Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
File:                     K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json)
Hash identifier:          2/tzVcNHgqDrPgJLoIe4+1Zgxyel7N1wObTJCLjiALc=
Subject key identifier:   51:0F:97:6C:BA:44:9C:F2:20:B6:E8:7C:5D:10:B7:CA:66:E3:B6:D2
Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
Certificate issuer:       /CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Certificate serial:       019EBFC8EFE493A7B08FA5C72B6BC8A74153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
Manifest number:          032A
Signing time:             Sat 13 Jun 2026 07:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:17 +0000
Files and hashes:         1: 86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa (hash: FgOm/4PuINnAyRzINOUNWX0n6lD1Ih45a+4EbNgehTY=)
                          2: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: 6FI8zA5hEz82PrZ27Q7P9op9VvnS1wVY+79/WzxgB0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:ef:e4:93:a7:b0:8f:a5:c7:2b:6b:c8:a7:41:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf
        Validity
            Not Before: Jun 13 07:01:17 2026 GMT
            Not After : Jun 14 07:01:17 2026 GMT
        Subject: CN=510f976cba449cf220b6e87c5d10b7ca66e3b6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:0b:48:ff:58:60:87:aa:17:d6:1e:19:df:
                    ab:a8:53:39:0f:45:22:fc:28:c1:96:41:e6:87:3d:
                    86:ca:d5:ad:3d:f1:b2:57:bf:19:94:fe:a3:38:78:
                    0e:eb:2c:2b:01:70:40:23:45:a9:05:a3:e6:f1:fe:
                    f7:5a:73:fa:d3:ac:79:84:d6:c5:01:19:4e:b9:3f:
                    44:68:78:8c:78:2a:f7:3e:1b:66:57:7a:75:17:24:
                    f3:fe:dd:d8:52:1e:b9:f5:93:7e:9c:d3:17:3f:86:
                    37:9b:a9:ac:21:66:ad:26:bc:f8:e1:d6:c3:49:52:
                    51:bf:df:72:ee:c4:c9:b0:97:aa:cc:0e:2a:81:da:
                    9c:ab:18:e9:63:ea:a7:a1:0f:b9:02:6f:92:fb:7d:
                    32:ed:40:88:f4:93:e7:73:bc:27:de:de:25:82:f0:
                    ec:b4:93:82:ff:71:bb:eb:8e:dd:7a:55:dc:dd:f8:
                    f6:ee:3d:4c:aa:42:db:ca:a4:95:46:a5:b4:74:b9:
                    07:0f:56:69:af:9a:cc:41:9d:a2:9d:24:98:dd:fe:
                    ef:b6:d8:d1:15:9a:1a:33:2c:be:b7:62:4f:69:d6:
                    c2:65:eb:c9:16:f0:cd:dd:ec:b2:a0:5a:f6:7b:d9:
                    61:6c:35:20:1a:89:90:ce:b9:93:5a:e1:28:5b:4b:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0F:97:6C:BA:44:9C:F2:20:B6:E8:7C:5D:10:B7:CA:66:E3:B6:D2
            X509v3 Authority Key Identifier:
                keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9c:74:84:40:e9:4d:84:f2:00:4a:bd:3d:66:3b:fe:a6:cc:
         dc:93:72:8e:d1:84:e1:28:91:48:b1:27:40:b5:c6:7c:0b:bf:
         10:75:d5:75:07:b2:42:21:b9:15:83:04:19:a3:1a:de:1e:7c:
         c8:e4:4a:c5:0e:4a:8c:69:be:93:70:bc:a0:ad:8a:a9:00:ac:
         9f:ca:e5:cb:05:1f:48:ca:c2:77:6d:06:21:1a:d7:4d:62:47:
         d9:b0:3b:c1:ec:bb:1f:3b:0e:c6:bc:49:42:6a:65:c3:51:eb:
         57:dc:e7:e3:40:57:84:47:ba:36:0f:9c:e3:ec:ba:17:8b:19:
         3c:81:ec:a0:5c:80:c0:c5:f0:3e:c3:ae:d9:89:a8:53:e4:a6:
         d3:67:58:2e:9f:cb:d9:de:08:98:8b:2e:f3:15:de:48:0a:b7:
         66:a8:30:47:90:72:e1:00:e2:f1:94:23:62:8f:bd:c7:53:d5:
         d7:e9:ef:dd:1f:97:83:90:93:4d:85:2c:ef:e4:4b:ef:9d:8b:
         2a:d4:1d:c3:6c:0f:2f:9b:e2:8e:24:1d:d1:aa:54:b3:64:a4:
         05:62:c7:c8:7e:88:44:be:53:49:8b:1b:58:d6:53:ba:66:71:
         27:f2:06:9b:66:d9:58:04:ba:74:32:29:57:f7:8a:26:28:f8:
         4f:cd:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:55 2026 by rpki-client