Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File:                     kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier:          7JGpn7LLpKgTK+dgTbZOt2G3hpuILRK3DHbQ/MNDdZM=
Subject key identifier:   67:4C:BC:D1:58:84:44:86:31:96:17:5C:37:45:29:7F:FB:77:00:0A
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer:       /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial:       019CC5D02462EF9CE2CE207AA43A1BB5C479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number:          1464
Signing time:             Sat 07 Mar 2026 01:01:18 +0000
Manifest this update:     Sat 07 Mar 2026 01:01:18 +0000
Manifest next update:     Sun 08 Mar 2026 01:01:18 +0000
Files and hashes:         1: ZLG2d-EvI3tDHtNjQT_sDlpWBXM.roa (hash: bTLO/he/cwtOoUf2Miq0EAEbluFDqTVodZfbg6upreQ=)
                          2: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: cbwBUtqY5BXvIbTdoiRW9GSsXRigsfAIby8E+YNefXU=)
                          3: n4P4Aw5EqVPbp0dHUGmlk-Fj3KQ.roa (hash: OBqZU1zM//7Ku6VXCPW57HKZVO1wfa+8Zttcrr4ee/o=)
                          4: t7Gq84nW0Oj9leZaX2X9wjhswgA.roa (hash: yr3zYXhfmgwWPLlesJ4m39gkLVl7WXaVbHMKkBty0Jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c5:d0:24:62:ef:9c:e2:ce:20:7a:a4:3a:1b:b5:c4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
        Validity
            Not Before: Mar  7 01:01:18 2026 GMT
            Not After : Mar  8 01:01:18 2026 GMT
        Subject: CN=674cbcd1588444863196175c3745297ffb77000a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:0f:0f:d8:19:af:82:95:fa:df:f3:33:59:
                    28:b2:1c:18:7a:80:07:5e:94:02:0a:b4:6a:ad:f8:
                    48:01:79:ce:58:66:f5:d0:16:73:36:26:53:16:f6:
                    99:a4:65:e3:b1:0e:e6:20:70:f3:46:51:14:0a:9d:
                    b0:a0:a5:2e:16:b2:1b:1e:3e:77:6a:ec:c2:0c:c8:
                    62:95:0b:40:d7:1f:6f:8b:0a:03:c9:f0:c5:b3:bc:
                    c5:15:22:9c:00:51:a6:06:99:dd:33:8a:00:57:70:
                    7f:4a:54:4f:77:aa:e1:46:a4:c2:85:70:c4:fd:2b:
                    7f:d0:1e:56:80:0a:ea:72:88:50:23:d4:83:c0:15:
                    8e:70:ec:94:81:6a:aa:c9:77:b7:d5:bc:d0:10:0a:
                    2e:f4:d1:4b:32:5f:03:be:93:57:91:b7:a6:47:f8:
                    dd:31:af:02:35:14:33:d1:9b:11:41:ad:de:4b:cd:
                    e0:26:e8:16:25:79:e1:0b:75:27:45:c6:04:a6:a1:
                    8a:60:d4:27:67:d3:26:d2:81:6f:e9:64:b0:83:fd:
                    8f:e1:c2:91:d5:3a:6f:20:c8:61:a1:c6:d9:63:62:
                    1e:2c:9b:ec:8b:1f:02:7d:1b:6b:ba:dd:87:04:91:
                    a6:d2:c3:a7:aa:e3:d5:08:b6:55:4f:48:d7:29:fe:
                    65:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4C:BC:D1:58:84:44:86:31:96:17:5C:37:45:29:7F:FB:77:00:0A
            X509v3 Authority Key Identifier:
                keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:51:93:a1:73:12:bc:9f:40:19:97:75:9b:08:f3:11:8e:58:
         5b:0c:dc:ea:ef:44:a1:b9:58:d0:be:f9:e9:63:cb:84:38:da:
         de:04:d9:47:89:4f:5f:38:75:c2:80:6a:36:e3:b1:04:87:92:
         5b:4f:01:3f:6f:64:fc:68:09:78:c4:78:ac:3e:21:37:4b:fd:
         6a:82:77:2c:21:79:77:90:d7:8b:b9:e0:ec:d4:44:9c:0f:bf:
         da:5e:19:22:d7:15:7d:a1:9e:7d:3e:ae:07:98:9e:75:e2:0e:
         18:2c:42:97:c9:4e:6e:99:14:d6:56:87:95:6d:f0:5d:ec:76:
         a8:80:72:0e:f2:f6:88:bd:c7:08:79:14:72:bf:a9:87:8a:2c:
         bf:46:5c:27:e4:fc:dc:5d:4a:1f:73:e7:bc:b0:8c:9a:50:a7:
         77:3b:8d:a3:0e:b3:b4:76:27:28:de:e1:9f:ea:73:d3:35:0a:
         56:3e:40:28:01:14:03:5c:e3:56:90:62:22:c3:11:e4:23:13:
         dd:e4:e2:1f:20:a3:7a:e5:a0:4d:08:1c:ff:cb:3d:02:21:ed:
         8b:07:c7:d9:ca:87:52:3d:37:42:89:92:2b:6e:4e:95:fa:a1:
         51:10:e4:32:58:73:cb:fc:57:36:dc:42:32:d1:90:d3:2f:9c:
         27:20:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 03:40:50 2026 by rpki-client