Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File:                     kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier:          27Wxfji5s50oqOWu2RSZa+frdzR8eao1n+Fl+ojPssE=
Subject key identifier:   0A:40:5A:33:F0:3D:EB:BC:22:C2:CE:E8:7C:45:36:69:88:E5:C1:5A
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer:       /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial:       019EC06DC95E9C73F5DE2CF85B7FFA611EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number:          1833
Signing time:             Sat 13 Jun 2026 10:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:20 +0000
Files and hashes:         1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
                          2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: Xr3X4yyODAhytgap1iShfDAEYNOsuUhw/XmEUsQngB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:c9:5e:9c:73:f5:de:2c:f8:5b:7f:fa:61:1e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
        Validity
            Not Before: Jun 13 10:01:20 2026 GMT
            Not After : Jun 14 10:01:20 2026 GMT
        Subject: CN=0a405a33f03debbc22c2cee87c45366988e5c15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:1d:cf:42:fc:bc:fc:e1:15:14:f6:df:46:
                    39:a8:22:b8:4e:92:0d:f8:f0:fc:ac:65:cd:a6:fd:
                    52:f6:70:67:c6:21:0e:cf:6a:29:d4:80:13:a0:2b:
                    62:9b:0d:b0:f8:5b:9f:db:03:fb:a7:e9:75:3f:33:
                    f4:43:21:29:65:d6:18:77:c6:bf:c1:a8:9a:b5:43:
                    e4:da:ca:88:71:4f:96:c1:b2:ed:4d:97:82:5c:4b:
                    5a:7d:6c:b6:d4:76:6b:47:8e:83:bc:11:ed:8c:1b:
                    65:12:7c:20:b4:60:7a:74:02:a1:86:ae:0a:d3:cf:
                    16:10:61:d6:e3:34:f0:f6:23:35:a9:57:3a:d4:02:
                    ce:81:bb:0e:fa:cd:63:c4:28:e0:7f:ea:60:6b:ea:
                    f2:e0:77:6e:a2:f6:79:c1:43:f5:34:6d:37:7f:73:
                    06:57:36:d6:1a:78:66:c3:9a:0d:96:97:d8:19:0e:
                    04:a9:6a:73:2a:cc:a0:77:8b:ef:cc:42:c5:93:86:
                    31:43:b1:b8:9b:22:cb:0e:67:cb:c5:fe:85:dd:b4:
                    ba:78:55:5d:d0:a0:e8:83:59:7a:a3:82:e8:12:83:
                    98:89:49:98:99:75:ce:00:81:e3:ee:45:26:16:2a:
                    40:e6:ad:fe:da:04:7f:ef:17:25:86:e8:68:f7:4b:
                    77:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:40:5A:33:F0:3D:EB:BC:22:C2:CE:E8:7C:45:36:69:88:E5:C1:5A
            X509v3 Authority Key Identifier:
                keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a8:9a:4c:d5:d8:02:33:20:1d:c3:5f:f3:ae:32:7c:a7:8c:
         83:17:60:71:27:8d:31:cb:fb:bb:32:2e:3c:8b:60:52:17:e8:
         75:92:3e:30:95:ff:64:ee:c2:c9:2e:6f:34:5f:61:b9:36:db:
         2e:94:ae:3c:a7:63:37:83:b4:85:e0:38:1e:d5:09:50:e5:82:
         94:08:8e:9e:d4:86:df:3e:1d:28:18:96:4a:37:68:c8:30:94:
         c2:9d:52:9b:c7:15:3d:df:cf:fe:f3:32:e7:7f:b8:22:a7:f8:
         bd:7f:78:61:be:a0:8a:97:0b:eb:3c:0c:b6:c0:5d:34:81:1f:
         6d:1f:1f:0e:55:a7:01:50:6f:d1:71:61:98:d1:0c:ee:25:e0:
         e6:f3:4b:19:b9:e4:3f:6d:ed:04:75:f7:3b:ba:bf:12:44:b7:
         2e:84:87:c0:59:9f:44:31:e0:da:c3:ae:54:47:27:52:c1:9c:
         0f:4b:80:97:47:e9:57:47:8c:bd:61:76:9a:01:d2:9a:a5:ad:
         bb:3e:f9:f4:4a:ef:fb:c1:c3:93:66:18:9f:46:50:d2:09:07:
         03:8c:ef:3a:bb:04:04:7c:4c:6f:f3:a8:02:3a:f6:c2:2f:68:
         b7:fe:6f:33:5e:69:74:41:2f:22:50:ae:cb:94:a1:b3:ec:8f:
         a1:d9:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:56:36 2026 by rpki-client