Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File:                     KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier:          n5C8eUhVYIzw8lMRJEyrsm7Bq7bStqllcB8VOASrH2A=
Subject key identifier:   A5:5F:3A:51:C5:C1:C5:EF:96:E4:17:6F:FF:3F:3D:69:56:D9:50:39
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer:       /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial:       019D37F6FF58438861124F2BF687374EC5FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number:          0759
Signing time:             Sun 29 Mar 2026 05:00:27 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:27 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:27 +0000
Files and hashes:         1: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: FmYTWTeRutWe+jEYN0TPiET2HNkDilUU5IETBmyAji0=)
                          2: tiNn6V7lQJwEPwSpBpmzpIlCOkk.roa (hash: PLDBgRQOKr/iKYlhIFX9U/GkSjb6UcvWrO34uaV/xLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:ff:58:43:88:61:12:4f:2b:f6:87:37:4e:c5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
        Validity
            Not Before: Mar 29 05:00:27 2026 GMT
            Not After : Mar 30 05:00:27 2026 GMT
        Subject: CN=a55f3a51c5c1c5ef96e4176fff3f3d6956d95039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:03:16:e8:cd:d0:51:e3:df:2c:4b:f7:30:
                    44:7d:2f:f8:e0:73:79:58:ed:c0:93:c4:08:d8:47:
                    96:fa:4a:bb:3c:54:df:41:34:bc:b9:b7:de:5c:de:
                    21:b2:29:f8:cd:62:72:74:39:ec:68:ab:04:b7:16:
                    81:8d:fa:36:cf:bd:fd:c4:2f:0e:44:00:7c:fd:5e:
                    b6:d8:ce:91:e1:10:75:85:2f:58:c9:3b:bf:34:db:
                    d4:44:d9:8a:d7:ec:b9:8b:d3:5d:26:d6:ac:b3:4d:
                    d7:5c:e2:8b:64:90:bf:66:46:94:be:3b:72:d8:86:
                    56:dd:b7:21:84:d5:8e:9f:71:e7:ab:4b:57:d0:1b:
                    d2:e6:08:41:ce:68:eb:d5:62:c2:81:20:cb:b4:60:
                    2c:87:aa:f8:db:ce:df:d3:88:7e:83:1f:c2:86:2a:
                    d1:d6:d7:9e:87:88:5c:ee:cd:9b:00:9b:0d:78:f3:
                    97:3e:e0:e2:6d:c7:97:03:c2:e9:af:0b:3d:da:7c:
                    c2:11:81:1e:ca:bf:45:93:58:09:56:85:27:84:ab:
                    16:03:a0:5a:16:06:d0:a0:f2:21:bb:a2:40:db:61:
                    ab:61:d1:28:8d:b1:34:0a:a6:ef:6d:84:94:cb:da:
                    64:e1:20:6f:68:0b:f4:ff:05:7c:08:67:c6:b5:3a:
                    02:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5F:3A:51:C5:C1:C5:EF:96:E4:17:6F:FF:3F:3D:69:56:D9:50:39
            X509v3 Authority Key Identifier:
                keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fa:c8:36:de:15:e5:d7:d1:43:8f:a7:52:ca:fb:4b:80:10:
         88:39:55:ac:72:0a:ec:06:71:13:fc:d3:64:bd:94:dc:c4:7d:
         8a:45:2f:f7:8f:1b:33:45:16:73:a9:56:b8:42:3a:62:aa:ae:
         92:4a:9d:f8:3e:4b:35:c8:2b:60:6d:9a:08:cf:4f:64:12:bf:
         47:7d:ab:37:1b:e5:d5:c0:b8:b7:7e:b6:c0:ef:31:9f:73:9f:
         36:33:2b:1f:18:db:f7:b9:4c:c8:74:58:3c:ca:7d:8a:72:21:
         05:db:20:ce:b2:8d:b3:3f:f7:8f:9b:70:eb:f7:48:8d:fe:fe:
         ea:57:ed:a2:aa:7d:18:37:00:35:71:ca:ee:4f:bb:14:ac:1c:
         52:b9:eb:47:9d:8d:76:c3:0b:fa:b8:7d:b0:a0:10:82:65:cd:
         7b:13:df:84:55:b6:59:e9:ed:ce:af:f6:2b:50:d7:e9:fb:82:
         66:9e:f2:be:34:b8:c9:86:97:91:19:1e:94:41:3b:7b:2e:41:
         3f:f5:c0:76:b7:b9:78:7d:de:89:ce:ba:38:3b:5c:66:40:d8:
         72:0c:7e:ea:94:4c:5d:5d:ce:d3:5a:0b:54:1f:27:0a:47:95:
         8b:bd:6e:1e:63:5b:fb:5c:41:a2:58:cb:14:c0:1e:30:87:3f:
         68:1a:09:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client