Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          4HGvsxB/BJr47e57HIPZtv/xvEvbnxAX9hqnBPzqER8=
Subject key identifier:   3B:D3:F9:95:B5:D1:07:3D:DD:E1:26:D5:ED:E4:36:E7:3A:DD:E5:8F
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       019DA4544CE7981DD7B851B5B12E7667F4E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          1446
Signing time:             Sun 19 Apr 2026 06:01:21 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:21 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:21 +0000
Files and hashes:         1: EDNpAts-6JeGE5wjiUM5BMSnB9k.roa (hash: URMxngJbXriRE2iOut0YpTm56ViTEGhL3sKLZKHuyJ0=)
                          2: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: pwiZsiMfN16BKP0Ng1mz6glYe3DGK5CDnYDXVZg8Fps=)
                          3: Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa (hash: DDYkbbLPOZouFDJgBa+WHylISlZR4ujlVO/1zXw9mng=)
                          4: UBjaQjSsvCaMWIObSymTDrfellU.roa (hash: FakZBVr4LoPzsh/Z6oDhedet2QWrNOrHB6+ZNqqvw9I=)
                          5: g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa (hash: YP1AJ0q+zSM445DjhCgE/dmdRBL7ryjwtDbdKhvu3Rg=)
                          6: sAk06Tsd-_YR9NQduC3T-piAvWk.roa (hash: xw7/19cXkRCZDOVeEPf+Eoup5YiNyQhWAOUhvYY+IJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:4c:e7:98:1d:d7:b8:51:b5:b1:2e:76:67:f4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Apr 19 06:01:21 2026 GMT
            Not After : Apr 20 06:01:21 2026 GMT
        Subject: CN=3bd3f995b5d1073ddde126d5ede436e73adde58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:e0:99:cd:e1:59:07:bb:92:a2:7e:9c:1a:
                    04:62:e4:75:5f:64:fe:d7:3e:83:8a:a9:87:55:5f:
                    7d:78:c3:6d:38:c3:0b:c7:42:ae:38:4a:a9:06:f6:
                    b6:cc:61:80:bb:ac:fa:eb:da:21:ad:22:e0:b9:99:
                    42:8e:58:b5:9d:c4:7e:7a:16:94:bb:f6:eb:bd:d7:
                    40:be:cb:7a:5d:f0:44:3c:3a:19:d1:53:83:19:04:
                    d0:f0:38:bb:9b:fa:99:24:34:b4:0d:54:ec:0f:18:
                    32:9e:32:af:92:50:b0:47:b3:1d:91:cb:db:f6:fa:
                    df:05:35:3e:6b:9c:56:2c:68:19:4f:2f:e7:2a:e1:
                    3e:e2:a7:eb:c5:90:e0:28:1a:dd:8d:6f:9e:45:81:
                    b3:c3:34:35:79:ff:36:df:41:3b:c7:48:58:3b:c6:
                    e5:1d:88:8c:99:13:8e:ce:1d:f4:65:70:72:b2:db:
                    c4:a3:0e:8e:de:e9:f7:5b:09:21:54:a2:e0:25:a5:
                    73:6d:a8:21:aa:3b:51:f4:5d:e4:94:21:12:7b:85:
                    aa:92:57:30:19:ce:85:e9:63:af:08:b0:0c:ef:63:
                    ea:12:03:0d:e6:a3:b8:a0:55:14:65:a5:16:a4:58:
                    4d:90:1f:58:b8:48:09:4b:e8:5f:01:7b:7c:9f:5a:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D3:F9:95:B5:D1:07:3D:DD:E1:26:D5:ED:E4:36:E7:3A:DD:E5:8F
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ce:05:88:e2:2b:4d:64:c6:c8:f5:59:fa:8a:2b:eb:70:01:
         6f:0c:9f:ea:c3:42:ee:78:d1:87:df:09:d7:a0:9b:d3:04:b1:
         07:40:dd:1e:9c:88:92:55:55:aa:89:a7:f9:fd:62:8c:86:10:
         ce:24:04:3b:d0:98:a6:9b:5e:7f:68:e4:0f:d2:29:72:e6:6e:
         ae:76:5d:e4:88:bd:b1:3c:a0:f6:cd:5e:9f:d9:0c:46:55:8a:
         e9:47:63:88:3f:87:7f:ab:aa:d1:ab:39:ef:91:3f:4a:9e:90:
         8c:5b:d0:ba:6c:50:23:36:03:72:08:8a:61:24:3e:12:bf:74:
         ec:34:47:c1:a1:64:c3:9a:52:6d:4d:3e:28:75:c6:01:e5:8b:
         88:3b:2e:ed:0a:b4:86:98:8f:5c:21:7e:fe:28:fb:db:49:8d:
         e4:ac:d0:79:b6:64:d7:4a:58:46:32:09:e8:60:fa:3f:10:2f:
         af:2b:7b:54:8f:c2:0f:31:43:2a:6a:77:af:9f:21:99:ef:22:
         36:91:b3:77:96:44:a8:91:d7:45:57:eb:0b:d8:50:50:ec:88:
         05:dd:fe:88:14:6d:46:36:8a:98:f2:fa:10:79:b3:5c:97:c9:
         cf:58:cb:4c:d9:a9:c4:24:01:1e:0b:10:49:d5:69:84:87:82:
         d0:bc:cd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:16 2026 by rpki-client