fb:0f:e2:2e:d8:
         68:70:0e:04:06:86:77:8e:e1:79:f2:47:47:70:5a:0b:82:70:
         cc:7c:fa:50:8f:15:78:af:f4:44:d4:14:92:53:36:d7:e4:72:
         96:39:e1:a8:bb:79:20:c7:ed:25:d6:9b:2b:dd:64:df:1a:23:
         42:4d:11:89:cf:ff:78:cc:e5:7d:72:b2:d2:65:04:51:77:0c:
         17:72:42:af:7b:77:a6:c7:46:cb:63:76:b9:28:1a:60:f0:a2:
         58:6e:b5:57:b2:62:e0:59:26:25:e4:57:b3:2b:be:a1:8f:2e:
         06:29:71:8f:6f:f2:ca:1f:d9:ea:74:63:0e:9e:a9:b7:37:79:
         7c:f9:8f:62:c9:a6:0b:31:14:29:93:0b:23:60:45:d3:d8:ef:
         03:7a:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:21 2026 by rpki-client