Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          8Xr7qP0eEv9xAovm2G0jgGFibK5y3yNpuQycYqYRayQ=
Subject key identifier:   A9:4D:A7:7A:F0:D1:64:F5:69:11:5F:97:83:85:33:F8:44:85:1D:0F
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       019DA309E360FC3875A7E0D235C16E822230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0D47
Signing time:             Sun 19 Apr 2026 00:00:27 +0000
Manifest this update:     Sun 19 Apr 2026 00:00:27 +0000
Manifest next update:     Mon 20 Apr 2026 00:00:27 +0000
Files and hashes:         1: aIl3Llcq813igkMcWrFjAIoXctc.roa (hash: KXGJiHVjrQ4DWQ0BvplY8WPWzX9Lt/mBu9x8K9sjzPM=)
                          2: edX9nFPaRBypEhTRy4XBDhniddw.roa (hash: 5MhUOWbCadwewjcrQ5b6tmz4prZMcahfCM2cAS/s/R4=)
                          3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: kQnyuHRQ8HOoMCA9J826Rv3lSHXI8ez3oNFsEMrGv+4=)
                          4: pqVBy_JjEYGo9euG10lbD9kfoPc.roa (hash: RPXgn9O4fhCi6PomLx2N6apcSA2xga46Z6S9gI5YVpU=)
                          5: vYxJpv5POvG_3gvqhMqXcCuX_hM.roa (hash: wpDWTjfQBDPG5OjIvThUgTmIIfXP/UypeEU6fjlCrZU=)
                          6: yEbtzhh5wc4rY7MHu27W_dwYhu8.roa (hash: h2s6dV+bwm8ecYVBUiiK45LeIcpS1pxSfpxppjXQ+aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:09:e3:60:fc:38:75:a7:e0:d2:35:c1:6e:82:22:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Apr 19 00:00:27 2026 GMT
            Not After : Apr 20 00:00:27 2026 GMT
        Subject: CN=a94da77af0d164f569115f97838533f844851d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:77:6c:01:ea:14:28:96:90:c7:21:a2:1c:
                    e6:f0:6e:c5:c8:c1:e3:71:61:1a:56:09:10:a9:f4:
                    85:27:90:63:d9:02:a5:4e:84:2c:b7:3a:84:1a:05:
                    34:bc:56:5b:d5:5c:b8:1b:d8:50:05:9e:10:57:2e:
                    dc:af:0f:78:b3:ab:8f:fd:97:77:17:b2:25:4b:17:
                    1b:78:f2:7b:b5:97:5e:61:c2:af:e3:eb:d4:07:90:
                    a1:5f:60:97:20:73:56:e2:6c:00:88:8e:2c:dc:19:
                    a9:00:bd:d8:33:bd:fe:f0:d6:32:01:70:9b:82:a7:
                    3f:d5:97:1b:cf:11:a5:fb:ac:51:1f:75:2b:0a:65:
                    4f:59:3b:96:f7:6a:0d:33:78:8a:21:b2:22:68:21:
                    e7:8f:20:8a:d2:a6:ec:61:75:12:68:42:a7:42:b1:
                    49:bd:07:ef:1e:30:bc:d9:61:52:e8:d5:a2:bd:50:
                    ba:bd:42:82:67:67:07:d1:bd:d6:73:bb:1f:b1:77:
                    6c:9b:6d:3c:09:75:b9:4b:5d:73:b5:06:3b:a7:fd:
                    e1:0b:ac:b0:27:ec:48:07:1e:27:fa:73:50:b2:8b:
                    37:79:db:c3:c6:e3:2e:be:14:cf:75:2f:b7:e4:d6:
                    2c:27:7d:00:70:35:eb:81:a1:fa:f4:73:80:33:41:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4D:A7:7A:F0:D1:64:F5:69:11:5F:97:83:85:33:F8:44:85:1D:0F
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5f:15:94:7d:93:2f:a1:57:c3:ad:bf:20:15:a7:29:90:2d:
         d1:52:51:2c:2e:95:f8:54:e5:0d:ff:ae:15:e3:3b:da:a1:5d:
         f5:e4:20:6a:53:48:b3:91:f2:a2:14:66:75:ec:77:00:0c:d8:
         bb:98:26:86:6b:b5:d5:59:7f:9e:ac:bd:05:c0:92:1c:4b:86:
         28:bf:f5:a9:a8:88:dc:0b:bc:37:96:da:58:d3:90:eb:b3:d9:
         f3:1e:91:5d:b1:69:0a:51:e2:bc:fa:25:e6:5e:63:98:96:98:
         a0:b9:ac:52:e4:56:65:1f:a8:22:10:41:f7:5c:8c:bb:55:fb:
         e7:7e:68:4b:31:01:7c:74:86:e7:3b:e3:a3:b7:17:c0:83:48:
         c6:8d:9e:e1:d8:22:fd:14:7c:6f:c1:98:aa:e8:68:a3:a6:a6:
         8e:d0:c6:86:df:ce:0c:30:17:d3:9f:e2:ab:89:d4:01:6d:9a:
         30:a0:65:17:d6:3b:45:77:c3:8a:bd:49:48:85:b2:1e:92:2e:
         83:ce:b2:9f:c0:36:ac:a7:52:32:ff:5d:65:b8:15:64:47:85:
         cd:a0:97:13:8d:f8:a5:de:ee:95:32:f9:56:fc:cc:91:16:0c:
         fc:84:a8:aa:0f:78:f8:e6:38:9d:e9:d5:1c:e3:79:36:d5:21:
         fe:02:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:00:24 2026 by rpki-client