Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File:                     kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier:          v1vq6pZSwc5EuwgB+4uCKpYzKRB5fz2//ogDVLVjTXw=
Subject key identifier:   53:18:78:22:7B:A3:10:24:68:31:EB:DE:14:A9:59:CD:B2:87:ED:6C
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer:       /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial:       019CABD989B92580A89F1A96BE19020A30A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number:          0893
Signing time:             Mon 02 Mar 2026 00:01:26 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:26 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:26 +0000
Files and hashes:         1: MXA3c8QX3g7YwiQOnrLTeGWh5fs.roa (hash: E7jF1me4KBNOx1U7XGJgq5UdFci6SFszrBrpba8pjPc=)
                          2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: XtBqoxPkQbpkY2fEsrvLqRMlGJ7SFrdcilRn0436N8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:89:b9:25:80:a8:9f:1a:96:be:19:02:0a:30:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
        Validity
            Not Before: Mar  2 00:01:26 2026 GMT
            Not After : Mar  3 00:01:26 2026 GMT
        Subject: CN=531878227ba310246831ebde14a959cdb287ed6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:68:79:3c:ec:86:1d:03:32:50:df:44:6c:f4:
                    a6:d1:5f:bc:d7:d7:d7:65:71:ff:02:35:35:35:07:
                    88:41:90:2e:d2:7a:d4:09:ee:dd:81:20:42:94:60:
                    76:c0:39:4d:d4:47:e3:d1:6c:cc:5b:f9:a3:79:c0:
                    b4:f7:d6:5d:32:75:71:27:ed:7f:9a:82:4d:28:b4:
                    a6:c5:fa:55:9a:b1:bb:c3:d8:8f:1e:88:6b:1d:bd:
                    79:eb:8d:88:13:dd:cd:f3:2d:7a:83:67:5a:89:c1:
                    01:07:5e:dd:d2:c0:fe:18:fd:f8:ec:7d:ca:d5:23:
                    af:bd:0a:d5:f8:de:c0:60:5f:45:72:35:ed:80:8a:
                    a0:87:b4:1b:81:23:35:54:b2:55:17:f5:36:78:cd:
                    e1:83:61:33:35:cf:ac:13:2c:e5:9d:5d:53:1f:79:
                    fb:f3:60:93:c3:00:5f:14:22:9d:1e:57:80:70:d6:
                    74:b4:88:ab:bd:fb:1f:58:82:c9:86:5b:d2:ec:69:
                    eb:ca:77:a5:10:57:d6:d9:3d:9d:48:c5:58:db:9a:
                    d8:45:6e:33:49:61:75:17:5f:f3:32:ab:aa:47:ef:
                    f8:18:fd:a1:3d:17:18:27:cf:28:4d:63:2c:bc:65:
                    ab:06:c6:81:f5:0a:6c:49:93:a3:30:91:07:7c:45:
                    71:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:18:78:22:7B:A3:10:24:68:31:EB:DE:14:A9:59:CD:B2:87:ED:6C
            X509v3 Authority Key Identifier:
                keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:c7:5a:94:1c:d2:1d:1a:1f:b3:81:b4:5c:c5:c0:0d:a1:
         04:d4:0c:e7:18:0d:9b:cc:6b:0c:36:77:0d:91:fb:41:61:a4:
         bb:c2:36:8e:a9:17:83:bf:36:93:48:a4:df:47:a4:57:2b:d7:
         e5:da:24:1e:91:5b:24:4f:bd:72:b2:f8:01:13:26:3f:76:1e:
         ae:83:59:5f:a8:37:83:4e:04:32:7b:96:b7:2c:d5:20:90:3c:
         a5:f6:10:3b:3d:e1:43:af:3a:4b:b6:59:6e:b1:f1:92:52:03:
         44:ff:4f:44:a7:d3:ef:29:56:95:67:bc:bc:0b:a1:ef:fa:cd:
         05:87:53:69:0e:9d:47:8b:ba:f8:97:c6:0f:4e:d8:88:12:9f:
         13:ed:1d:9f:60:b3:bc:dd:dd:82:9a:b6:fc:c4:6a:b2:d3:9d:
         54:a2:c6:86:70:11:da:2e:12:3a:a8:09:98:d9:b5:44:42:cd:
         78:37:a8:6e:e7:1c:1c:ad:97:75:76:4a:77:59:1f:5e:60:c5:
         e7:4e:41:9c:13:8b:be:09:c5:ed:a2:93:57:93:03:02:a3:90:
         80:64:d5:6f:e1:fb:ba:e4:bb:8f:18:7c:b5:bf:c6:b3:11:7d:
         1c:9c:5c:8a:62:32:6f:40:df:3f:9a:25:18:af:9a:96:ea:31:
         c2:e6:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:42 2026 by rpki-client