Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File:                     kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier:          TGxAS0zontM4YG8/XuHwmLYnifa5XIyE69svrEgdz6k=
Subject key identifier:   9F:93:D3:7E:CD:87:94:60:95:F8:DF:2D:85:EE:0E:3C:B6:79:28:3B
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer:       /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial:       019CAF48C0B92D5A58949C9B1B9E506B28DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number:          1574
Signing time:             Mon 02 Mar 2026 16:01:46 +0000
Manifest this update:     Mon 02 Mar 2026 16:01:46 +0000
Manifest next update:     Tue 03 Mar 2026 16:01:46 +0000
Files and hashes:         1: LM_fwTOY3bWKU86K5V8-3VaJ5xo.roa (hash: gJ+6292a/zmiB+7Lg48nmQHbNWGgX6ni2+hF6SfxqDs=)
                          2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: iF8DJd1dfRpokVuZV7ryp6cDuL4bpOLZ5QaiQjZS2a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:48:c0:b9:2d:5a:58:94:9c:9b:1b:9e:50:6b:28:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
        Validity
            Not Before: Mar  2 16:01:46 2026 GMT
            Not After : Mar  3 16:01:46 2026 GMT
        Subject: CN=9f93d37ecd87946095f8df2d85ee0e3cb679283b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:92:1d:f1:66:d5:89:f8:20:9d:4b:af:a3:
                    e4:4e:60:33:48:d2:11:c8:3d:1b:ca:9d:13:89:12:
                    51:80:5e:86:70:e2:fb:0f:bb:5d:b1:8e:b9:cd:e0:
                    a2:64:b1:82:36:bd:82:91:9a:28:a3:e5:8a:72:67:
                    79:15:a5:45:8d:f4:62:28:00:ed:9b:b0:55:0f:70:
                    6f:d5:35:3d:e2:a2:b2:26:f9:0b:ce:bf:9c:59:53:
                    a1:b1:74:0c:24:7f:e6:db:53:8a:e4:39:e1:21:43:
                    6a:91:6e:ae:a9:10:b6:f7:17:47:a7:72:87:3a:e3:
                    5a:57:0a:ee:07:ab:e7:44:a4:82:5b:c6:a6:c7:53:
                    cd:81:57:af:ef:53:a1:fb:8a:9e:df:49:03:7d:8f:
                    f6:42:67:51:b8:b1:9d:1a:e3:38:36:64:70:59:62:
                    1b:43:e5:ed:09:64:bf:5d:76:61:a2:a5:03:2c:23:
                    44:3c:ac:cf:89:f5:d4:2a:4c:2e:3e:27:ef:f5:ad:
                    bc:a4:f9:51:91:15:9b:2a:35:db:d3:3a:7e:1e:4c:
                    49:28:97:ef:b1:59:51:18:2a:3c:53:ef:04:14:57:
                    0e:af:38:f2:3f:69:e8:cb:30:a6:49:b4:e1:22:0b:
                    d5:ac:fd:1b:0b:a6:16:8c:6d:99:01:83:2d:3e:ab:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:93:D3:7E:CD:87:94:60:95:F8:DF:2D:85:EE:0E:3C:B6:79:28:3B
            X509v3 Authority Key Identifier:
                keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:d3:13:e8:fb:13:ba:e7:0e:fd:e1:41:72:d0:b3:7f:2a:
         f5:97:aa:00:8a:b0:a2:76:cd:d2:a8:4a:cd:38:2e:59:0c:fa:
         33:6f:37:b0:e5:ab:ed:10:6c:e8:d0:e9:d0:11:1a:ce:90:e9:
         5a:55:90:d8:84:98:c7:59:ed:94:06:ac:bc:15:8b:88:2b:f8:
         41:0b:d3:8f:2a:21:47:5c:4b:47:d9:bd:cd:59:e5:7a:84:47:
         18:e9:8f:0c:df:90:58:71:83:3d:e9:fb:5e:69:30:19:30:10:
         22:2d:4c:c8:86:9a:b7:3f:3c:3a:d2:ff:9c:25:80:54:be:bb:
         03:4b:9c:d5:85:72:30:c5:bf:fc:a3:0c:39:9e:2a:f3:4d:9b:
         5c:91:fe:69:14:2b:32:3a:62:d9:ce:25:ee:39:2c:7d:68:78:
         28:d1:f4:15:84:4c:ae:48:6e:ab:50:32:b2:3d:58:44:9d:c6:
         70:7f:bb:e5:83:59:54:38:63:ad:d0:e4:88:1a:fb:05:94:e5:
         31:63:d6:a6:7e:19:33:1c:b4:97:ec:f1:69:b8:6a:1e:23:2b:
         12:4e:e5:13:47:63:a1:28:06:72:9e:be:92:d8:2b:dc:fe:8a:
         2f:b6:95:c6:7a:e9:53:93:f6:c2:7b:a3:20:0f:ee:59:2a:8f:
         ae:d2:78:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvSMC5LVpYlJybG55QayjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDMyNzhiYWE2ZDliZDRlNDM2NzEwNGUxYTBiMTg0Y2I5
ZmIyZGMwHhcNMjYwMzAyMTYwMTQ2WhcNMjYwMzAzMTYwMTQ2WjAzMTEwLwYDVQQD
Eyg5ZjkzZDM3ZWNkODc5NDYwOTVmOGRmMmQ4NWVlMGUzY2I2NzkyODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFSSHfFm1Yn4IJ1Lr6PkTmAzSNIR
yD0byp0TiRJRgF6GcOL7D7tdsY65zeCiZLGCNr2CkZooo+WKcmd5FaVFjfRiKADt
m7BVD3Bv1TU94qKyJvkLzr+cWVOhsXQMJH/m21OK5DnhIUNqkW6uqRC29xdHp3KH
OuNaVwruB6vnRKSCW8amx1PNgVev71Oh+4qe30kDfY/2QmdRuLGdGuM4NmRwWWIb
Q+XtCWS/XXZhoqUDLCNEPKzPifXUKkwuPifv9a28pPlRkRWbKjXb0zp+HkxJKJfv
sVlRGCo8U+8EFFcOrzjyP2noyzCmSbThIgvVrP0bC6YWjG2ZAYMtPqsbxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+T037Nh5RglfjfLYXuDjy2eSg7MB8GA1UdIwQY
MBaAFJJDJ4uqbZvU5DZxBOGgsYTLn7LcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWIt
NGMyZmJkZDU2Mjc5LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMGU3Y2YtYjRiOC00MjcyLTg3YWItNGMyZmJkZDU2Mjc5
LzEva2tNbmk2cHRtOVRrTm5FRTRhQ3hoTXVmc3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXDTE+j7
E7rnDv3hQXLQs38q9ZeqAIqwonbN0qhKzTguWQz6M283sOWr7RBs6NDp0BEazpDp
WlWQ2ISYx1ntlAasvBWLiCv4QQvTjyohR1xLR9m9zVnleoRHGOmPDN+QWHGDPen7
XmkwGTAQIi1MyIaatz88OtL/nCWAVL67A0uc1YVyMMW//KMMOZ4q802bXJH+aRQr
Mjpi2c4l7jksfWh4KNH0FYRMrkhuq1Aysj1YRJ3GcH+75YNZVDhjrdDkiBr7BZTl
MWPWpn4ZMxy0l+zxabhqHiMrEk7lE0djoSgGcp6+ktgr3P6KL7aVxnrpU5P2wnuj
IA/uWSqPrtJ4lw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:28 2026 by rpki-client