Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          E8y81cLVB9n3mrqGxkUlfMDy/RqqOJ5h4Btof4a7Nws=
Subject key identifier:   91:A4:0B:A5:49:88:3B:90:08:8D:C8:FF:E4:1C:7E:55:C9:18:29:5C
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       019E02F4F8E25CDAADD23C08366D0E203C3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          1477
Signing time:             Thu 07 May 2026 15:01:09 +0000
Manifest this update:     Thu 07 May 2026 15:01:09 +0000
Manifest next update:     Fri 08 May 2026 15:01:09 +0000
Files and hashes:         1: EDNpAts-6JeGE5wjiUM5BMSnB9k.roa (hash: URMxngJbXriRE2iOut0YpTm56ViTEGhL3sKLZKHuyJ0=)
                          2: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: 2IJcPLuPbREOP5xyoWANEounfvi7BdVgFVjpTRLaxK8=)
                          3: Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa (hash: DDYkbbLPOZouFDJgBa+WHylISlZR4ujlVO/1zXw9mng=)
                          4: UBjaQjSsvCaMWIObSymTDrfellU.roa (hash: FakZBVr4LoPzsh/Z6oDhedet2QWrNOrHB6+ZNqqvw9I=)
                          5: g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa (hash: YP1AJ0q+zSM445DjhCgE/dmdRBL7ryjwtDbdKhvu3Rg=)
                          6: sAk06Tsd-_YR9NQduC3T-piAvWk.roa (hash: xw7/19cXkRCZDOVeEPf+Eoup5YiNyQhWAOUhvYY+IJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 14:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:02:f4:f8:e2:5c:da:ad:d2:3c:08:36:6d:0e:20:3c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: May  7 15:01:09 2026 GMT
            Not After : May  8 15:01:09 2026 GMT
        Subject: CN=91a40ba549883b90088dc8ffe41c7e55c918295c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:81:83:3e:90:06:1a:87:29:86:18:5a:f6:
                    12:d2:90:2f:75:57:6c:a6:97:b8:98:26:61:05:88:
                    3c:c1:27:ca:fb:ea:cd:90:9a:9b:3c:d2:17:f2:08:
                    04:b8:d5:3a:2d:1c:9e:e3:eb:62:be:37:d1:cb:94:
                    ac:c2:51:e1:9f:92:1f:10:f8:40:7e:ab:96:ae:29:
                    b4:3e:a1:04:0f:23:37:58:13:81:f3:1f:5d:86:e6:
                    c4:b4:de:c3:2b:35:14:e2:73:71:a8:2c:3b:b4:80:
                    b8:25:8e:70:97:b2:56:cb:82:53:2b:aa:59:ab:14:
                    e6:e6:62:97:5a:c4:ae:7a:15:84:cf:28:69:76:fd:
                    40:12:65:bd:bf:6c:da:fa:04:fe:b9:77:2a:b7:d0:
                    5b:be:f0:9f:25:10:76:a2:53:75:71:16:53:7d:5c:
                    c0:ad:fe:76:62:c6:a9:86:c9:df:2a:1b:fc:0b:68:
                    5a:79:b9:c1:c7:19:34:d8:48:fd:d5:43:29:29:8a:
                    4f:13:f1:72:0d:01:3d:c6:d8:f0:c3:5a:9b:c6:8e:
                    fd:75:dd:6d:3a:c1:67:70:1d:01:29:a3:9a:fc:35:
                    1d:74:19:5e:9b:88:88:50:4b:7a:68:1f:27:7c:0b:
                    ea:32:f7:69:7d:ff:80:59:61:a8:91:28:2e:ed:df:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A4:0B:A5:49:88:3B:90:08:8D:C8:FF:E4:1C:7E:55:C9:18:29:5C
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f0:9f:c1:1a:93:a3:57:a7:bd:47:c5:35:84:16:40:12:a2:
         2a:82:b6:f1:6d:23:85:ff:8d:29:1d:45:57:83:ce:1b:30:69:
         bd:74:fb:43:78:98:e3:35:2b:d5:ec:44:da:fc:32:ac:ed:6c:
         c3:30:08:fc:cb:16:58:0d:dc:3d:94:31:9e:78:52:90:7b:2f:
         72:d5:b9:45:85:75:b6:af:47:4a:22:34:b1:d5:02:11:52:21:
         8f:01:3d:28:a7:4f:6e:f8:e6:cf:6a:76:53:a7:41:58:16:bd:
         18:d1:6c:c0:dd:a4:65:a7:70:9f:a7:06:ab:a4:3b:8e:86:68:
         ce:05:9a:57:cc:ca:8e:85:1c:bb:b5:8f:e6:93:6a:49:14:e8:
         56:b0:e2:1d:e5:bf:1c:f6:a2:53:69:c1:40:84:aa:7c:05:22:
         06:af:34:04:eb:41:b7:73:a2:ae:d0:bd:fb:67:52:4e:9a:17:
         a6:11:aa:0d:18:fe:a1:f1:2d:48:49:68:5f:ec:6e:82:9c:28:
         f5:43:67:91:e8:9a:d9:df:31:97:95:3a:5f:b2:2c:61:b5:3d:
         34:83:1c:3c:69:c7:bb:59:55:48:ad:b9:4d:20:20:03:4c:e0:
         c5:d7:1b:29:fb:2b:75:a3:50:91:5a:99:7e:06:25:37:1d:16:
         5b:72:e0:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4C9PjiXNqt0jwINm0OIDw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2
Y2Y3NjgwHhcNMjYwNTA3MTUwMTA5WhcNMjYwNTA4MTUwMTA5WjAzMTEwLwYDVQQD
Eyg5MWE0MGJhNTQ5ODgzYjkwMDg4ZGM4ZmZlNDFjN2U1NWM5MTgyOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSaBgz6QBhqHKYYYWvYS0pAvdVds
ppe4mCZhBYg8wSfK++rNkJqbPNIX8ggEuNU6LRye4+tivjfRy5SswlHhn5IfEPhA
fquWrim0PqEEDyM3WBOB8x9dhubEtN7DKzUU4nNxqCw7tIC4JY5wl7JWy4JTK6pZ
qxTm5mKXWsSuehWEzyhpdv1AEmW9v2za+gT+uXcqt9BbvvCfJRB2olN1cRZTfVzA
rf52YsaphsnfKhv8C2haebnBxxk02Ej91UMpKYpPE/FyDQE9xtjww1qbxo79dd1t
OsFncB0BKaOa/DUddBlem4iIUEt6aB8nfAvqMvdpff+AWWGokSgu7d86RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGkC6VJiDuQCI3I/+QcflXJGClcMB8GA1UdIwQY
MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt
MWU4NDIxMThkYjZmLzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm
LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvCfwRqT
o1envUfFNYQWQBKiKoK28W0jhf+NKR1FV4POGzBpvXT7Q3iY4zUr1exE2vwyrO1s
wzAI/MsWWA3cPZQxnnhSkHsvctW5RYV1tq9HSiI0sdUCEVIhjwE9KKdPbvjmz2p2
U6dBWBa9GNFswN2kZadwn6cGq6Q7joZozgWaV8zKjoUcu7WP5pNqSRToVrDiHeW/
HPaiU2nBQISqfAUiBq80BOtBt3OirtC9+2dSTpoXphGqDRj+ofEtSEloX+xugpwo
9UNnkeia2d8xl5U6X7IsYbU9NIMcPGnHu1lVSK25TSAgA0zgxdcbKfsrdaNQkVqZ
fgYlNx0WW3LgmQ==
-----END CERTIFICATE-----
Generated at Thu May 7 20:44:37 2026 by rpki-client