Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File:                     K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier:          Zy+a6qK2FTzw4tUjfdj/j2N83QemxefodYvuiDgsKH8=
Subject key identifier:   BF:D3:62:77:C9:3C:03:0A:AA:79:F3:2C:1D:13:AF:A1:FF:84:C3:EE
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer:       /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial:       019EC0DB24CDF4E63385704F0D080D98DD08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 12:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:47 +0000
Files and hashes:         1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: TOoX7xkP0QdJha7Ck5J2g0YoWapFPzr6Bx4r9C6QXSI=)
                          2: Or9-McsdINXpd2AfMY8CRkBHo-c.roa (hash: Hm0aM5yCfz8g6AbodNDmMSYxdlDqVNZ0I10ycbk2bPE=)
                          3: U4yJmT1ScaT40kywasOQ8O608yQ.roa (hash: 6wuB5jKMzhDthKEXBc2cgRcakDY0stwctJVIuMEfhMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:24:cd:f4:e6:33:85:70:4f:0d:08:0d:98:dd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
        Validity
            Not Before: Jun 13 12:00:47 2026 GMT
            Not After : Jun 14 12:00:47 2026 GMT
        Subject: CN=bfd36277c93c030aaa79f32c1d13afa1ff84c3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:e4:81:0a:73:0c:4f:5e:88:ef:0a:b8:9b:
                    93:3a:d9:0b:36:fb:26:b3:88:e8:ed:a6:2d:ed:4c:
                    f7:e2:4e:9d:e3:1b:a7:37:be:52:9d:88:71:07:6a:
                    86:32:4f:4f:fa:45:08:8f:a0:a4:b3:6b:09:71:b0:
                    80:8b:93:5a:c5:63:67:05:1d:8f:b5:df:0f:dc:c9:
                    ba:8a:29:d4:48:d1:02:34:ff:06:74:34:32:37:9a:
                    72:3e:d9:b7:92:fa:08:9f:06:ba:cc:56:ec:19:7f:
                    2a:90:2e:78:16:f4:cf:88:b5:0d:cb:d4:7f:f5:83:
                    c5:7f:a9:09:5c:be:09:53:7e:65:a4:c2:ca:d8:0c:
                    3c:c7:7c:63:41:e8:4a:45:c8:df:89:cc:e0:de:6e:
                    9b:02:27:d2:14:20:73:aa:84:c7:10:e3:af:5d:9e:
                    42:0a:a2:8c:43:3d:67:93:5e:9c:d1:ad:84:81:b8:
                    2f:e1:e1:96:76:7f:09:89:fc:95:78:b2:6e:6d:86:
                    f3:69:1a:bf:73:d4:3e:6c:03:64:00:b1:9d:d2:46:
                    eb:88:90:66:53:7e:38:a9:4f:12:85:02:a6:83:e8:
                    9b:c3:05:66:26:01:6d:ce:d6:69:61:50:7f:6e:d5:
                    a4:ba:bc:c5:95:ea:87:e5:33:0b:25:ee:1e:cf:6c:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D3:62:77:C9:3C:03:0A:AA:79:F3:2C:1D:13:AF:A1:FF:84:C3:EE
            X509v3 Authority Key Identifier:
                keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b0:03:53:2d:62:21:bb:ab:5d:c5:cd:6e:f8:2b:10:5d:44:
         db:37:6c:7b:9f:2b:47:49:a0:fb:1e:14:7c:61:c2:44:01:36:
         ba:c1:56:4a:e8:14:b5:5f:6e:02:e5:e9:2f:aa:63:a7:ee:94:
         f2:ed:fb:27:4e:e1:b2:9a:f9:f5:05:dc:8e:7f:67:11:79:82:
         4a:45:14:02:df:c8:a3:54:39:84:a8:0c:c7:a6:23:40:9c:08:
         9c:3e:11:b5:f6:e6:67:c0:2b:dc:f6:4d:66:54:e5:54:39:2a:
         e6:8b:59:43:6a:b8:1f:f7:ea:43:22:e2:b7:04:98:38:cb:e9:
         91:b3:90:36:a5:a0:03:f7:da:03:c9:ca:dc:22:6d:69:2a:09:
         d5:73:79:0c:39:ee:fe:c1:86:59:69:3a:af:20:35:c3:ca:f5:
         a9:cc:a1:d5:51:9d:fc:af:c2:d1:49:38:bf:1b:a0:9b:36:34:
         37:c4:00:b8:38:ad:b6:90:b8:6d:c6:f8:50:84:ea:8f:c7:59:
         f6:cb:83:9c:45:16:03:94:0b:ac:f3:42:da:8e:60:19:20:05:
         8e:f2:07:5e:3b:25:29:60:ce:33:9b:0f:69:49:a7:c2:fa:26:
         5c:17:e1:df:9b:ca:2d:1c:d8:a4:32:56:61:24:a9:f7:44:56:
         d3:8a:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:32 2026 by rpki-client