Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File:                     k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier:          t/vklTVXWDQF6Duz4gjCmDaObfkkNLjh6X2DG9YbJg0=
Subject key identifier:   2C:65:D5:0C:7A:26:97:AA:08:5D:9A:2E:80:C6:09:59:9C:B9:13:E6
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer:       /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial:       019EC1EDA7D546B4C250FA138AC6EE0B2594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number:          1040
Signing time:             Sat 13 Jun 2026 17:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:38 +0000
Files and hashes:         1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
                          2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
                          3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: Kjgla3XSJo44Qz/HX+T1+v5+hXNBnNqrfQuFn/DiuCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:a7:d5:46:b4:c2:50:fa:13:8a:c6:ee:0b:25:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
        Validity
            Not Before: Jun 13 17:00:38 2026 GMT
            Not After : Jun 14 17:00:38 2026 GMT
        Subject: CN=2c65d50c7a2697aa085d9a2e80c609599cb913e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:4e:c0:ff:96:c5:f2:13:83:df:b0:c9:dc:
                    da:0d:2b:50:a8:1f:c0:4c:8d:e1:6c:86:68:1e:aa:
                    c2:5d:1b:83:f7:4e:84:dc:30:f9:81:b1:03:84:d2:
                    25:25:a9:17:76:79:e9:5c:c6:8b:7a:b1:70:45:23:
                    7e:49:9e:9f:37:5d:9e:04:d5:95:5b:05:fc:c1:de:
                    8c:d5:99:ca:f5:07:57:b1:06:0d:79:03:3e:2f:c8:
                    94:5f:b6:d1:23:4b:f7:44:bc:43:3c:3a:5b:c7:ae:
                    c3:ea:46:af:e2:40:a8:8a:01:b7:d1:98:56:19:5c:
                    31:19:07:06:4d:7d:26:12:12:e3:33:d1:3b:c6:14:
                    cc:94:8d:b0:40:8e:11:69:af:f4:eb:39:79:e4:83:
                    79:9d:fc:a9:ca:d1:78:b5:43:a0:14:d1:a4:fb:43:
                    69:ca:e9:bc:17:e4:10:70:90:6d:63:6a:50:f2:97:
                    c6:34:01:a1:7b:33:d2:82:90:e4:7f:8b:41:bd:44:
                    4d:61:9a:7f:0a:64:47:5d:35:c8:5d:c0:24:82:94:
                    0f:5c:53:cd:c3:4f:f5:d3:ee:2a:ae:ab:f1:51:a2:
                    77:c7:e9:6f:c1:8a:80:cf:47:64:0c:65:ea:c9:77:
                    c7:80:06:7d:97:2a:95:62:3c:58:88:26:d8:29:31:
                    31:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:65:D5:0C:7A:26:97:AA:08:5D:9A:2E:80:C6:09:59:9C:B9:13:E6
            X509v3 Authority Key Identifier:
                keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d1:20:ef:e7:96:f7:0f:d6:64:e1:88:1f:87:10:21:7e:0e:
         26:57:03:6d:40:8a:c2:b0:32:40:4b:ed:74:ef:3b:fd:83:83:
         f4:b6:15:c8:89:20:6d:a7:50:83:fb:6b:fb:e9:ba:dc:13:51:
         ce:7c:75:00:51:e7:42:a1:d7:4d:61:ef:eb:4f:28:35:76:37:
         0f:36:a4:ae:2f:8d:41:4b:0f:65:0a:fa:3d:2e:e0:d6:77:84:
         e1:b6:eb:06:c2:85:13:ad:f3:b5:7b:07:f9:dd:01:9a:0b:c6:
         6f:42:e3:f3:7e:66:53:53:13:92:9a:54:97:ba:d2:18:de:a9:
         17:45:79:3b:ed:ca:e8:92:66:18:f5:c2:16:e7:d5:70:fb:73:
         30:a9:74:b1:71:8b:e5:5f:a4:53:93:3b:c3:ed:da:24:66:3f:
         55:94:bc:77:da:ef:ef:c8:33:8d:33:2a:fe:37:20:a4:0e:89:
         77:85:f1:b6:3d:c3:a9:36:8c:04:c2:4b:c9:0b:2a:79:47:34:
         e4:b4:e8:e8:44:90:6e:b4:45:18:54:72:fe:c4:2c:b8:76:7c:
         fb:20:75:76:43:8e:38:65:55:5b:67:c7:aa:75:70:9b:43:e8:
         37:c0:51:0b:4d:6f:c7:05:a3:a8:fb:70:de:1b:23:3e:dc:e3:
         c4:49:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:52 2026 by rpki-client