Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
File:                     KHTka_Y26mPl0SNi9VG4CydxR4A.mft (raw, json)
Hash identifier:          3e41lR9Q/7tkMAu0pDlcJtzey0AXvpw1RPtbAHRABk0=
Subject key identifier:   11:03:51:41:6B:9E:53:3B:87:4A:7B:FA:02:DD:07:68:7B:26:89:7D
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Certificate issuer:       /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial:       019CAB3453BC003EC46DE9C833509E68620E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
Manifest number:          1854
Signing time:             Sun 01 Mar 2026 21:00:59 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:59 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:59 +0000
Files and hashes:         1: 9Gw91riyJOvWdO1UGfwpGVU9DEE.roa (hash: Ly1IL/BVXWgH9KBecBDNaAQzuSy9DkifByJn+f8EHH8=)
                          2: BnOgunmIqHqBKFwZE6Xibr5iLQE.roa (hash: 3glyWq/lhdplqPwBOhZY42x6RX3FaqrpH1fRgyoCtik=)
                          3: KHTka_Y26mPl0SNi9VG4CydxR4A.crl (hash: 4jY3vbNguM+axMdbPQadFKY7OFEM5EH2cN9m4uSBFMc=)
                          4: WhXtoavVfH7JG2T7apw-QG5zid0.roa (hash: U4pIdKJKn4J4SIlT+YgTWJOxDgxDvJtMszi6mvhVfHY=)
                          5: iv3ySpiG9hKEd0IHT1uP-bp6Uh4.roa (hash: h/a4jbV0u98/g4ZmPoA9cn/DFGG2qqlcGEnesiqVsVs=)
                          6: yN51QkuGxny069xWkSdZbBfMMQ8.roa (hash: DQM4ovM4ArlRPSqcYiLYdUKp5NTy96Mos+hwEgV7qsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:53:bc:00:3e:c4:6d:e9:c8:33:50:9e:68:62:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
        Validity
            Not Before: Mar  1 21:00:59 2026 GMT
            Not After : Mar  2 21:00:59 2026 GMT
        Subject: CN=110351416b9e533b874a7bfa02dd07687b26897d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:83:2b:f7:de:14:73:64:7e:65:23:d8:48:4e:
                    29:a0:7d:2f:92:7f:59:da:42:60:1f:3f:27:25:0d:
                    20:d9:fc:6e:fc:2f:53:58:8d:c4:08:56:d6:f5:85:
                    47:71:19:02:6c:4b:31:16:13:fe:15:72:6f:48:8a:
                    93:d4:8a:ee:f1:c7:0b:93:76:1e:c3:21:05:e7:fb:
                    8b:45:87:1a:0c:19:f0:c1:56:69:da:2b:d1:18:30:
                    7d:17:ba:ae:bb:96:b6:72:f0:09:08:85:15:09:7a:
                    39:1e:2b:9d:80:b1:cb:d8:5c:8a:17:92:48:ee:9f:
                    72:37:b8:1f:8d:9b:51:8f:66:1e:32:ca:e4:06:ec:
                    b5:41:51:ae:07:fc:9a:db:dc:74:14:ee:c2:80:26:
                    6a:55:54:46:51:95:36:de:9c:ef:29:1c:8e:6b:81:
                    73:58:4a:5c:03:ac:70:a7:40:49:ba:46:5c:a8:2d:
                    71:a7:26:1d:60:f3:b5:6b:f6:22:b7:3a:ff:46:2b:
                    08:b3:86:ea:e3:fe:c1:3c:37:4b:88:c6:2a:8d:77:
                    72:73:15:5b:58:a9:32:af:ea:91:b5:c2:5a:d6:6c:
                    6d:35:07:69:da:b7:15:a2:79:8a:41:dd:ed:e7:6b:
                    80:7a:49:23:68:61:f2:d4:af:e3:33:68:86:e9:a7:
                    fe:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:03:51:41:6B:9E:53:3B:87:4A:7B:FA:02:DD:07:68:7B:26:89:7D
            X509v3 Authority Key Identifier:
                keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:22:c1:5a:2b:f3:7e:69:79:7d:eb:5e:2c:ec:e6:ff:f4:cc:
         5f:39:1a:d0:f5:3c:e5:6d:ba:3d:22:64:80:8e:f0:6b:31:dd:
         fc:39:47:f8:b5:ca:63:4e:d7:8b:88:b9:50:1e:09:cb:3c:cc:
         6b:d6:10:90:23:de:b0:5f:3c:cb:cd:24:1b:7e:fb:42:a0:42:
         8e:10:b0:a3:0e:5d:c9:21:1f:c9:7f:00:a9:9b:f5:cd:74:10:
         b3:41:ad:ab:a0:93:ac:32:73:c6:75:8f:1c:dd:ba:d8:0e:b3:
         25:7c:d9:fe:83:e7:18:ef:28:3b:64:ab:72:dd:e1:e7:71:0a:
         ff:19:63:b5:92:c9:01:2a:af:c2:c6:98:e9:8f:48:e8:77:da:
         7f:f3:4d:87:1c:54:51:c9:04:17:23:81:a0:fd:c6:4e:25:f2:
         6a:47:a7:fe:b1:75:ac:cb:ad:4f:6b:b8:66:c4:d4:65:08:83:
         a6:25:e7:75:18:28:20:0b:22:d2:17:b7:81:97:6d:23:f1:7d:
         b5:7a:d9:13:85:34:7b:2d:fc:92:37:56:a5:38:86:fe:cf:55:
         64:ff:6b:36:1c:3c:be:7b:00:bf:d0:57:46:cb:d5:c0:57:0d:
         97:c7:d7:65:a1:a7:df:82:e6:a4:c9:60:75:df:03:d6:cb:f6:
         e6:f0:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:04 2026 by rpki-client