Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          pEoSPxWo8+Y2Z0YIgF/dfY3EC923mWUSEyKDwhLI2mM=
Subject key identifier:   C5:67:DD:5F:D8:C6:B4:9F:E1:E3:0E:FA:07:DC:C9:3D:8D:B0:76:8F
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       019D6160F26D0898FFA244C72A24EEAA22B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0D25
Signing time:             Mon 06 Apr 2026 06:00:36 +0000
Manifest this update:     Mon 06 Apr 2026 06:00:36 +0000
Manifest next update:     Tue 07 Apr 2026 06:00:36 +0000
Files and hashes:         1: aIl3Llcq813igkMcWrFjAIoXctc.roa (hash: KXGJiHVjrQ4DWQ0BvplY8WPWzX9Lt/mBu9x8K9sjzPM=)
                          2: edX9nFPaRBypEhTRy4XBDhniddw.roa (hash: 5MhUOWbCadwewjcrQ5b6tmz4prZMcahfCM2cAS/s/R4=)
                          3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: ITkTHZtWGGfQktUikyGEWVLx0hL8z9hAh57s9BnQTOQ=)
                          4: pqVBy_JjEYGo9euG10lbD9kfoPc.roa (hash: RPXgn9O4fhCi6PomLx2N6apcSA2xga46Z6S9gI5YVpU=)
                          5: vYxJpv5POvG_3gvqhMqXcCuX_hM.roa (hash: wpDWTjfQBDPG5OjIvThUgTmIIfXP/UypeEU6fjlCrZU=)
                          6: yEbtzhh5wc4rY7MHu27W_dwYhu8.roa (hash: h2s6dV+bwm8ecYVBUiiK45LeIcpS1pxSfpxppjXQ+aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Apr 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:61:60:f2:6d:08:98:ff:a2:44:c7:2a:24:ee:aa:22:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Apr  6 06:00:36 2026 GMT
            Not After : Apr  7 06:00:36 2026 GMT
        Subject: CN=c567dd5fd8c6b49fe1e30efa07dcc93d8db0768f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2e:0d:65:24:3e:0a:5f:66:3e:7f:05:0f:2e:
                    7e:34:99:5e:08:a9:1f:19:55:32:ae:da:7a:4b:22:
                    e8:61:5e:02:6c:be:51:41:b8:e4:f4:4c:39:29:af:
                    a4:a1:ba:c4:9c:b9:5a:99:42:a5:ae:03:27:9b:33:
                    f8:d2:0f:40:18:2e:f7:bc:e4:8a:b2:ed:a0:29:0a:
                    9d:10:c6:fb:b4:21:68:96:fc:3e:e3:39:e8:97:8b:
                    e4:72:ef:fd:04:f4:67:16:a1:ad:cf:cd:f6:9e:ae:
                    f3:62:65:29:9e:4b:ad:c9:77:71:04:5e:1b:23:6d:
                    14:27:e1:7c:2c:83:8c:e3:d2:93:66:59:17:c4:95:
                    46:d0:19:e8:a0:a4:1f:29:99:6c:05:85:52:df:a3:
                    d2:d3:fa:7c:5a:b5:33:5d:ba:51:8e:86:3d:2c:65:
                    66:72:c3:64:6c:0d:05:d3:0f:cc:76:06:47:97:8f:
                    10:32:e1:0f:40:76:8c:09:4b:4b:98:87:38:57:46:
                    65:e9:0e:cd:50:2e:ed:58:4f:15:1c:67:18:5d:3e:
                    52:1d:a0:c6:2f:48:cf:53:65:ff:4c:1b:a3:73:d7:
                    9e:79:cf:26:03:be:24:1e:1e:34:20:7b:06:98:cc:
                    a5:e1:a8:e0:95:b2:f0:50:40:00:dc:50:da:f9:8f:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:67:DD:5F:D8:C6:B4:9F:E1:E3:0E:FA:07:DC:C9:3D:8D:B0:76:8F
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b4:85:5d:03:86:ab:36:b5:b7:57:87:c9:39:3d:dd:a6:83:
         32:17:d6:10:61:3a:88:c5:af:70:5f:5d:b9:42:38:a3:90:b0:
         0b:4d:bf:fa:25:17:3e:5d:c3:ef:37:ff:ca:94:00:6d:c2:a9:
         25:59:65:5a:80:d1:a7:cc:80:0e:67:e3:78:ac:f3:13:29:34:
         1c:6d:09:e8:a5:5c:f1:25:14:a7:34:e0:b6:b5:61:12:8e:9d:
         3b:89:3f:72:4b:7d:18:8b:8f:71:51:89:2e:62:9c:55:9d:b1:
         39:34:77:23:9e:60:d7:39:c1:5d:1c:50:aa:33:a8:f8:3d:10:
         48:7e:e7:a2:83:cb:31:b2:b1:c3:0d:df:ce:8d:3b:55:e8:4c:
         c2:1e:fe:b4:fb:14:ec:9f:67:cd:65:d2:19:ad:d2:95:82:b8:
         49:22:79:72:bc:0b:4d:51:eb:bd:69:c3:43:d0:e3:73:47:07:
         be:8d:43:d7:0f:a4:79:72:7b:e9:85:8d:ea:4e:59:cc:ec:9b:
         2f:a7:a2:45:bf:54:fb:99:0b:1e:10:70:44:c1:19:a5:fa:6f:
         04:f5:94:c5:2e:20:5e:65:9e:1f:ff:39:a4:83:a4:b1:26:49:
         27:06:59:19:5d:59:67:12:9b:bb:cb:98:a2:e2:53:8a:33:a5:
         23:47:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:30:52 2026 by rpki-client