Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File:                     mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier:          RSDRhaXsgCk24hYX8hph6uOgwsBwacExdqfCOZRgCRM=
Subject key identifier:   B9:3E:B4:CB:1E:58:E8:A1:4E:AC:29:D7:CF:93:BD:76:0D:56:FD:CE
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer:       /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial:       019EC2C928922FD41F1F1ACEB7A0A4ED666D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number:          14F0
Signing time:             Sat 13 Jun 2026 21:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:23 +0000
Files and hashes:         1: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: emjQGARwKqrsKAmBz7jhbFTbwk1Hp3uo9DgeOgbUKOI=)
                          2: ob5sPFaRhRWX8YvpmsOhf_L42qk.roa (hash: F2rzq+6Lw+VZW+xrLLgUfoPJgDVHj07vj+YUG1nzWfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:28:92:2f:d4:1f:1f:1a:ce:b7:a0:a4:ed:66:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
        Validity
            Not Before: Jun 13 21:00:23 2026 GMT
            Not After : Jun 14 21:00:23 2026 GMT
        Subject: CN=b93eb4cb1e58e8a14eac29d7cf93bd760d56fdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:ee:93:9e:94:2f:bc:6a:2f:66:8e:0c:1e:
                    31:ee:e3:21:a6:da:44:5a:50:1d:8f:e2:42:f2:d1:
                    73:2c:3f:65:13:a3:e4:3e:7c:82:98:e6:41:25:10:
                    d4:60:12:8e:c9:7d:74:2c:a3:4d:b0:fe:8c:97:d3:
                    d8:55:7b:30:57:6a:b5:98:46:d3:9a:d8:ef:0e:87:
                    6c:a5:42:ec:9a:ef:55:96:30:31:40:18:65:a2:a8:
                    8e:3a:3e:18:8c:09:db:5e:b2:78:cc:c3:21:fb:e1:
                    30:77:1e:eb:cb:f0:5e:be:7f:ba:af:a8:d2:e7:9c:
                    d2:0f:4a:d0:a0:3c:af:c3:22:1d:be:0f:df:bb:94:
                    6c:56:d7:f5:c8:05:28:3f:ee:f7:00:6c:47:52:75:
                    8d:ab:dc:cd:2d:18:d3:8e:4f:5b:d4:cb:9d:0e:fd:
                    da:21:24:30:88:90:4c:76:dc:18:ed:0c:31:7f:9a:
                    ae:e0:c9:3b:38:69:d1:92:c6:fe:c7:1e:58:82:a8:
                    99:40:40:80:aa:95:46:1f:16:f7:23:c1:a8:4e:93:
                    c5:19:7f:42:3d:48:95:18:9d:4d:62:03:4c:05:4e:
                    8b:ba:8c:d0:ab:2f:dd:1a:99:da:da:31:46:3b:11:
                    9e:72:d0:24:1e:12:1c:5d:6b:08:07:64:e7:df:05:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3E:B4:CB:1E:58:E8:A1:4E:AC:29:D7:CF:93:BD:76:0D:56:FD:CE
            X509v3 Authority Key Identifier:
                keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:12:ab:26:1e:1f:e9:66:8c:c6:20:60:e7:51:40:17:6c:ae:
         a8:3b:bd:7e:f5:bd:a3:42:e6:a7:02:40:03:5d:e2:a3:6c:25:
         d0:8e:e9:e9:16:df:1c:89:41:16:d9:dc:42:fa:29:a5:ba:7b:
         c4:ff:e1:8e:41:b9:9b:8a:9e:45:e7:ea:4c:67:05:6b:9f:8b:
         4d:0b:c4:17:20:3f:81:b0:bb:20:38:92:bf:b4:b8:56:e4:89:
         03:a2:c1:1c:07:8f:47:0f:0a:74:f7:4a:ec:90:68:bd:52:8c:
         c7:65:fa:f5:7c:eb:16:c6:7d:c1:d1:db:cb:8d:f1:39:24:8c:
         6c:aa:b8:ff:5e:f0:2d:56:d2:a8:d7:a7:c6:b0:5a:1c:e1:73:
         be:b5:51:52:b6:d2:bb:9e:57:aa:38:78:7e:94:36:a2:29:75:
         0a:80:b6:d6:cc:de:61:3a:63:de:1b:c9:50:c1:29:6a:85:b9:
         df:0e:20:69:4b:39:66:7c:4a:bd:3d:38:a5:3b:06:88:56:7a:
         89:40:24:8b:9e:a4:7b:5c:f3:fc:2a:79:79:71:81:c9:49:91:
         24:0e:0b:a5:d4:12:07:fc:e6:68:0a:ed:01:9a:da:84:3f:3f:
         41:a7:ac:63:8b:cb:78:97:8f:1f:b2:1f:de:75:2a:fc:26:d4:
         8e:a3:7f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:57:00 2026 by rpki-client