Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
File:                     kd3H2eAtRMa_jGNcHQcV9uicEBI.mft (raw, json)
Hash identifier:          M2RpxjlT3T4BYZXj8P+zp6ScjNutFSg9TyRtA8Wr6JI=
Subject key identifier:   D1:7D:DB:BB:54:2B:46:78:29:5C:71:96:FD:5D:FD:F1:32:9C:0E:D4
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Certificate issuer:       /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial:       019EC2FFF213B75BC3483674C958BA193AA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
Manifest number:          0317
Signing time:             Sat 13 Jun 2026 22:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:13 +0000
Files and hashes:         1: MvpTS49h0GRvY0Tj2YEwLbaS2cM.roa (hash: gDgNzdOYz3KjBH95RxNa3YAdnlDk82nruMEoI3Ezi38=)
                          2: kd3H2eAtRMa_jGNcHQcV9uicEBI.crl (hash: KTJQWvd0GocVA1KLqohl+m6oDmoAOKoG24HE6ISb7U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ff:f2:13:b7:5b:c3:48:36:74:c9:58:ba:19:3a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
        Validity
            Not Before: Jun 13 22:00:13 2026 GMT
            Not After : Jun 14 22:00:13 2026 GMT
        Subject: CN=d17ddbbb542b4678295c7196fd5dfdf1329c0ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:73:27:8c:7d:09:78:1b:55:bc:3c:c1:66:a3:
                    b7:9d:9d:0b:5d:14:64:0a:e0:e8:be:ed:66:17:38:
                    08:a8:42:3c:e9:15:ff:ff:f7:49:62:91:62:e2:6a:
                    91:30:09:7a:5f:18:c2:74:52:30:32:50:c3:43:4a:
                    31:95:20:6b:28:8f:cb:2a:a6:19:90:df:8a:8a:0e:
                    df:e0:6e:37:a4:e0:6c:a4:e8:0b:91:d7:d2:4c:80:
                    9c:1a:e0:7f:5b:fb:14:4e:e3:0d:d4:13:32:7b:99:
                    5c:96:af:bf:18:62:83:03:71:c5:58:48:f2:14:71:
                    ec:57:4f:2f:4e:df:d2:77:67:83:a8:c6:99:d0:a2:
                    06:e5:13:d5:17:92:b7:56:be:fe:19:93:ea:65:a6:
                    e2:83:8e:14:62:69:fe:3d:62:da:aa:44:1c:90:ac:
                    b5:bd:eb:b9:f4:9b:64:e1:57:ce:6b:1f:31:05:e8:
                    7f:4f:87:18:2d:a6:91:a0:92:08:cb:52:15:d6:00:
                    54:49:7f:c5:86:da:89:3c:8b:ed:33:47:c4:06:58:
                    b6:63:9e:c3:bd:e7:8a:42:7d:05:d4:9c:9f:15:5f:
                    07:95:0a:32:96:e7:93:d2:03:0b:79:3d:0f:fa:59:
                    f4:5e:88:c4:15:fe:4d:39:74:bc:26:4b:9c:60:61:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7D:DB:BB:54:2B:46:78:29:5C:71:96:FD:5D:FD:F1:32:9C:0E:D4
            X509v3 Authority Key Identifier:
                keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:0e:07:58:f2:68:2c:0a:a2:f9:3e:64:5a:39:0c:48:66:
         07:c9:67:af:4b:ee:38:40:b5:18:2f:08:88:16:98:a8:73:76:
         c3:5f:28:1a:c0:ef:51:36:42:90:d3:52:2a:ab:be:f3:e6:7f:
         62:62:ab:c9:c6:ec:31:e8:ec:58:ee:5f:a7:18:16:43:6b:07:
         b6:eb:b2:c5:92:ad:98:73:17:5c:d1:65:25:6c:5f:e9:da:71:
         88:c6:27:80:f1:e7:81:c0:90:87:0c:e6:08:9d:f9:23:f7:a3:
         c5:2f:6c:0a:2c:56:6c:86:42:07:0e:96:ba:8e:69:1b:28:4b:
         9c:63:1f:db:a7:18:14:30:c6:3b:15:66:47:28:79:c7:96:af:
         f9:3f:06:04:56:3a:8c:4b:6e:3a:05:4d:6b:99:ff:bd:bd:5f:
         d3:13:e7:4f:75:45:01:11:76:58:7e:b0:5b:c6:3e:c0:f7:43:
         27:f3:f1:69:8a:da:bd:c4:1a:9a:05:bb:aa:b4:6b:46:c0:ad:
         fc:18:41:fc:f4:28:ae:d3:bb:d6:b6:7f:b8:7e:5c:12:e7:80:
         e1:cd:3d:8b:75:e2:06:41:a6:52:62:cd:dc:33:5a:34:af:5e:
         d9:95:d6:aa:c8:8a:85:cc:9e:1e:ab:e9:84:e1:2f:c1:5e:85:
         3b:8e:a9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:43 2026 by rpki-client