Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          UBqydWDQ5+BWmnOOFXU2pGFJykJyDTjaeykOYoKkOJw=
Subject key identifier:   02:51:74:91:87:D8:BA:E1:0B:29:DB:A8:24:4A:24:60:C9:69:A1:2C
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       019CE2FE36BC29D7039568C86D97FD5D498D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0DC4
Signing time:             Thu 12 Mar 2026 17:00:36 +0000
Manifest this update:     Thu 12 Mar 2026 17:00:36 +0000
Manifest next update:     Fri 13 Mar 2026 17:00:36 +0000
Files and hashes:         1: 5pnLPx_2hpy3VygTZwAGCHra7kE.roa (hash: 1oHSHq2YY2wBUKVcldVeO85+GN6kBhjSJ3cQgz8RWLo=)
                          2: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: PZJmtFQGf28HrpYlOMT8iRwj5g0PFTvB7jfrc272Ov0=)
                          3: KnbEX4UkCWaV7O0wuCkr7A4YupA.roa (hash: LLlXw5GN0fkhrRlbhrlywwISvztA4DkGKjffqRJI8NQ=)
                          4: ZlWEEzGYFVqbln14VFTl7vY0xlM.roa (hash: 4+sTiTIEM7Q8B0+aFICyPTm4dchReZ/Z4NBsp9md7hs=)
                          5: hARTp8Mibx8WODEuOIUHpvobncw.roa (hash: xaYjb6X7y2C4MO+aFX5sY8YM6es27SbRjICMp6w4VYw=)
                          6: yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa (hash: Yz2sZPO7RTS7G2x7CfUC5DUG1B3ygbMjzbaefkWF+54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:fe:36:bc:29:d7:03:95:68:c8:6d:97:fd:5d:49:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Mar 12 17:00:36 2026 GMT
            Not After : Mar 13 17:00:36 2026 GMT
        Subject: CN=0251749187d8bae10b29dba8244a2460c969a12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:54:73:3b:84:61:ae:5e:19:52:4a:4e:d0:
                    a8:ce:5c:25:96:79:31:e2:fc:e2:8c:08:d4:7d:77:
                    6b:bd:63:1f:75:71:f2:c3:23:f8:51:7c:55:f4:ac:
                    75:ea:43:18:a4:f1:6b:c9:19:ef:0b:b3:34:d7:9b:
                    39:65:87:50:ec:a5:c3:04:49:85:35:19:0c:45:1c:
                    39:7c:10:71:4f:7d:5d:c4:af:45:b7:4b:24:07:89:
                    8f:16:d4:b1:03:14:f8:cd:74:24:40:ee:e1:47:f7:
                    fd:67:63:7a:e6:b7:1d:12:e0:fd:54:71:af:a9:19:
                    af:59:b3:33:97:9f:a6:4b:b0:79:46:4b:36:3a:b3:
                    d2:c2:e7:3d:c2:37:4a:d6:a5:89:76:76:15:9f:d1:
                    91:37:38:46:85:49:6a:2d:07:a3:63:52:89:e4:18:
                    17:5e:9a:f7:20:32:b1:82:85:02:7a:b2:7d:cc:5d:
                    fc:54:b7:45:14:64:d7:60:1e:73:ac:64:04:ee:e2:
                    d5:97:8b:0e:d4:e2:de:82:58:7d:95:9b:e8:ac:ed:
                    10:c5:96:70:4c:e1:10:8f:81:31:4c:06:35:79:28:
                    89:d5:63:79:5b:4a:61:c2:22:59:a8:b2:43:3f:89:
                    7a:d6:a0:91:fb:6d:bc:d5:b9:75:55:c9:56:73:79:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:74:91:87:D8:BA:E1:0B:29:DB:A8:24:4A:24:60:C9:69:A1:2C
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:56:d8:28:77:ab:cf:fb:a0:bf:71:83:e5:57:36:99:a5:58:
         80:ad:b0:e6:e9:1c:bb:0d:37:b1:5e:47:62:55:ad:1e:4d:51:
         57:1d:d8:0f:7c:22:a5:c1:e4:0f:77:6e:13:b8:d2:c9:c2:4d:
         3f:93:fc:ae:33:ee:69:fe:bf:a6:c5:89:d2:03:f6:92:b7:d0:
         6f:d0:b6:68:35:3f:53:3b:ca:1f:e2:c1:df:29:96:fd:06:dd:
         fd:f7:a2:b6:c4:4d:d4:b3:cd:ab:68:47:7c:35:bc:7f:71:d7:
         44:b9:59:95:3f:ae:14:ae:fa:45:16:92:f9:53:a3:56:43:5b:
         c0:25:6e:48:5f:a8:7d:da:82:5d:c8:bb:61:33:e0:92:68:60:
         b6:e6:fd:69:5a:47:ee:53:1f:74:fe:1a:ca:7f:90:c6:2f:c8:
         f7:06:47:67:8e:95:64:12:e7:83:4a:55:1a:66:43:0b:65:1d:
         13:ed:21:88:04:dd:a3:ca:ba:c3:5d:50:dd:73:5d:f7:b6:f5:
         f8:a1:04:09:29:b4:95:30:99:fe:88:bd:f4:4a:ac:20:fd:1c:
         b9:32:8a:20:24:16:cb:e1:33:c6:02:be:c2:3a:cb:4f:99:40:
         0c:94:df:81:ff:2c:11:69:54:51:59:74:60:8f:7a:b4:10:22:
         80:ab:54:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:13:23 2026 by rpki-client