Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File:                     K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier:          2TnWoGuHmI5ZbqQkHlxEWA+WB4TuJT7LM49UrVcJB9w=
Subject key identifier:   58:E9:80:64:E7:09:1F:E9:8C:95:51:47:35:C4:5F:F1:53:6C:32:C4
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer:       /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial:       019CE7493B0F22006FAA42C311D048D61377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number:          186B
Signing time:             Fri 13 Mar 2026 13:01:01 +0000
Manifest this update:     Fri 13 Mar 2026 13:01:01 +0000
Manifest next update:     Sat 14 Mar 2026 13:01:01 +0000
Files and hashes:         1: 5seVusnKx_Ys9lX6helV3VYtD2U.roa (hash: PZFyRFcdx9T5Z2TzIZsPirDrvtRVVFWfye1bbVqWbBc=)
                          2: 9btJARByxb1iHyonPUVBkRTOsVo.roa (hash: OoaKNkwSuE9swZGc5WUnPf4K5AgnLBPyAFCvevkhF9U=)
                          3: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: vrmLtLTKT9A5GBzlRXBN0vYTdt6y0WA1Q118Lk7eEPk=)
                          4: XWrsnRZ3w0e0DoMnOjNkuaIXctc.roa (hash: hKOZKXZd+O54dyQoUT1ViJz0QYsGp84f/gyggnOHiyY=)
                          5: _VixDRlDHcr6PrncvZUZ-GW6afw.roa (hash: XqMR9xWk1nvAk22Z7sQHJKRu3wfO9rwjwEWrKeLB+8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:49:3b:0f:22:00:6f:aa:42:c3:11:d0:48:d6:13:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
        Validity
            Not Before: Mar 13 13:01:01 2026 GMT
            Not After : Mar 14 13:01:01 2026 GMT
        Subject: CN=58e98064e7091fe98c95514735c45ff1536c32c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:49:59:da:a0:b6:ec:56:13:fc:ef:e3:3a:
                    43:eb:2f:ed:6e:dc:da:2b:09:d7:f2:f6:0f:fb:91:
                    91:f2:14:f3:9e:56:70:f4:a5:29:f6:79:f2:71:bb:
                    fe:c9:60:44:46:8c:3a:72:69:46:52:a9:5e:a2:e2:
                    7f:d1:2c:27:f4:45:6b:5c:58:c2:ff:79:e8:e4:ff:
                    03:28:28:13:93:e2:d3:34:d7:a3:f5:1e:49:41:e9:
                    38:42:cb:af:0d:c9:b8:94:04:55:7e:b8:56:a3:ec:
                    f6:e7:0f:8b:83:b5:dd:64:c1:97:0a:53:bb:65:94:
                    a0:20:cf:8e:1e:9c:90:9f:37:e4:79:53:fc:16:26:
                    13:1d:cd:e9:7d:0f:82:6d:f1:93:5c:b0:a7:a5:7b:
                    c1:fb:1d:78:8b:6d:a7:e7:37:e7:96:e2:40:61:3b:
                    32:cd:d5:39:7b:04:fe:f7:8e:de:27:a0:12:46:81:
                    58:92:9a:19:ff:0b:8d:43:cb:50:9f:47:ab:3a:45:
                    8b:77:3d:0b:e6:30:de:44:37:92:fa:f1:5b:8c:b1:
                    6c:62:1c:4f:77:e5:3f:a2:b2:63:90:0b:22:52:d8:
                    1f:ae:e9:24:71:0b:5f:71:3d:43:d2:9e:1a:7c:ef:
                    b9:6a:a6:ad:17:9b:62:1e:d6:eb:74:07:96:38:9f:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E9:80:64:E7:09:1F:E9:8C:95:51:47:35:C4:5F:F1:53:6C:32:C4
            X509v3 Authority Key Identifier:
                keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:54:5e:22:6e:f8:48:9b:a5:a5:3f:58:42:92:29:0f:6f:6c:
         1d:c3:02:c4:07:10:ab:8a:f1:72:f1:40:32:66:ee:21:30:2d:
         80:43:86:a5:78:8f:c3:5f:a1:7c:b8:8b:97:26:72:e0:cb:68:
         20:67:c9:34:73:c2:18:bf:c7:91:56:f8:1f:ee:ef:c3:07:3f:
         4e:95:d7:44:0d:ad:43:c3:69:8c:f0:51:89:61:56:52:fe:1b:
         b0:21:d8:7f:b1:09:ce:a6:3e:39:38:91:1d:25:da:e9:92:ad:
         e3:bd:5c:8f:b4:8b:96:2d:43:19:1b:8c:a0:d6:0b:11:16:0f:
         bd:c1:93:05:26:66:4b:67:f4:3b:d2:19:84:49:b8:09:2a:6e:
         b2:3a:5b:9f:27:78:85:27:df:74:bc:04:85:90:ed:22:4e:49:
         9d:94:1e:98:28:85:dc:1d:c8:43:f2:8d:05:54:20:bb:c8:e7:
         e1:29:cf:e3:b3:ac:c5:10:4e:be:98:78:ea:9e:51:f8:3a:31:
         f8:2c:0c:82:50:f6:0f:95:24:42:66:6e:0b:2b:bb:ca:a8:ee:
         2c:28:44:3f:d1:92:78:07:18:dc:0d:d0:e1:d7:72:c5:4f:bf:
         a4:ba:70:90:28:24:b5:19:65:a8:f0:5e:97:16:d7:b2:a1:5b:
         22:82:ef:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:55:53 2026 by rpki-client