Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
File:                     kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft (raw, json)
Hash identifier:          FmAdzUWfpPPybvIEgKZ/C7oAiNLnijw9kB2leqptbYc=
Subject key identifier:   B2:AF:55:FF:E3:C4:48:68:4B:EA:51:31:FA:DC:B2:E3:D1:09:54:3B
Authority key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
Certificate issuer:       /CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Certificate serial:       019D371BF10768525CA475B3F80548D1D5E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
Manifest number:          0E12
Signing time:             Sun 29 Mar 2026 01:01:11 +0000
Manifest this update:     Sun 29 Mar 2026 01:01:11 +0000
Manifest next update:     Mon 30 Mar 2026 01:01:11 +0000
Files and hashes:         1: kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl (hash: qzV9isj9TicTRAfrgPUtPZEK66lnAAkKykgBIiosKVs=)
                          2: s2wrtw26HcQR9xnXMWe45AipPqc.roa (hash: Vc74Nvv0uDAfKd9FhmeLPRjfJus6hz1Ga8c46ysKrJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:f1:07:68:52:5c:a4:75:b3:f8:05:48:d1:d5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
        Validity
            Not Before: Mar 29 01:01:11 2026 GMT
            Not After : Mar 30 01:01:11 2026 GMT
        Subject: CN=b2af55ffe3c448684bea5131fadcb2e3d109543b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:8b:06:01:78:c9:7d:3c:40:16:4e:2a:a3:
                    e4:05:b2:35:20:cf:f8:2c:de:0e:19:17:05:a6:3a:
                    54:81:d5:5b:5d:99:7d:5c:07:7d:f7:90:61:b3:a6:
                    ae:c0:9d:74:bf:4b:5c:6e:46:9c:21:cd:e1:f8:02:
                    bc:f5:58:a7:de:ac:d4:9b:65:bb:df:dd:c2:23:6b:
                    18:bf:e0:19:d7:59:ef:1d:80:23:8c:97:02:4a:83:
                    f9:42:b2:10:ba:8e:ba:7a:00:27:29:fb:e7:1f:ab:
                    78:c5:5f:8e:10:76:3a:7d:b8:2a:02:9a:03:87:d4:
                    fe:62:49:19:15:3b:38:4f:cf:1d:78:4a:86:09:d5:
                    b4:68:73:b4:ad:2e:5c:31:ce:80:c0:e9:5f:7f:11:
                    a0:56:81:3a:11:4c:9a:f5:a9:74:ae:c9:cd:06:16:
                    3b:98:13:25:e1:cd:53:f7:ed:25:d3:25:26:a2:59:
                    0b:37:a9:f6:48:b6:8d:e1:3a:f9:c3:56:6b:bd:0a:
                    20:7e:de:0f:d9:9f:2d:89:71:49:b5:2a:c8:c6:5c:
                    47:a3:8d:ec:b1:0b:f7:e9:f3:01:29:c1:b8:61:ac:
                    9f:a4:cb:43:08:d3:4c:ae:ea:b6:bc:fa:c4:6b:74:
                    38:25:be:7e:49:cd:4c:9b:a5:ed:9b:ff:06:db:88:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AF:55:FF:E3:C4:48:68:4B:EA:51:31:FA:DC:B2:E3:D1:09:54:3B
            X509v3 Authority Key Identifier:
                keyid:92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:28:32:fa:04:75:f1:dc:49:2a:23:13:bc:06:0b:02:0f:e8:
         7a:6e:ac:6c:52:40:e0:31:4c:8c:bd:9e:5b:86:2e:f2:0b:48:
         e6:7a:15:43:1d:5b:cf:70:44:6b:1d:a6:f0:d8:42:09:ee:ae:
         77:09:a8:44:94:ca:84:fc:96:ed:ea:c7:92:cf:8a:4f:93:c8:
         ed:f4:ce:16:96:fa:fe:29:ae:78:28:f5:c6:af:d9:b8:03:1a:
         a2:28:f1:22:97:4a:03:ad:11:68:7a:73:5b:ca:f6:a5:5b:10:
         3b:32:77:19:94:91:1a:2f:31:63:45:cf:0a:36:45:30:96:f0:
         ea:58:ac:c7:9a:ca:1b:66:4f:bc:d5:58:39:ca:2d:c8:7b:7c:
         71:dd:ec:2a:17:5b:80:e7:f8:83:da:ae:60:13:33:aa:a1:a5:
         ef:83:8a:99:07:9f:b4:a9:93:04:b8:3d:1d:e8:0e:17:8a:0f:
         9d:60:17:fe:00:db:d4:8f:4f:c2:c5:07:0d:9b:0d:ed:41:b1:
         ba:dc:2e:70:35:d6:d9:ac:71:47:ec:be:be:06:7e:ab:78:81:
         30:eb:12:bb:88:ae:6f:8f:8a:76:cd:b1:71:bf:f5:83:14:09:
         cf:78:4f:2a:23:2e:b2:ca:16:30:6a:b0:20:90:eb:99:25:a1:
         e4:9c:0e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:58 2026 by rpki-client