Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File:                     KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier:          FbxBcwLPc1GwX5myUtVe82J//bJ3yO6nozfUKjeBXJo=
Subject key identifier:   6D:55:D3:C0:8E:22:1F:E7:F3:44:9D:F7:C5:C6:11:D8:5E:FE:65:C8
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer:       /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial:       019CA8D7B8999570D584E1E43E22FD9806DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number:          0899
Signing time:             Sun 01 Mar 2026 10:00:35 +0000
Manifest this update:     Sun 01 Mar 2026 10:00:35 +0000
Manifest next update:     Mon 02 Mar 2026 10:00:35 +0000
Files and hashes:         1: 8iSljF9yURlFbqs-gvEXq7OZBjM.roa (hash: ARcwma/vswYt5XBxVOW0CoTAWWMy+ZmtkB5FXlj5D4U=)
                          2: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: jLp4o62uBHPn3jBZ2upiSb2Hgwwcq/nLpAeTRHhK5y8=)
                          3: RxNLLXxR-CzB0lCNzFXnXse6o58.asa (hash: +bxHDoutbQA8pq/ltILKkfOw9KUe0ujPJE9JrTsk4Fw=)
                          4: YVLbsPphUzr0gk62ZWqr-AU_xYs.roa (hash: 40/VqOwzeKbDNYjqt9gFE2PfKWEcwlXPJGHdZ1QMGtM=)
                          5: xhu-0mZ6I_dG18XDHBeHb4pHzuI.asa (hash: Ckg17sZrLC7ovu4WHIS5uCgsXOtfqzHSeiiwzrs9BRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:d7:b8:99:95:70:d5:84:e1:e4:3e:22:fd:98:06:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
        Validity
            Not Before: Mar  1 10:00:35 2026 GMT
            Not After : Mar  2 10:00:35 2026 GMT
        Subject: CN=6d55d3c08e221fe7f3449df7c5c611d85efe65c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:fd:31:11:66:55:60:66:f6:35:2e:9d:e2:
                    fe:44:57:06:b7:d9:6f:4f:3f:ec:46:64:79:18:ef:
                    46:c2:13:e0:c0:3f:64:d8:b1:0c:be:be:04:90:5e:
                    b0:c2:c9:fd:e9:5e:69:24:9f:b9:a0:ee:7c:d8:1a:
                    28:88:d3:fc:01:65:cb:c5:e0:55:a8:97:1a:6c:ad:
                    ff:28:eb:75:51:9a:bd:17:c0:c1:b9:bb:2b:e1:a3:
                    ca:9e:16:84:d2:b5:f8:a1:0e:2d:7a:37:d3:46:59:
                    48:01:d2:0f:a0:54:77:1e:b5:0d:6a:30:3c:3c:a9:
                    2b:44:22:0a:09:1d:49:b1:14:25:02:18:fa:9a:2b:
                    72:ff:bf:f8:e5:c9:d1:86:9c:e4:96:14:ac:3d:12:
                    eb:21:dd:16:88:06:46:a6:08:a7:3e:6b:e8:eb:19:
                    5b:2a:cb:a8:78:0b:f2:d5:a6:d4:0f:38:08:4e:53:
                    87:74:63:33:30:1b:34:84:9c:e3:2d:b1:75:29:7c:
                    51:0e:89:2e:aa:38:90:3f:49:bd:92:41:a1:bb:23:
                    27:f3:cc:c2:7d:a8:9f:a9:47:b2:dc:77:8c:6c:7a:
                    46:e6:11:b8:3b:2c:c3:e2:a0:04:3f:1b:b8:47:ce:
                    f4:9a:ca:5d:84:94:0a:9f:7b:0c:2d:46:32:18:d5:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:55:D3:C0:8E:22:1F:E7:F3:44:9D:F7:C5:C6:11:D8:5E:FE:65:C8
            X509v3 Authority Key Identifier:
                keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:20:48:d2:41:52:7a:06:1a:18:d6:b8:3f:34:5e:05:eb:20:
         78:52:36:69:c7:60:1e:d7:d8:e2:a7:54:ed:c1:69:c7:ea:e6:
         05:ee:0c:67:0c:76:45:f3:4c:75:79:ff:91:38:ce:f1:32:d9:
         a2:b2:2b:f9:1b:83:31:39:33:e6:2b:06:ea:60:c7:82:78:18:
         b4:6c:85:5a:18:09:d2:71:42:de:02:4e:1d:2f:23:2e:33:f4:
         43:6c:da:81:2d:52:f1:b1:16:df:4f:80:b1:1f:58:e4:f0:68:
         67:15:dc:1f:47:12:c1:ba:75:cf:11:71:54:d5:11:d9:33:14:
         03:69:93:33:ae:0c:4a:5e:c1:f0:e8:92:c2:94:6d:47:ef:d5:
         4b:d2:84:f5:ea:52:22:ac:54:57:e6:cf:4a:81:77:a5:ce:cb:
         fe:d0:fb:45:6e:81:19:bb:04:3f:b1:f0:43:de:4b:dd:9e:72:
         00:49:0e:d1:36:b3:cc:ff:db:f0:2c:27:f1:4e:8a:6a:85:16:
         86:13:ea:69:fd:23:aa:08:c4:e1:04:06:48:e4:cb:a1:a5:b9:
         6c:08:51:e3:91:df:d8:0c:a4:51:a6:30:06:d6:06:df:10:a2:
         7b:75:b5:fa:42:98:44:4d:5f:fd:7b:76:f5:d3:b9:fe:58:7e:
         80:7d:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:24 2026 by rpki-client