Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
File:                     Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json)
Hash identifier:          tUoYpSvVbwpGl22Jb3PHH6IcIEf+Y0zvA22rNLeD78U=
Subject key identifier:   44:C9:12:EB:CA:BB:C4:8F:0E:10:66:A6:52:A6:C1:CC:84:0B:7D:D6
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Certificate issuer:       /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial:       019EC036726A6D57268C0D670F72FD89D552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
Manifest number:          174D
Signing time:             Sat 13 Jun 2026 09:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:54 +0000
Files and hashes:         1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=)
                          2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=)
                          3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: WTU6AvsXMtHqq2LztKaz1JOToXQkzLNFEOOIP2USRCc=)
                          4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=)
                          5: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=)
                          6: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=)
                          7: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=)
                          8: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=)
                          9: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (hash: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk=)
                          10: wlkqPCWXMJsz1R99hgzE3_VYv5c.roa (hash: KrKqWLoyfi0cuRqfEdDLZj1DmY6m+y1d1kGaimNA4oE=)
                          11: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:72:6a:6d:57:26:8c:0d:67:0f:72:fd:89:d5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
        Validity
            Not Before: Jun 13 09:00:54 2026 GMT
            Not After : Jun 14 09:00:54 2026 GMT
        Subject: CN=44c912ebcabbc48f0e1066a652a6c1cc840b7dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:a2:f9:ca:c3:c0:f1:ac:d7:c8:37:fd:62:
                    36:b6:6f:6d:c5:f2:9e:0d:68:4f:bd:71:45:50:21:
                    67:3b:bb:2b:b0:54:a9:d1:cb:3c:64:ce:af:97:d9:
                    88:74:1b:4e:d2:e1:30:d5:63:86:30:14:7f:6f:49:
                    c2:12:64:87:13:34:b6:66:86:c3:b2:13:7c:3a:fa:
                    6f:d8:ac:8c:59:0c:25:86:97:35:2f:24:ad:8d:84:
                    cc:62:10:51:20:bf:2e:4a:bd:49:51:ce:41:74:1b:
                    e0:73:e2:98:4c:58:5a:33:8b:3c:92:d3:55:e0:87:
                    70:56:d0:67:a9:26:9a:a0:8c:90:62:ba:06:35:6e:
                    3e:fc:6d:a3:20:5c:b6:ae:7e:7c:a6:95:4a:6a:5e:
                    cc:47:83:09:a9:9a:d1:85:00:42:91:e3:f9:44:ef:
                    e2:22:ac:ea:7d:dc:2b:02:80:62:59:bf:93:35:3b:
                    4d:d2:b3:1b:0c:42:36:f5:6d:ef:7d:fb:f7:ee:d3:
                    a8:b9:14:64:54:7b:8b:25:d9:7e:cf:17:40:7d:a5:
                    62:63:b9:dd:da:23:f0:77:4f:8e:ad:38:b9:a9:c1:
                    00:f8:4c:12:f6:05:5c:9d:97:c6:4b:80:31:7b:56:
                    6d:3e:15:17:cd:04:b2:6f:ed:c6:71:9f:5b:a0:89:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C9:12:EB:CA:BB:C4:8F:0E:10:66:A6:52:A6:C1:CC:84:0B:7D:D6
            X509v3 Authority Key Identifier:
                keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2c:91:f3:fc:54:e2:8f:84:17:57:f3:71:32:f2:e6:7c:4b:
         cf:eb:69:63:58:e0:61:10:11:73:5f:32:b3:40:ee:e9:6a:55:
         41:60:bc:a5:a3:fc:b0:a4:49:73:84:e5:73:11:5e:aa:13:25:
         ae:d0:63:f5:38:c1:9a:20:16:25:c3:b7:c5:d5:38:42:47:a5:
         66:aa:cc:0c:e3:b2:f3:0a:00:96:a9:25:a6:ac:59:ad:50:02:
         fc:70:56:e6:18:53:86:a8:13:33:02:aa:ff:82:fb:05:f5:03:
         8d:1e:03:65:72:47:7a:44:19:19:f7:0f:71:f7:fe:2a:28:86:
         3e:f4:c7:9a:a2:68:9e:cb:8a:01:c7:19:76:0e:f1:b2:f4:b6:
         81:f8:86:c4:e6:01:a2:18:6b:9f:0c:83:a5:6f:0b:dc:df:ea:
         38:15:fd:69:7b:a7:3b:67:2d:1d:31:b5:fd:7c:52:09:94:11:
         46:fa:71:0c:a9:8d:cd:08:cf:2e:14:21:be:d4:16:2f:6c:92:
         1f:88:7b:b9:a9:e5:a5:fa:2e:c4:2f:cc:c5:ba:3a:c6:37:04:
         82:22:ea:3b:7d:72:0a:24:0c:06:95:b2:33:47:ca:5b:0a:0a:
         f4:a4:fb:e8:95:79:8f:51:22:d7:10:c0:99:fb:ce:4e:3a:f7:
         b2:7b:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:04:26 2026 by rpki-client