Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File:                     KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier:          pbfbGKaCa270Vhw1RhzHq1QQ4p35sfUO5BYENu9oODA=
Subject key identifier:   91:DD:2B:1B:5D:D4:D8:62:06:95:34:FD:00:AB:10:86:64:CB:DB:09
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer:       /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial:       019D97E1F96A5A22BBDAFCFA803468CBF93D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 20:01:02 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:02 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:02 +0000
Files and hashes:         1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: jE4GB0gUthNE0FDzf1PDH1XV8vVSUtVD99oyeJy4CLE=)
                          2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:f9:6a:5a:22:bb:da:fc:fa:80:34:68:cb:f9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
        Validity
            Not Before: Apr 16 20:01:02 2026 GMT
            Not After : Apr 17 20:01:02 2026 GMT
        Subject: CN=91dd2b1b5dd4d862069534fd00ab108664cbdb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:9d:43:80:55:4c:e0:aa:5c:1c:3c:fe:d2:
                    64:8e:28:59:26:81:be:07:7a:e6:18:ef:9f:a5:89:
                    47:03:f1:b9:f3:e8:81:fd:95:50:b0:e1:44:b6:68:
                    54:ba:a6:5f:e0:94:9c:38:c8:45:2c:a0:f3:d9:b3:
                    a5:8c:b8:14:0a:c6:a6:57:41:f4:a3:7e:03:f0:78:
                    c9:ae:a8:bf:79:9c:4a:c3:49:58:e1:a1:27:82:d2:
                    bf:83:47:67:17:d6:9c:32:6d:f6:f3:78:45:6e:9d:
                    8b:ba:33:c1:60:ef:4d:5f:2b:1d:70:5f:dd:53:00:
                    0e:b1:0e:e1:d8:f2:6f:24:c7:9b:0d:69:14:c4:3d:
                    22:17:68:f0:01:00:33:12:d4:ab:d1:cd:f5:31:a1:
                    06:b4:f6:3b:46:b6:63:ad:54:9b:06:a7:b2:af:86:
                    fd:46:47:30:17:59:5f:ea:24:3b:ba:49:e7:73:9d:
                    71:8d:8a:eb:11:25:f3:4e:2c:6d:1d:c4:0a:3f:7d:
                    84:71:ff:af:27:91:b5:22:b4:d1:ed:5b:a6:d1:2e:
                    b1:e8:7a:1b:7c:3c:b9:d6:04:77:14:92:1f:0f:f3:
                    8b:c9:3e:ce:ef:6f:5b:90:be:4b:b9:e9:c6:67:f0:
                    53:fc:a3:bb:94:fa:d9:08:74:af:e6:9e:f2:0c:69:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DD:2B:1B:5D:D4:D8:62:06:95:34:FD:00:AB:10:86:64:CB:DB:09
            X509v3 Authority Key Identifier:
                keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ee:97:36:1a:d8:a1:d7:5d:bd:e7:30:df:fb:82:9b:9b:cb:
         3d:e5:f3:ce:fd:14:6a:cb:08:6e:ea:e2:e3:60:7f:36:23:a4:
         f0:f3:d6:bd:56:c1:28:48:fa:35:1e:1c:ad:96:83:8f:69:26:
         03:d0:5e:85:50:89:a8:f2:18:c0:1f:29:1b:0e:a2:5f:c5:5d:
         3f:73:4e:eb:71:1c:d4:17:e6:d2:50:c4:a9:7f:bc:48:67:0b:
         a0:df:b8:f8:10:79:20:ba:8c:40:c8:2a:33:c8:a2:ae:e9:84:
         a1:85:d2:6b:43:7c:d1:d2:02:db:b0:88:ab:6e:ac:36:d1:8f:
         3e:28:a4:f7:8b:ef:b1:bf:26:b1:26:46:f3:73:36:1a:7f:3b:
         3c:88:14:97:7e:e9:8f:48:f4:6a:ca:d2:53:f3:b9:58:43:ac:
         99:06:3d:19:17:b4:ed:a8:df:47:61:57:89:f3:b7:29:94:b7:
         c7:4b:5c:ea:83:0a:0b:3b:42:91:90:ad:5a:41:f5:f7:d8:dc:
         ec:9c:f5:fc:14:36:4d:e2:2c:25:d3:6f:98:99:51:a9:02:99:
         20:09:56:ea:b1:ba:19:7d:a4:a7:50:b9:8b:24:74:0e:fe:bc:
         4d:01:41:5e:69:30:7c:dd:2e:d7:da:0f:9a:56:f3:02:c7:1d:
         5e:4a:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:38:45 2026 by rpki-client