Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File:                     KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier:          awEsdK8b2KQcL81xHBmH3vfdaaA2hNj0qZ887qJKepE=
Subject key identifier:   EA:49:A6:20:F8:61:7F:63:B7:4E:DB:E4:A7:64:5F:0C:54:70:8E:38
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer:       /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial:       019DA41C84854C93C07874BB0C1D3F632447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number:          1858
Signing time:             Sun 19 Apr 2026 05:00:25 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:25 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:25 +0000
Files and hashes:         1: DcG15XyhdtPXOoAizwXiwS-vgWk.roa (hash: 03f0uMllqGm3yVnRgDCB+1RlKyMTqkNgfPJ+f2YUXH4=)
                          2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: J0UQHwslsELH/KbkkKth8WS9dlMljXvOKXtjn8geIOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:84:85:4c:93:c0:78:74:bb:0c:1d:3f:63:24:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
        Validity
            Not Before: Apr 19 05:00:25 2026 GMT
            Not After : Apr 20 05:00:25 2026 GMT
        Subject: CN=ea49a620f8617f63b74edbe4a7645f0c54708e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:0b:19:99:b4:c9:b7:62:d6:58:65:39:12:
                    1f:02:07:61:5b:66:4f:d0:e5:77:95:58:92:14:a6:
                    96:54:f9:03:53:e8:32:9a:e8:7d:31:9f:87:d5:ee:
                    2b:1d:11:59:e3:65:b1:65:a6:f4:96:d2:d0:8b:3d:
                    13:0b:1f:01:6b:2e:05:3e:6c:99:35:f6:0e:31:b1:
                    42:ea:5e:a6:07:ca:30:e5:9b:5f:32:cd:28:ee:11:
                    89:7e:20:4b:b6:c2:5d:82:f6:38:45:09:d4:eb:a7:
                    79:d1:01:c5:a4:bb:8b:f1:ab:dc:16:c1:3c:ff:b4:
                    b0:9a:e9:cb:25:91:36:cf:6e:e0:d5:29:6b:b6:47:
                    21:1c:73:e8:07:20:d9:e7:1c:8f:bc:51:d6:38:11:
                    21:d1:44:7a:0e:9e:64:89:97:6e:d7:8c:4c:db:fc:
                    fd:eb:5e:56:a3:ee:aa:da:83:31:b3:54:96:33:3d:
                    02:65:a3:ea:fa:16:03:7a:89:d4:7b:4b:0f:e1:fc:
                    cc:68:39:89:6b:6c:73:b4:0f:43:9b:28:65:25:27:
                    b6:39:e3:46:dd:e1:7f:5f:38:ed:9f:43:30:2c:a3:
                    5b:2a:26:59:41:da:a8:8f:4c:6f:cc:e2:88:c3:3d:
                    c0:09:bd:52:dc:f1:f0:0e:31:12:11:01:b7:ac:f9:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:49:A6:20:F8:61:7F:63:B7:4E:DB:E4:A7:64:5F:0C:54:70:8E:38
            X509v3 Authority Key Identifier:
                keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:de:3c:e9:c9:63:b6:a3:87:59:e1:a5:43:ce:4e:2f:44:f1:
         d9:2d:36:fc:03:32:b4:25:d9:e5:fc:f0:b5:cd:3d:50:f6:17:
         19:ae:69:ea:5c:70:05:5b:f2:08:15:0b:90:00:90:1b:c4:ba:
         fb:9c:df:00:24:03:ad:3e:0a:40:bd:f4:6d:ea:b9:f0:55:21:
         c0:39:94:2b:74:44:33:e7:e2:85:7a:20:45:8c:9b:05:18:23:
         48:d7:2d:3b:f9:1c:29:05:3d:77:b1:d7:5f:11:40:ae:dd:a0:
         a4:92:8d:07:f8:69:be:de:10:f6:49:70:3e:18:ba:d2:06:20:
         cc:8e:0c:91:a5:93:32:38:3e:0d:88:af:b3:ad:91:d2:64:e7:
         48:70:50:e6:35:bf:a9:a2:b6:b7:9d:27:f2:98:22:15:08:eb:
         83:a1:51:4b:bf:d5:fe:a2:0a:a9:f4:42:c1:5b:60:ca:ee:37:
         ac:6c:26:33:66:86:5d:42:cb:ab:c7:c7:be:37:18:cf:84:c9:
         62:5f:07:76:9e:28:fb:28:80:b8:23:6e:ac:94:06:fb:79:66:
         18:fa:24:60:1e:e1:f6:24:8b:04:20:5e:b1:59:12:b7:98:76:
         6e:b9:47:16:e6:04:c8:98:61:46:fa:5e:b7:ef:07:93:b5:6a:
         7b:af:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:38 2026 by rpki-client