Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File:                     idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier:          PzGv1YIop0jn1yXtgoPNK7fhdFpe68QE4roTX8iLd5g=
Subject key identifier:   4D:D8:D3:E7:89:7E:AE:E4:31:3A:7F:82:32:8D:7B:EB:F1:71:D8:93
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer:       /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial:       019EBF5A7F9959194D2B681353EC9F9FC043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number:          045F
Signing time:             Sat 13 Jun 2026 05:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:39 +0000
Files and hashes:         1: Af_5rqEWBhs_t_5t3ubsN4ME7qQ.roa (hash: US3yyitysBySkBj1duM7uaT/kHoh5Ro/nrveWTewP9E=)
                          2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: 5mtz+2Arkcrh+sAxb0HrpoYkr9XydGeaoO/i6rqd+QM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:7f:99:59:19:4d:2b:68:13:53:ec:9f:9f:c0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
        Validity
            Not Before: Jun 13 05:00:39 2026 GMT
            Not After : Jun 14 05:00:39 2026 GMT
        Subject: CN=4dd8d3e7897eaee4313a7f82328d7bebf171d893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:aa:2d:f7:dd:15:01:11:33:be:1f:a3:98:
                    07:c5:e1:95:64:d5:33:40:96:d9:d6:83:ee:59:25:
                    3c:2d:a3:d6:93:25:14:e3:59:ec:ad:bb:13:74:00:
                    d6:f4:b7:09:65:9d:1e:cf:06:c6:4e:86:8a:25:3e:
                    7d:e6:d2:4e:0c:cd:40:3c:2f:59:8c:dc:3e:f7:e7:
                    4e:16:db:39:41:7e:8f:b8:89:6d:b8:68:cd:8d:40:
                    a1:f1:1c:a6:46:bf:db:28:17:b1:1b:3d:18:b3:08:
                    35:e9:fb:ab:e8:d4:8b:ea:66:52:99:a5:a9:52:45:
                    38:dd:99:92:b8:60:b8:fc:25:37:12:94:b6:ae:8f:
                    33:0d:93:0f:51:25:6c:2b:d9:7b:28:c2:7a:34:2c:
                    e3:4e:f6:01:28:d2:28:9c:ca:f1:64:48:03:6b:97:
                    08:00:11:c9:0d:33:e9:b7:9e:8c:83:c3:2e:62:84:
                    fb:fb:d4:62:94:d9:de:68:69:38:59:34:af:de:ae:
                    79:cd:fa:2a:16:f7:2c:f9:7d:9c:cd:68:87:f8:f1:
                    4b:d3:9e:76:03:d4:d5:9c:fd:84:10:4f:21:dc:62:
                    3d:69:c8:cb:0a:cd:8a:34:1a:15:60:04:e0:e3:9f:
                    c8:ca:84:93:f4:1b:e0:51:8c:11:46:68:f8:c1:dc:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D8:D3:E7:89:7E:AE:E4:31:3A:7F:82:32:8D:7B:EB:F1:71:D8:93
            X509v3 Authority Key Identifier:
                keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:25:9c:78:e8:77:3b:6b:18:ec:de:eb:cd:e3:80:42:ab:2c:
         3a:69:6a:38:6f:d2:29:27:ae:6e:20:42:86:fe:ef:a7:4e:b0:
         d2:ce:e0:87:9c:e8:0b:19:d1:3f:e1:76:c1:78:46:dc:d3:c5:
         e9:2d:95:ab:29:81:ac:fd:02:da:91:f1:82:5f:bb:b4:98:65:
         62:ca:77:2d:7c:f3:7e:37:ed:cd:df:73:3c:89:cc:ed:13:eb:
         f3:fc:4d:c8:3e:92:98:b9:0b:63:28:58:25:5c:b7:d3:f6:ea:
         e8:ff:59:13:5b:b2:a0:55:ac:50:a5:bb:8e:60:11:90:c6:6a:
         53:08:33:3e:f5:62:6e:32:76:0d:27:aa:21:d4:a1:75:82:63:
         38:c1:b0:75:90:d2:2b:c7:2c:84:5c:f3:f3:83:42:d8:8f:c1:
         0f:39:b8:d4:9b:c8:d5:15:47:2a:54:fe:f8:3a:c1:56:3f:12:
         28:72:b7:cd:4f:7d:65:2d:35:f1:f6:ff:dc:ce:ae:83:8e:a1:
         59:ce:5c:7c:21:3d:88:4a:b4:b6:cd:f4:0b:41:be:ca:17:1b:
         07:6d:e6:6e:0d:fa:b2:80:7d:16:c1:2a:5b:6a:00:42:96:e5:
         fe:bb:de:14:ef:d9:13:06:49:9b:f2:c2:5b:70:ba:58:04:89:
         ac:fb:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:29 2026 by rpki-client