Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File:                     KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier:          Cw1aaI1/7Ga4EiM7F6ljEoJBJQ0dDBtMwB/GxtV1Bl4=
Subject key identifier:   4C:45:B2:E4:27:72:34:03:FA:F5:83:C6:4A:19:D0:68:1C:F8:2A:41
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer:       /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial:       019EC449FDD062844FFB6CBB7A0F88BBFA73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number:          1085
Signing time:             Sun 14 Jun 2026 04:00:43 +0000
Manifest this update:     Sun 14 Jun 2026 04:00:43 +0000
Manifest next update:     Mon 15 Jun 2026 04:00:43 +0000
Files and hashes:         1: 15UE9HDgWyp_cAsmKQd04BSa6H4.roa (hash: pIxWzOfjFzWdadGYH0vQMpRvkDryxRhDbvZeh4lLEUw=)
                          2: GcuCBFhhPLtm6AWump2_50RkipM.roa (hash: AN10LtfSDckqwD3VaI/98tkLVo8/t79z+my+6bUMJos=)
                          3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: h2/cPMyj3U5EYMTmWzDx27HLgFOqHfKv94TmjOJ0V48=)
                          4: bs5yH2megPEoLiq-1Ee8Z68_g6s.roa (hash: bWsVIEeX18Zj1B9Yp3oHbkNqexSpprAqTGKtlbcwk7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:49:fd:d0:62:84:4f:fb:6c:bb:7a:0f:88:bb:fa:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
        Validity
            Not Before: Jun 14 04:00:43 2026 GMT
            Not After : Jun 15 04:00:43 2026 GMT
        Subject: CN=4c45b2e427723403faf583c64a19d0681cf82a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:43:1b:d5:1e:cb:fe:4b:b8:79:76:e0:7a:
                    05:2c:bc:08:b0:e2:73:f3:0f:73:5d:29:46:ca:ca:
                    5e:aa:1d:5a:a0:ff:ae:d1:f4:e6:d4:2e:c2:9c:54:
                    e0:60:ae:34:33:57:33:94:87:47:0a:6f:04:de:67:
                    91:ae:c3:87:fc:5c:72:4a:96:a0:5f:21:d6:0e:f1:
                    e6:45:0c:87:47:1e:3a:88:f9:81:be:84:d2:7e:c2:
                    99:18:61:1b:3c:4c:89:35:3c:a2:39:d1:e0:d3:bc:
                    a0:d0:5f:c0:5d:25:4b:e8:43:af:48:19:69:3a:e7:
                    f5:2b:11:5c:78:07:8d:4d:05:c8:86:b3:4a:96:b9:
                    1d:b9:11:8e:75:ce:80:53:4f:26:ae:5e:ca:82:a6:
                    76:25:e3:a5:16:7b:a9:a4:f4:70:28:75:ed:ab:4d:
                    1f:7a:e4:22:9a:82:78:f7:58:7b:dd:e8:18:18:34:
                    7b:22:ab:3e:c2:0a:6a:28:ed:49:a4:b0:82:69:2a:
                    c7:a2:97:b5:fe:09:8c:c5:53:6c:7f:2a:b4:25:f4:
                    f1:43:e5:14:95:b7:89:62:b8:f5:91:99:1d:76:54:
                    9f:9d:84:66:d2:e6:f0:47:d1:a8:b3:bf:e7:23:56:
                    4d:e8:3e:7d:bb:07:d5:a3:1a:5d:92:99:9d:c3:28:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:45:B2:E4:27:72:34:03:FA:F5:83:C6:4A:19:D0:68:1C:F8:2A:41
            X509v3 Authority Key Identifier:
                keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:86:68:42:fb:86:e0:ad:71:3e:70:00:a9:94:80:60:d8:52:
         24:2f:2a:61:5b:7b:92:e5:bf:9a:34:4a:85:72:c4:1d:e4:9a:
         3a:9b:9c:cb:54:d6:8a:e2:0e:cf:8c:68:cd:1f:9c:35:23:f4:
         2d:04:2a:9f:e3:9c:5c:66:b2:07:05:d7:c5:cb:c3:9b:33:51:
         21:c5:47:77:72:1a:24:8a:c8:56:1f:3f:eb:af:a3:a6:e5:da:
         21:06:ba:f7:79:49:24:97:35:9b:0a:fe:25:a9:fc:6d:8b:cb:
         55:f5:fb:3e:70:c1:02:fe:7b:92:f1:3c:d6:a1:ee:c7:37:b9:
         2e:ff:a0:69:af:bf:df:8c:45:76:5f:fd:59:3c:c5:a7:e1:6c:
         70:61:92:58:48:31:2c:39:fd:6f:60:5a:32:7b:9b:0a:8f:64:
         05:0f:69:5a:d7:5b:03:73:88:c1:76:c7:81:11:da:cd:60:cd:
         f7:91:f9:fa:24:cd:35:55:96:d1:eb:1e:16:86:07:fc:8b:23:
         00:c9:f3:7f:9f:ef:a3:ad:62:f1:b2:1c:a9:0a:d2:2f:79:3d:
         9f:15:de:c9:1d:0a:0a:78:ee:3c:99:41:ad:fc:24:22:8f:c5:
         96:06:09:86:11:1c:4a:41:0d:cd:93:31:d8:14:92:02:a4:35:
         02:44:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:46:47 2026 by rpki-client