Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
File:                     KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json)
Hash identifier:          SSGcDNTfc0S3Slv6wroZZFKsHYruS7np+R0Yq38dNMI=
Subject key identifier:   E4:98:09:96:CF:FD:EC:DB:A7:18:14:8A:C5:1D:E4:5B:1E:4A:99:F2
Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
Certificate issuer:       /CN=29184647248b55523999cbb7fe5b20a99fe73be3
Certificate serial:       019D37C046240AAD6B6DF9FBF14522D0CA3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 04:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:40 +0000
Files and hashes:         1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: +8fMPa2dNeCwBc/lRbcifGg4gEMJCywMn8QnqXj+ZiA=)
                          2: roC7E9RumHxLB3VVJXEkh6LWBXY.roa (hash: ZVaSktEMxUUuiyBU7JPF0ZEtx8YRLICCeEQDBd6wK6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:46:24:0a:ad:6b:6d:f9:fb:f1:45:22:d0:ca:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3
        Validity
            Not Before: Mar 29 04:00:40 2026 GMT
            Not After : Mar 30 04:00:40 2026 GMT
        Subject: CN=e4980996cffdecdba718148ac51de45b1e4a99f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:07:73:7b:c0:f6:2e:bc:3d:9d:01:a1:3d:
                    02:43:46:2b:a9:d2:f8:f5:64:e7:26:9f:bf:d3:49:
                    a8:34:b6:80:e0:49:3a:5c:6f:20:b5:12:26:1a:93:
                    9f:4b:28:83:8d:cd:db:58:84:36:a7:74:ae:50:73:
                    ac:da:a4:1c:93:75:0f:bf:9c:8f:aa:d6:16:03:89:
                    e6:5d:2b:06:54:16:ea:53:5b:e4:f4:a2:51:0a:a4:
                    d8:4d:79:32:9a:43:95:38:af:c5:4a:19:59:ed:71:
                    6a:32:04:07:99:04:35:14:48:cd:48:5f:ac:75:c6:
                    e8:b8:5a:f3:f4:71:a8:60:f5:bd:a0:e7:ad:54:d6:
                    45:70:0c:d1:94:3c:d3:28:dd:fa:84:79:02:31:2a:
                    eb:d7:8f:fd:20:c4:6f:92:56:68:76:d1:76:bf:10:
                    06:9c:84:67:41:10:50:a3:26:73:d1:bb:ee:40:07:
                    98:e1:ae:0f:b9:a0:1c:24:60:6b:3c:46:07:f1:bc:
                    b3:63:6b:10:c9:43:d5:a6:4e:29:59:2d:51:45:38:
                    ad:d3:9d:58:bc:3a:ec:89:dc:9e:0f:60:a7:29:67:
                    2c:6f:f6:c4:6d:cc:d9:6a:1e:08:e1:eb:3d:10:91:
                    b9:70:38:cc:c3:78:e5:fe:cc:5c:84:59:ac:62:e0:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:98:09:96:CF:FD:EC:DB:A7:18:14:8A:C5:1D:E4:5B:1E:4A:99:F2
            X509v3 Authority Key Identifier:
                keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:51:18:6e:8c:e5:75:32:ca:a0:d4:fe:06:1c:a3:fc:2b:23:
         bd:cd:ba:9a:0e:3f:7e:83:46:34:d3:7f:0a:11:e7:47:4f:37:
         8d:4e:88:25:22:7e:11:ba:17:a8:aa:59:b9:6d:62:a2:40:71:
         57:9c:d0:49:ba:95:b9:81:61:60:90:e2:94:7d:0a:2b:58:d3:
         fe:fe:3c:ef:7c:ae:58:dd:22:ed:b0:42:33:99:f6:19:23:f2:
         ae:a0:ca:19:8a:e1:88:ea:2b:1b:5b:56:17:5a:b8:82:7e:1e:
         db:08:1d:35:72:53:40:ae:54:27:45:37:68:78:7b:0a:e9:03:
         fb:b7:97:c6:27:3a:39:54:4a:1b:3d:c5:45:92:6c:84:a7:42:
         57:34:16:ab:6a:de:65:42:25:ba:3a:9e:f4:b5:83:60:d5:20:
         ca:4d:a0:68:c0:4e:ac:9d:94:83:ff:d1:82:ef:84:47:49:d0:
         ec:36:76:86:65:1c:b2:78:3b:86:6c:e2:89:e3:0c:d4:7b:98:
         6c:ad:60:cc:1f:5d:ba:da:d7:9c:55:47:46:6c:ff:e1:c9:fd:
         51:a6:f7:48:47:c4:34:7a:e6:ee:89:f2:77:a0:a1:16:a5:f1:
         39:86:cd:f6:39:28:de:6a:0a:ff:11:c7:89:17:88:42:68:ba:
         5b:6f:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:04 2026 by rpki-client