Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File:                     KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier:          90K7NgePubMnrdW4KjgRn03UUb/UqwzND443jZm0C7c=
Subject key identifier:   75:08:F0:6C:BC:27:A0:5C:11:1E:B0:7E:F4:7F:2F:BA:3F:11:A3:41
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer:       /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial:       019CAD2253B3E9909A65D86488DA08967E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number:          07E0
Signing time:             Mon 02 Mar 2026 06:00:33 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:33 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:33 +0000
Files and hashes:         1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: RgDIRO+XdtsvlU44wrW6HqJnQAlvP/rZ11VIUqEXl3M=)
                          2: RVZM-kFR80ko6aXVrtr5bZIVB6E.roa (hash: U18fR6M6ECujVh8EJIN+7p0bRY+B368ox20l60Irpyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:53:b3:e9:90:9a:65:d8:64:88:da:08:96:7e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
        Validity
            Not Before: Mar  2 06:00:33 2026 GMT
            Not After : Mar  3 06:00:33 2026 GMT
        Subject: CN=7508f06cbc27a05c111eb07ef47f2fba3f11a341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:f4:27:7e:54:23:e2:33:b8:48:db:c4:97:
                    51:cc:18:4f:ec:14:11:ba:2a:39:b1:73:e0:17:1e:
                    d9:ab:60:71:61:01:a0:68:8d:08:96:9a:85:ab:ed:
                    32:0e:a4:61:f5:39:6f:06:17:49:88:12:be:a4:6f:
                    6f:9c:2a:4a:df:5b:83:be:48:57:dc:6b:59:b2:d0:
                    6f:70:dd:1d:5c:42:70:c5:ee:11:72:b7:84:f7:92:
                    fa:5f:0f:b9:97:9a:a3:98:a6:a4:dd:a3:cd:75:bc:
                    32:98:44:9a:91:21:a8:f4:ca:d3:5f:e1:42:ce:e6:
                    5f:bb:0b:87:ac:a5:4a:39:0b:fe:d3:33:41:30:f4:
                    6c:d9:96:c5:2c:d5:d7:d1:10:a3:1d:6c:ee:4b:b5:
                    55:b7:f4:cc:6b:ab:34:b7:24:d5:87:e3:03:46:b3:
                    fb:e8:c7:22:b3:b5:0d:27:79:d9:f2:1a:41:f9:3c:
                    21:fb:26:f8:43:5b:74:1f:22:8f:cb:ff:c3:aa:0a:
                    e4:7d:0d:bc:6c:59:ab:ae:b4:74:cd:3f:9d:f0:fd:
                    80:2e:bb:a5:4a:cd:20:12:ed:9a:2c:fb:46:f2:f4:
                    67:e8:b5:1a:53:b1:c3:91:f8:4c:7b:c3:1f:22:2e:
                    8a:87:93:82:be:21:67:80:10:09:7f:30:dd:dd:cf:
                    8e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:08:F0:6C:BC:27:A0:5C:11:1E:B0:7E:F4:7F:2F:BA:3F:11:A3:41
            X509v3 Authority Key Identifier:
                keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:fb:fc:f2:fd:1b:86:9a:60:29:52:e0:4d:8b:96:18:1a:56:
         cb:81:62:d6:67:60:70:bb:7c:3a:18:f3:f1:94:31:13:98:3b:
         34:5e:8b:73:dc:05:63:4b:53:2e:a3:39:7a:8e:9e:54:f1:fb:
         0d:3f:66:e5:03:40:36:3c:cd:51:bf:a7:5d:30:c4:88:0c:ae:
         b6:3a:aa:c0:69:52:ef:e9:7c:1b:54:5d:d3:3a:d7:24:4a:bb:
         31:7f:14:39:ad:90:f4:d1:d1:a3:4a:e4:07:13:f6:26:a0:20:
         f4:2e:a6:f0:f9:8b:92:22:7d:90:a7:86:47:0e:9c:26:58:83:
         96:35:8c:f0:93:e8:d4:4f:1d:49:7a:66:3d:87:58:32:d0:a5:
         58:c6:61:8a:08:7b:4c:7a:b6:84:9f:eb:c7:d5:ea:13:b4:66:
         bb:7c:40:0c:7d:65:26:6d:df:67:81:a7:f5:df:a7:23:4a:df:
         05:55:a9:d7:de:1f:11:0b:14:02:f5:10:bc:41:5a:af:3f:9d:
         f1:6d:71:51:7f:f6:28:73:00:00:be:3d:b7:f1:e2:57:4e:d5:
         a9:a9:43:96:75:ec:a0:43:ac:6d:3a:98:fd:84:f7:f7:bb:f4:
         41:4b:b2:ca:34:41:4a:69:b2:9c:a1:c4:4a:2b:30:f6:64:f9:
         ed:8c:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:42 2026 by rpki-client