Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          6WgrtZkVowPezRJcO1d1WcSPNWXN60xx8ujpsffUS20=
Subject key identifier:   C2:FE:96:04:70:AC:D2:6F:F5:FA:A3:49:EF:BD:CA:78:E4:E0:BD:D7
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       019E604C467783D6E7AED2DB020F201877AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0DA9
Signing time:             Mon 25 May 2026 18:01:11 +0000
Manifest this update:     Mon 25 May 2026 18:01:11 +0000
Manifest next update:     Tue 26 May 2026 18:01:11 +0000
Files and hashes:         1: aIl3Llcq813igkMcWrFjAIoXctc.roa (hash: KXGJiHVjrQ4DWQ0BvplY8WPWzX9Lt/mBu9x8K9sjzPM=)
                          2: edX9nFPaRBypEhTRy4XBDhniddw.roa (hash: 5MhUOWbCadwewjcrQ5b6tmz4prZMcahfCM2cAS/s/R4=)
                          3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: 4DXSJVJKWYKCTAAmHkTfzKfw1nvWmj4yN3koLXPcryY=)
                          4: pqVBy_JjEYGo9euG10lbD9kfoPc.roa (hash: RPXgn9O4fhCi6PomLx2N6apcSA2xga46Z6S9gI5YVpU=)
                          5: vYxJpv5POvG_3gvqhMqXcCuX_hM.roa (hash: wpDWTjfQBDPG5OjIvThUgTmIIfXP/UypeEU6fjlCrZU=)
                          6: yEbtzhh5wc4rY7MHu27W_dwYhu8.roa (hash: h2s6dV+bwm8ecYVBUiiK45LeIcpS1pxSfpxppjXQ+aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:60:4c:46:77:83:d6:e7:ae:d2:db:02:0f:20:18:77:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: May 25 18:01:11 2026 GMT
            Not After : May 26 18:01:11 2026 GMT
        Subject: CN=c2fe960470acd26ff5faa349efbdca78e4e0bdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:78:92:d4:34:67:24:5d:55:ed:79:49:35:
                    b6:31:11:5a:45:5a:4a:df:5e:0c:f8:71:d4:55:d4:
                    4e:e6:ca:19:6c:06:f6:52:25:09:b5:a2:ed:33:a1:
                    32:03:a6:c7:14:d8:9a:ad:a2:f4:a6:b2:c6:f2:81:
                    d9:7f:42:5c:38:ca:83:0c:54:67:62:9f:11:09:de:
                    5c:ae:4a:e4:fc:5d:c2:a6:ba:72:5c:03:56:96:3b:
                    c5:41:32:57:55:f9:1f:4d:d5:6f:b2:17:1a:75:81:
                    fb:fb:65:c5:4b:38:7e:1c:c0:d4:bf:95:5b:26:35:
                    5f:53:d1:dc:57:b3:2c:3b:fe:bb:e8:ad:e9:1c:50:
                    a8:52:6e:06:f3:88:11:7d:32:63:69:ed:9f:bc:c5:
                    62:c2:b3:6a:3a:4d:b9:fe:43:69:f1:8b:74:b3:cc:
                    4a:82:bf:1d:d5:36:14:c6:1c:ad:e8:f7:78:3d:da:
                    b8:fa:6c:e4:a4:5a:b2:ab:d3:2a:a8:dc:76:d4:08:
                    3c:06:d2:e6:75:82:5b:88:bc:92:c2:9e:3e:13:54:
                    89:91:09:df:dd:8d:65:e0:22:9f:04:c6:07:69:2e:
                    1f:6f:d4:2b:66:18:27:9e:b3:3f:19:68:06:11:d1:
                    11:ba:df:92:65:6c:fa:21:53:73:b9:36:62:23:df:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:96:04:70:AC:D2:6F:F5:FA:A3:49:EF:BD:CA:78:E4:E0:BD:D7
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d2:66:bc:46:42:a2:ab:7b:95:14:69:92:0b:05:90:1f:02:
         bd:57:b2:23:b9:c8:c9:f8:4c:a4:51:38:86:4b:40:49:3e:e9:
         64:96:b5:62:f0:63:94:67:4d:bc:dd:fc:a0:e6:83:49:0f:d1:
         69:2f:30:c0:38:d3:8c:84:a2:ec:6a:63:f8:62:ce:2a:65:70:
         05:f5:80:99:63:90:b8:29:32:68:12:24:f3:d5:98:66:7c:d7:
         15:1f:d2:01:5c:c2:71:32:f4:0f:92:5a:2f:8d:89:17:57:95:
         7f:08:17:9b:d0:06:c6:31:9e:1b:48:a4:20:c5:2a:69:f5:4d:
         25:39:0a:f5:e7:96:b1:d5:0e:e6:f7:75:1b:f7:28:d1:c7:b2:
         13:d8:62:ae:87:db:8b:f5:d0:ae:32:5e:f1:5c:6b:e7:75:8e:
         82:2e:36:cc:42:83:0a:e2:b5:c7:82:4d:4b:b4:ab:b0:3c:43:
         83:be:c2:d0:83:b4:c5:12:fe:d0:e6:cb:5b:2e:cf:20:2f:07:
         e0:26:76:eb:57:83:de:a7:cf:26:93:12:dd:56:dc:91:5d:92:
         9f:53:26:a4:4e:d8:fa:01:e2:4c:8f:7f:09:79:45:0c:c4:00:
         e2:73:d6:65:56:31:9b:8b:f4:fe:ce:92:d7:f3:e1:8d:bd:45:
         ac:39:76:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 04:49:14 2026 by rpki-client