Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          RYM4rG3QevW/4EUvnWlQtwqoXL8P5UAe/iXBo5Nmt7Q=
Subject key identifier:   B4:23:39:35:06:8A:55:1C:98:B9:28:3B:2B:F5:DD:F8:C5:63:25:28
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       019EC06DD72EFF56D55D622A427F44F2F7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          16BA
Signing time:             Sat 13 Jun 2026 10:01:24 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:24 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:24 +0000
Files and hashes:         1: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (hash: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM=)
                          2: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (hash: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo=)
                          3: DSzDYKP0Eliter60MSyPBC3uoBo.roa (hash: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY=)
                          4: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: c6qzjpo/6V3oAzZatnSK5Igsfg39MfUsNKtmvhQWSM8=)
                          5: o-d6O05K7BPSIDagH_dA7QNFluU.roa (hash: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:d7:2e:ff:56:d5:5d:62:2a:42:7f:44:f2:f7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Jun 13 10:01:24 2026 GMT
            Not After : Jun 14 10:01:24 2026 GMT
        Subject: CN=b4233935068a551c98b9283b2bf5ddf8c5632528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:d5:ba:8b:65:4a:90:79:f5:26:60:b1:88:
                    3a:dd:91:44:73:49:0b:c2:50:2e:87:6c:2b:62:fa:
                    6b:0e:5b:c6:f1:28:29:2b:ad:a3:06:33:a6:89:5a:
                    bc:43:33:34:5c:7f:ae:7a:c3:df:39:b7:05:0f:a7:
                    5b:23:19:ee:79:aa:3d:5e:ab:b7:3a:01:e4:90:92:
                    f9:65:7d:28:78:d4:18:5b:bd:c3:49:fe:2f:6d:4e:
                    fc:5d:a6:b7:7a:3b:62:c4:b1:d9:a9:94:a5:31:97:
                    0f:0a:33:ab:47:02:2a:fd:63:1a:b6:53:cb:d0:2f:
                    9a:0d:76:40:fb:57:b9:f3:10:53:75:f8:ae:fc:ae:
                    87:4d:1c:6c:96:8b:d4:4e:2a:5f:87:10:af:7b:e2:
                    c4:7d:05:6b:7c:5e:ab:68:72:6c:0d:05:08:9d:c1:
                    44:49:e0:48:d1:07:e1:39:55:7a:6b:eb:7f:87:be:
                    80:61:2e:36:d4:02:16:1c:58:15:81:3f:e5:1f:20:
                    7f:3e:48:d6:fb:2d:41:d3:9f:c6:70:5e:bc:a5:fe:
                    71:33:a0:cb:61:21:f3:a6:16:1f:8d:cb:d2:41:12:
                    97:12:4f:06:22:2d:3f:e4:c1:fd:a3:de:58:ed:af:
                    40:15:a7:f5:a5:e6:e2:74:2f:50:ed:a2:86:9e:db:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:23:39:35:06:8A:55:1C:98:B9:28:3B:2B:F5:DD:F8:C5:63:25:28
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:be:08:a6:7e:87:26:90:1b:9e:b7:a7:37:4d:8e:ab:74:a8:
         88:22:91:bf:9a:d8:f7:9c:4f:b5:34:03:85:8e:11:18:c8:f7:
         38:9f:62:a3:6b:b3:a9:91:53:60:47:ee:ca:4e:47:a2:ab:3f:
         df:02:dc:73:d8:51:15:1b:8f:b0:40:1b:95:bc:2d:2f:91:85:
         36:58:df:74:72:8f:9e:e0:55:dc:48:8b:dd:e2:0d:c8:49:fc:
         a0:f1:7a:bd:82:51:3a:e8:85:17:67:ff:53:eb:b5:8d:3d:b5:
         9d:22:21:f4:ee:39:3a:8e:13:9f:5f:6f:d6:b2:f1:77:33:5c:
         6e:be:ab:87:79:19:94:c1:f8:d7:84:bd:45:c4:3f:d6:ba:20:
         f7:b9:67:de:57:5b:85:bf:21:b8:d1:0a:c8:39:99:15:ec:fc:
         2f:3a:4c:5b:66:75:69:e9:fa:6a:c9:60:03:0e:fa:85:7e:9b:
         f7:6f:0d:ed:27:08:78:3f:5d:bd:fb:49:7e:1a:9b:4b:e5:28:
         ad:02:48:7b:fa:39:72:36:71:03:78:ed:f2:8e:e6:70:1c:7a:
         96:c2:a3:1e:a0:1c:ca:0a:c5:48:c1:ac:f7:a0:81:fb:d1:37:
         72:3d:a6:55:45:5c:13:fe:ba:f3:a4:8f:90:b8:19:96:9e:b3:
         e7:a3:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:04:57 2026 by rpki-client