Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File:                     KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier:          lbn+e8KQKJcIiTuAFBBco/r6a/CDUgaDrvwWI8v4LRc=
Subject key identifier:   E9:AA:58:F4:09:5F:DE:ED:0B:5F:80:FE:1D:B7:89:F9:56:17:39:2B
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer:       /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial:       019DCD874431CC18683AC3E9B14D77795253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number:          0DC3
Signing time:             Mon 27 Apr 2026 06:01:27 +0000
Manifest this update:     Mon 27 Apr 2026 06:01:27 +0000
Manifest next update:     Tue 28 Apr 2026 06:01:27 +0000
Files and hashes:         1: 2E-MME-lm4K0uyBTuIg5ZM5-8I8.roa (hash: JzkT3L/H7HMV5VqAPBU8OB3GqfswpWq+Tu8hcXApBv8=)
                          2: 5ELvi2prTaHlQQw-aKR9uMwtFA8.roa (hash: 8uiks0UyE3YVuRlbo43yM8bQQXEWa2U0fKuakGVSNAU=)
                          3: D7_QPk2qAFTVuCWwAG0izANeaRc.roa (hash: n5F0AgHZRQ1JYqQ0higj9UJBRqSdojfEHkwWOchuMIU=)
                          4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: n4cSV7MffL35fK5urB4KB9iV8l4aE5o0wNXt77dz2vg=)
                          5: PV9nn29yp2PBBJ08DH1Hzy77tzk.roa (hash: W2PgmiS8Op18Md9+/XFq6wqhLS1g6P/+ZLsWwjKbTR0=)
                          6: RB0GL9giB0u7zxwi4U8zR08ihPw.roa (hash: Szh3L0AtY1SzUtQRUTJ6CEK6mqyoxGEDQuesq2qnd/s=)
                          7: YzFna3l-BC64_Hy9sCXon1GnhcY.roa (hash: mHlEQsM8xLD+TBDwkEVeJd4jeKLg08Jp/4wsw9FdVUw=)
                          8: _6a-RWXCtiM85tk-pFSkSlcUUfI.roa (hash: B/tQnvdBFH+M+nv+Nk2B9RYqRSdNR6S1bMjLWiTjAJY=)
                          9: tKg8bmmm6waKS3dVDFR2D0N_Kp0.roa (hash: NxiPLV70KM3UlDzotgKT8px4zwsMhil8u+4mX6+fcsM=)
                          10: xqE2x6TB4ktJqDhDRIstav0I34M.roa (hash: a5jdOMPc2+BN/CePheTtmvryp7+c0nQR8BLYlcgEO6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:87:44:31:cc:18:68:3a:c3:e9:b1:4d:77:79:52:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
        Validity
            Not Before: Apr 27 06:01:27 2026 GMT
            Not After : Apr 28 06:01:27 2026 GMT
        Subject: CN=e9aa58f4095fdeed0b5f80fe1db789f95617392b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:68:7c:1b:2e:94:43:c8:af:b5:a1:e1:34:
                    33:8a:65:da:c7:9b:59:63:fd:28:fc:fc:53:8a:b3:
                    30:46:da:be:78:49:64:a0:41:ac:76:9a:6c:2f:c6:
                    1c:4f:3e:e0:81:8e:6f:92:20:ac:62:2c:2a:48:dc:
                    7b:7a:0f:80:69:9a:13:87:01:7b:70:9f:74:97:23:
                    43:62:c9:2c:76:1d:53:57:63:1a:21:84:bd:70:19:
                    b5:de:c4:e7:a6:1d:8c:0e:25:41:53:14:15:12:d7:
                    ef:75:db:c8:7e:e9:45:9e:c1:23:8e:5c:9e:b7:e8:
                    08:84:23:78:b8:d6:cc:35:7e:9c:73:4b:bc:53:7b:
                    6d:e3:2c:a0:af:26:ff:6e:31:46:25:46:7f:7a:7f:
                    92:6b:4e:c6:32:a1:e6:40:9a:d1:53:bc:0a:b6:0d:
                    4c:90:a9:af:f6:25:4b:83:35:cd:a4:16:30:c8:3a:
                    a6:88:00:09:ba:40:0a:a3:c2:a3:d7:f4:5e:0f:4e:
                    b4:d9:0e:d6:0c:60:63:3f:29:d3:79:15:57:38:04:
                    24:22:a3:f2:67:5b:1d:71:d0:34:bc:dc:60:dd:58:
                    65:36:93:30:cb:6c:08:79:c5:92:bc:3b:9c:40:4f:
                    93:79:9e:8a:a0:5b:d2:fa:bf:22:76:b5:d2:1a:6a:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AA:58:F4:09:5F:DE:ED:0B:5F:80:FE:1D:B7:89:F9:56:17:39:2B
            X509v3 Authority Key Identifier:
                keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e3:dd:5d:d4:2e:f9:e0:1e:ac:2b:c5:c9:c3:9f:7b:ca:88:
         2b:c7:a4:c6:ba:8d:77:8b:07:1a:bb:a8:cf:e5:bf:1e:bb:0f:
         b0:b7:24:63:06:92:2a:22:fb:d3:a0:1d:0f:57:f7:42:d4:d1:
         3d:fb:50:0b:fc:d1:a0:31:23:59:61:84:7e:bc:77:9e:ea:83:
         a4:59:16:be:e0:a2:38:b4:6f:cf:ea:b0:d7:a4:77:3d:28:ba:
         d6:39:06:cb:12:6a:94:6c:d3:30:3a:2e:78:86:7a:20:76:fc:
         6f:98:36:23:6f:30:f1:d1:e9:2d:53:fc:35:5f:7e:38:a5:d9:
         bb:4b:46:df:69:ca:c8:ea:3d:fe:c0:3b:d1:d8:75:a6:77:30:
         99:5e:19:61:78:f2:ba:f4:1a:19:73:72:7b:78:3a:e0:4a:68:
         38:88:73:ca:89:c1:90:94:da:1c:64:15:e0:c7:55:5b:3d:dc:
         4b:9c:65:38:09:f7:a4:16:bd:23:8f:a8:41:87:fd:d5:a2:09:
         7f:d7:89:d5:90:d9:b8:9d:40:ec:e8:66:8c:9f:88:5c:f4:e3:
         36:7e:55:e8:1a:cf:d0:c8:25:93:f7:9a:02:7f:6f:55:e5:36:
         62:ef:58:01:f5:de:25:a0:0a:53:3a:5e:ab:40:b0:2a:62:70:
         35:a3:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:57:20 2026 by rpki-client