Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File:                     KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier:          YFyWqxg1NJg+YMje9miJKRwqqmo+ZYbtSJH5s/AYjB8=
Subject key identifier:   0E:00:29:57:91:D2:E6:FE:E4:78:F9:BE:9A:84:22:AA:30:9E:9C:6F
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer:       /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial:       019CA94643515F7DD5438D42AA1663A8362C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 12:01:19 +0000
Manifest this update:     Sun 01 Mar 2026 12:01:19 +0000
Manifest next update:     Mon 02 Mar 2026 12:01:19 +0000
Files and hashes:         1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
                          2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
                          3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: GwF+hpdzenpehznDfqsnMenDx4qWUhOpUzP0O1wyi88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:46:43:51:5f:7d:d5:43:8d:42:aa:16:63:a8:36:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
        Validity
            Not Before: Mar  1 12:01:19 2026 GMT
            Not After : Mar  2 12:01:19 2026 GMT
        Subject: CN=0e00295791d2e6fee478f9be9a8422aa309e9c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:27:85:68:48:1a:17:5e:18:4f:34:ca:d6:
                    40:03:ff:c7:54:56:e6:44:4a:a6:ed:8e:9e:4b:e8:
                    54:61:25:a2:cf:82:5b:52:db:47:07:37:da:18:ac:
                    00:72:f5:d9:8f:55:14:f9:31:10:f3:9e:3f:2c:76:
                    dd:e1:dd:aa:8d:f6:43:d4:cf:8f:78:a9:ea:8e:ca:
                    b5:32:30:ed:d3:23:ae:8a:b8:21:86:46:5c:e7:ce:
                    7f:16:50:d7:8f:08:4c:4f:22:72:0d:d5:7b:0d:5b:
                    cd:d0:8e:cc:d5:c2:9e:e8:19:c6:32:a2:f4:ea:8d:
                    9f:cb:ea:25:aa:c1:a3:f0:f4:d8:58:d3:5c:80:ed:
                    21:f9:8a:67:00:90:28:66:79:dc:7d:15:f7:bf:27:
                    c6:87:b6:aa:51:34:32:9f:64:d2:8b:1a:27:1f:83:
                    b1:80:e2:fe:2a:dd:0c:e4:9f:12:26:64:3e:9b:12:
                    07:3b:bd:24:27:67:85:ce:73:aa:b8:32:c1:b4:c8:
                    8e:85:f6:15:a3:bf:c0:27:86:19:9b:c9:78:86:e0:
                    86:05:00:bf:00:15:0c:a0:27:6c:91:a8:4e:b3:f7:
                    65:31:00:e9:0a:e6:e1:1b:b4:9d:96:ec:d0:e8:a2:
                    3a:9b:50:c6:d9:da:22:09:92:7f:0d:89:ad:ad:e2:
                    ce:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:00:29:57:91:D2:E6:FE:E4:78:F9:BE:9A:84:22:AA:30:9E:9C:6F
            X509v3 Authority Key Identifier:
                keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ea:1f:33:0a:14:8d:fb:69:e0:a9:fa:92:67:6e:10:15:1d:
         5b:ff:74:4c:07:6e:90:f6:c7:24:a0:19:c6:a7:da:2b:c1:85:
         b7:7c:bf:f6:37:f2:c0:94:a8:e3:3d:95:a8:df:ad:a9:47:a8:
         ec:e3:99:ab:43:63:30:94:8d:b7:1c:b0:ff:42:52:85:ce:f0:
         a7:94:15:fe:67:7c:df:f8:b2:37:af:79:7e:20:58:74:c3:aa:
         fd:25:e0:32:1e:f0:ae:7e:6b:35:2e:0e:d1:56:0c:94:4a:b7:
         f4:02:af:37:6b:44:74:53:64:66:46:a4:2a:9a:9d:e2:31:f6:
         a8:1e:74:74:0e:be:23:2c:a2:4e:80:18:b7:dd:75:43:f4:67:
         9a:4f:ba:e7:40:95:fd:2b:52:cb:a9:4c:8f:8a:ca:d4:12:72:
         59:c5:f6:d5:ac:f9:64:2b:23:fb:45:35:d7:dc:50:db:12:6a:
         a8:ae:75:a7:9e:f8:ba:fb:d7:a6:18:0e:e6:4e:b4:61:46:e2:
         6e:2d:c0:c5:f2:22:8e:fa:12:2d:d1:f0:e0:92:e7:c3:2b:27:
         09:1e:aa:c3:1f:93:4f:a4:6e:83:b5:0f:ce:cb:96:01:b8:c9:
         cb:75:76:c8:a7:8a:83:c3:3d:2f:a7:d1:e0:a8:31:de:31:cc:
         d7:8f:29:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRkNRX33VQ41CqhZjqDYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTU3OWY1YjY3M2RiZTJlYmJhMzQ4Y2ZiMGY1NjEyNGNk
ZTcwNDgwHhcNMjYwMzAxMTIwMTE5WhcNMjYwMzAyMTIwMTE5WjAzMTEwLwYDVQQD
EygwZTAwMjk1NzkxZDJlNmZlZTQ3OGY5YmU5YTg0MjJhYTMwOWU5YzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNQnhWhIGhdeGE80ytZAA//HVFbm
REqm7Y6eS+hUYSWiz4JbUttHBzfaGKwAcvXZj1UU+TEQ854/LHbd4d2qjfZD1M+P
eKnqjsq1MjDt0yOuirghhkZc585/FlDXjwhMTyJyDdV7DVvN0I7M1cKe6BnGMqL0
6o2fy+olqsGj8PTYWNNcgO0h+YpnAJAoZnncfRX3vyfGh7aqUTQyn2TSixonH4Ox
gOL+Kt0M5J8SJmQ+mxIHO70kJ2eFznOquDLBtMiOhfYVo7/AJ4YZm8l4huCGBQC/
ABUMoCdskahOs/dlMQDpCubhG7SdluzQ6KI6m1DG2doiCZJ/DYmtreLOtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4AKVeR0ub+5Hj5vpqEIqownpxvMB8GA1UdIwQY
MBaAFClVefW2c9vi67o0jPsPVhJM3nBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYt
MzQzYzRkMjRjMjNiLzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYtMzQzYzRkMjRjMjNi
LzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduofMwoU
jftp4Kn6kmduEBUdW/90TAdukPbHJKAZxqfaK8GFt3y/9jfywJSo4z2VqN+tqUeo
7OOZq0NjMJSNtxyw/0JShc7wp5QV/md83/iyN695fiBYdMOq/SXgMh7wrn5rNS4O
0VYMlEq39AKvN2tEdFNkZkakKpqd4jH2qB50dA6+IyyiToAYt911Q/Rnmk+650CV
/StSy6lMj4rK1BJyWcX21az5ZCsj+0U119xQ2xJqqK51p574uvvXphgO5k60YUbi
bi3AxfIijvoSLdHw4JLnwysnCR6qwx+TT6Rug7UPzsuWAbjJy3V2yKeKg8M9L6fR
4Kgx3jHM148pZw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:53 2026 by rpki-client