Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File:                     Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier:          FMcPHvvK7gEW9gzCkL0Xx+Rkae5bo9YutYndKrSBOGU=
Subject key identifier:   E8:E2:C7:C8:6F:DA:8A:60:BB:EE:BB:97:E9:A4:70:21:F3:10:11:E6
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer:       /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial:       019EBF23C597B9E8583141D77C53350DF29A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 04:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:53 +0000
Files and hashes:         1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: Qc+I/6XQks8DxQp+oXlGDslR70UZyZva7gZxF75Ms0c=)
                          2: Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa (hash: 9OXjDqXqUBHg5Xmpj9SZ8E0O+G30jS5FTAp/zLKlpOg=)
                          3: bn5DIEB7h417zigDbxPNaTfKJVE.roa (hash: 1UP3MaF3B8GgUJNYJAJfcEuya7S1x4U9A8CMZh0i1KQ=)
                          4: cyOHDX6p-R7TeKl3AMCjyWmNpk4.roa (hash: W3OD3F+yUOacAe6j9rvFirA6hItGmVMl9cfQaStd7go=)
                          5: nqDs6IBSsGkgCywT3ZE4Bi2t0zg.roa (hash: jSua4IrdLnQ0ENUU/6d8+tEc1mSQ1r36KeH+Mj/aKtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:c5:97:b9:e8:58:31:41:d7:7c:53:35:0d:f2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
        Validity
            Not Before: Jun 13 04:00:53 2026 GMT
            Not After : Jun 14 04:00:53 2026 GMT
        Subject: CN=e8e2c7c86fda8a60bbeebb97e9a47021f31011e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:59:76:eb:2a:3a:5f:11:dd:20:d6:03:2f:
                    ee:07:ba:82:4d:10:94:25:f5:2c:02:4d:de:73:e8:
                    19:b7:d2:2c:4b:98:56:8a:03:13:c4:b3:ef:5c:fc:
                    51:05:f9:f2:e7:81:ab:51:20:24:78:6a:9a:73:dd:
                    e7:6d:b9:d9:9d:8f:b4:3c:eb:61:70:7b:b8:cd:d3:
                    ad:8b:54:c7:ff:e3:5e:17:7c:3f:40:65:3b:6f:88:
                    ee:5b:05:5b:56:59:1b:b0:62:f4:90:c1:9b:20:2f:
                    c7:7a:0a:17:1c:db:c3:d7:ac:42:c2:ea:b4:81:3a:
                    1e:d7:9b:bf:10:b0:a1:94:63:76:8f:3a:27:78:17:
                    58:2b:df:56:58:32:3f:5c:62:3e:d7:7a:4f:09:49:
                    aa:9e:8e:d6:5a:bb:8f:6e:54:fe:94:86:9e:b3:7c:
                    3d:19:1a:4b:50:fe:c2:7a:18:09:91:f2:b4:3d:76:
                    86:21:97:38:ba:1e:4d:b7:19:45:f4:7f:38:4d:12:
                    9f:1c:8a:d0:03:79:5b:81:1d:ed:7e:f6:4d:c3:a3:
                    0d:6d:d3:3a:93:3c:fc:80:ac:bb:7d:18:38:c4:e2:
                    55:e4:bd:69:34:d0:09:ff:ff:60:6e:28:71:21:38:
                    22:bd:4d:b9:8e:58:7b:3a:d5:66:d6:96:47:23:84:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E2:C7:C8:6F:DA:8A:60:BB:EE:BB:97:E9:A4:70:21:F3:10:11:E6
            X509v3 Authority Key Identifier:
                keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ae:12:c1:9f:5e:8e:0e:5d:33:31:11:fc:62:db:91:33:02:
         09:83:ed:69:ea:0e:4d:53:c3:fe:af:01:96:7d:c9:0b:cf:56:
         35:08:e6:a1:5f:c9:33:45:eb:87:67:d3:f0:67:e5:d6:fc:89:
         75:60:21:e8:0c:2b:2f:89:85:4e:8c:f3:37:4c:d6:00:3c:6a:
         4b:dc:8e:08:52:0a:25:b1:7b:3d:80:f2:eb:b0:0b:93:c8:44:
         4b:eb:af:31:4b:07:b7:6f:04:75:62:cd:97:8f:0f:2d:ac:9c:
         40:28:12:1d:40:2a:6c:86:5d:d8:4d:80:c9:7d:ee:c5:1f:00:
         3f:d8:18:3a:d5:45:0f:7c:17:01:ad:cc:8a:e5:6e:79:5f:b4:
         45:fe:9e:1f:4b:64:e7:6d:8a:de:64:c1:92:c1:d3:72:19:e7:
         d6:d7:72:3c:b1:09:94:7e:81:4a:bf:ff:e8:5f:ad:ab:21:85:
         24:57:d7:d5:a7:db:30:ed:18:8f:fe:4e:56:18:07:49:ee:6b:
         d9:8d:44:56:22:fe:22:55:fe:36:b5:62:09:a1:7c:74:f4:de:
         95:cd:36:c8:19:a1:c9:fc:91:69:18:79:df:17:1a:4a:e3:a8:
         4d:5f:2d:ba:36:71:4d:23:b4:75:50:1e:e9:88:2d:27:b4:47:
         a6:97:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:44 2026 by rpki-client