Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          uq+XYxjNJLJElZM2OzLnYhZXKR1BiBqHhCgZsBTtj9o=
Subject key identifier:   CF:2E:1B:2E:83:8C:41:0C:DF:5A:83:AD:42:19:1A:3C:27:BC:8F:DF
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       019D9A7519ED3734632AABBD3B322A299950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0E23
Signing time:             Fri 17 Apr 2026 08:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:58 +0000
Files and hashes:         1: 5pnLPx_2hpy3VygTZwAGCHra7kE.roa (hash: 1oHSHq2YY2wBUKVcldVeO85+GN6kBhjSJ3cQgz8RWLo=)
                          2: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: j90ijJaEqv52naTXifB6sL0J5P++gBRPoYg809OFTMc=)
                          3: KnbEX4UkCWaV7O0wuCkr7A4YupA.roa (hash: LLlXw5GN0fkhrRlbhrlywwISvztA4DkGKjffqRJI8NQ=)
                          4: ZlWEEzGYFVqbln14VFTl7vY0xlM.roa (hash: 4+sTiTIEM7Q8B0+aFICyPTm4dchReZ/Z4NBsp9md7hs=)
                          5: hARTp8Mibx8WODEuOIUHpvobncw.roa (hash: xaYjb6X7y2C4MO+aFX5sY8YM6es27SbRjICMp6w4VYw=)
                          6: yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa (hash: Yz2sZPO7RTS7G2x7CfUC5DUG1B3ygbMjzbaefkWF+54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:19:ed:37:34:63:2a:ab:bd:3b:32:2a:29:99:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Apr 17 08:00:58 2026 GMT
            Not After : Apr 18 08:00:58 2026 GMT
        Subject: CN=cf2e1b2e838c410cdf5a83ad42191a3c27bc8fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:ed:d3:65:4b:09:12:c2:5f:7a:06:e8:d8:
                    a3:86:69:bd:37:ec:54:48:ca:59:4e:0d:0a:03:18:
                    e8:bc:34:ba:2e:9f:a3:26:91:07:e6:ae:f1:e4:28:
                    44:2d:4b:fc:f7:b5:c0:e6:cf:c0:f2:4d:15:b8:e0:
                    7b:25:aa:2a:39:a8:e1:4f:5f:c9:d1:09:32:34:e7:
                    ff:2a:cc:66:a0:ab:f7:08:72:00:e5:d3:36:d0:59:
                    29:07:91:a3:45:8c:07:ea:72:a3:ac:1e:37:1c:09:
                    b1:63:22:04:47:f7:fa:56:cd:50:fa:c9:cb:ba:31:
                    be:a9:1e:7a:10:75:56:ec:b0:c3:2f:a9:04:12:e2:
                    f6:8b:37:04:16:48:9c:02:7d:b9:46:93:54:91:47:
                    c0:b2:7e:14:49:5a:0c:38:41:ce:db:22:e0:c8:70:
                    24:3d:c0:fe:b0:c4:e0:42:2c:aa:ae:e1:3f:e6:ce:
                    88:4a:0e:c0:b3:df:6d:0a:9f:e8:b7:78:b9:5a:62:
                    db:8d:1d:c4:21:81:c0:88:23:5a:76:90:75:cf:fb:
                    55:f8:10:05:54:81:af:91:4e:89:88:db:83:fb:8b:
                    88:9d:e6:41:a2:c2:93:ac:93:2a:f4:ba:fd:c7:34:
                    b4:3b:25:4d:db:63:d5:36:54:e5:93:ab:49:90:0b:
                    c4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2E:1B:2E:83:8C:41:0C:DF:5A:83:AD:42:19:1A:3C:27:BC:8F:DF
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:44:b5:c4:3f:1f:9a:59:fe:3a:fd:c5:a6:a1:0b:52:6d:a4:
         bb:ef:1d:02:c2:a4:a5:f2:b6:04:3d:05:bf:38:e9:76:cf:81:
         dc:82:d4:52:ae:6e:d6:14:02:9a:8b:ec:f1:ac:b0:1f:c8:1f:
         80:04:47:05:b9:b2:5a:e3:f7:b3:68:2c:e0:f5:7b:36:53:28:
         57:eb:8a:48:7a:99:ed:fc:dd:a0:54:52:ea:20:76:5f:f6:53:
         a5:2f:83:9c:3a:df:16:1a:19:36:ae:7d:f7:ff:00:14:5d:46:
         c6:6a:e6:10:48:d0:cf:a0:cc:af:ad:db:d7:40:40:66:38:88:
         95:3d:1e:bb:ac:f3:7f:68:20:55:9f:d6:9f:81:dd:b0:d4:40:
         7f:7e:83:78:52:3d:31:a2:5e:e4:d4:fc:76:26:9c:e5:ea:f6:
         e5:99:68:59:55:d8:90:aa:06:7e:85:25:7c:fb:f2:a5:5a:09:
         40:32:9c:24:0f:a2:16:84:ba:c3:9f:3c:67:59:b6:f7:c7:25:
         e1:2f:75:1f:b6:e3:3a:80:93:87:a9:c0:10:8b:cf:87:df:2d:
         01:7e:e2:6a:c3:f5:b3:44:76:45:16:8b:80:db:34:8b:10:80:
         f9:58:ee:2c:4d:58:e3:fb:1f:77:4f:34:a4:b5:ca:3f:84:cd:
         2e:e4:09:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:44 2026 by rpki-client