Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
File:                     kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json)
Hash identifier:          1MdSek6pM9VAp9xohA8UQhn6aukRjnzS+uPW/pR6lac=
Subject key identifier:   37:B2:09:3D:2F:8B:62:BA:DF:80:BB:95:B2:C8:FD:8A:30:EA:E3:D2
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Certificate issuer:       /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial:       019EC0A41FFC7EF268AB5BAD6C418B9DA0D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 11:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:41 +0000
Files and hashes:         1: FtTJzPkf-_88xIHu--X3c9IY9io.roa (hash: +RLOecQj9Ebpgf8gHXNoECBgbn6HhMEJfLnzjcBP8tQ=)
                          2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: KXoLQ8Be2ZVSl7mhMrUg6iWYWAsN3tQxqoMjATjtI9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:1f:fc:7e:f2:68:ab:5b:ad:6c:41:8b:9d:a0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
        Validity
            Not Before: Jun 13 11:00:41 2026 GMT
            Not After : Jun 14 11:00:41 2026 GMT
        Subject: CN=37b2093d2f8b62badf80bb95b2c8fd8a30eae3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:62:68:33:e8:30:86:0b:32:b2:88:be:1c:
                    76:31:e6:65:4c:0d:45:f1:fc:8d:e7:b5:91:d4:de:
                    fb:8b:46:e4:78:26:fc:8f:20:70:35:49:8f:bf:a1:
                    35:9a:bc:3a:6f:b1:88:b4:81:fd:0c:d5:1c:a7:15:
                    12:3c:c0:9c:bc:ea:94:18:ac:ee:cb:7f:2d:13:b9:
                    04:83:55:5f:33:88:97:db:eb:44:c1:50:c6:31:92:
                    d1:0c:52:44:c7:ec:f1:b9:11:9c:77:7c:b3:ba:d0:
                    bb:ef:94:b2:8c:64:ca:ef:bb:3d:73:3a:2a:f5:f8:
                    ea:e0:32:c8:23:c7:21:48:07:fc:a4:f9:9f:87:d2:
                    50:c6:92:d3:0c:b4:cb:7c:44:e4:d9:a8:71:1b:60:
                    76:aa:59:7c:89:34:53:6c:40:a0:12:7a:0a:70:d1:
                    84:b4:49:16:25:c3:e0:32:8f:f2:e7:cc:72:bf:d5:
                    02:11:8c:53:6c:e3:e1:37:37:c3:7b:15:9d:52:c7:
                    8f:a1:0e:c9:dc:95:0f:4f:95:d8:ac:4a:a3:7d:40:
                    fc:92:7b:62:08:d8:a4:31:46:1b:6f:fe:5a:f5:c2:
                    d3:88:a5:cd:75:9c:76:90:16:4e:9f:f1:7b:23:bf:
                    f0:0c:5b:92:67:73:b6:05:68:2c:e2:9a:6b:73:c7:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B2:09:3D:2F:8B:62:BA:DF:80:BB:95:B2:C8:FD:8A:30:EA:E3:D2
            X509v3 Authority Key Identifier:
                keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:21:11:5e:82:50:bc:19:d5:f7:76:a1:62:18:05:63:8a:96:
         20:e0:1c:2a:4d:5a:11:a0:9b:a7:f9:10:a0:46:ea:34:01:86:
         91:51:69:d7:cb:eb:8f:6c:d1:b8:87:55:3c:27:f1:29:ea:b4:
         a1:4c:df:34:86:ec:59:6b:5e:17:00:57:10:5a:d3:14:32:fb:
         84:f2:5b:dc:e9:2f:b2:f2:34:cd:9a:b2:9d:a7:85:7c:b6:06:
         67:2f:97:d3:39:70:e3:fa:cf:19:6f:25:58:98:2e:78:3a:ec:
         62:ea:ac:91:00:e2:b4:2e:dc:1b:03:c5:09:d2:ae:ec:25:73:
         5b:2d:f7:42:93:00:a4:2e:ad:32:d7:e1:db:f2:4e:5d:a4:08:
         ca:69:15:b4:81:ca:7b:e0:26:46:39:8f:02:5f:fb:97:08:c3:
         3e:f1:d2:7a:f1:55:96:eb:66:d5:ba:fc:81:0e:94:7d:14:bd:
         6c:b0:e1:5c:1a:a2:27:02:62:f3:7d:fe:f3:44:40:1f:27:25:
         75:ce:1a:80:00:e1:5a:03:93:4c:ef:1e:ac:f2:d9:a5:b8:e7:
         83:ba:ed:ff:2b:15:d0:32:68:7c:c2:fd:97:21:52:74:9b:5c:
         4d:9c:5a:82:77:1a:bc:cb:0d:bf:57:71:94:8a:29:3e:a5:00:
         c6:78:0a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApB/8fvJoq1utbEGLnaDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNmY4MGMzNWYyMDJlYjAyNzY2NDE5YmZiN2QyODIxMjVm
ZmUxNTgwHhcNMjYwNjEzMTEwMDQxWhcNMjYwNjE0MTEwMDQxWjAzMTEwLwYDVQQD
EygzN2IyMDkzZDJmOGI2MmJhZGY4MGJiOTViMmM4ZmQ4YTMwZWFlM2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwdiaDPoMIYLMrKIvhx2MeZlTA1F
8fyN57WR1N77i0bkeCb8jyBwNUmPv6E1mrw6b7GItIH9DNUcpxUSPMCcvOqUGKzu
y38tE7kEg1VfM4iX2+tEwVDGMZLRDFJEx+zxuRGcd3yzutC775SyjGTK77s9czoq
9fjq4DLII8chSAf8pPmfh9JQxpLTDLTLfETk2ahxG2B2qll8iTRTbECgEnoKcNGE
tEkWJcPgMo/y58xyv9UCEYxTbOPhNzfDexWdUsePoQ7J3JUPT5XYrEqjfUD8knti
CNikMUYbb/5a9cLTiKXNdZx2kBZOn/F7I7/wDFuSZ3O2BWgs4pprc8dw0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeyCT0vi2K634C7lbLI/Yow6uPSMB8GA1UdIwQY
MBaAFJFvgMNfIC6wJ2ZBm/t9KCEl/+FYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2Yt
YzEwY2M5NTNiZDFiLzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2YtYzEwY2M5NTNiZDFi
LzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyERXoJQ
vBnV93ahYhgFY4qWIOAcKk1aEaCbp/kQoEbqNAGGkVFp18vrj2zRuIdVPCfxKeq0
oUzfNIbsWWteFwBXEFrTFDL7hPJb3OkvsvI0zZqynaeFfLYGZy+X0zlw4/rPGW8l
WJgueDrsYuqskQDitC7cGwPFCdKu7CVzWy33QpMApC6tMtfh2/JOXaQIymkVtIHK
e+AmRjmPAl/7lwjDPvHSevFVlutm1br8gQ6UfRS9bLDhXBqiJwJi833+80RAHycl
dc4agADhWgOTTO8erPLZpbjng7rt/ysV0DJofML9lyFSdJtcTZxagncavMsNv1dx
lIopPqUAxngKZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:14 2026 by rpki-client