Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File:                     kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier:          UtX0ZLT4bL18wt2+Ep+Uvvk1bC98Jk+UyJYPI5OYejw=
Subject key identifier:   41:15:7F:B4:C5:57:76:D0:AF:6E:2C:D3:9B:CD:71:CD:11:2F:71:D6
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer:       /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial:       019EBDD99453E3E2ABBDF702CDEC9B313BF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number:          12B6
Signing time:             Fri 12 Jun 2026 22:00:13 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:13 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:13 +0000
Files and hashes:         1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
                          2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: 8V8Hr/ifAYczN0lw4QnwDD9Tqyvey/FusRq+3x/OfH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:94:53:e3:e2:ab:bd:f7:02:cd:ec:9b:31:3b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
        Validity
            Not Before: Jun 12 22:00:13 2026 GMT
            Not After : Jun 13 22:00:13 2026 GMT
        Subject: CN=41157fb4c55776d0af6e2cd39bcd71cd112f71d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:0d:7d:56:5f:54:37:2c:ce:ae:c1:7a:aa:
                    0b:e2:fb:eb:a3:c7:e1:f2:5d:2d:75:ca:59:46:72:
                    29:18:39:24:f9:9a:12:18:ed:ce:59:cf:10:ac:60:
                    4b:16:52:54:dd:a6:21:fb:bc:84:37:93:e3:41:b2:
                    2b:20:a5:7b:1f:60:46:d3:33:65:40:64:b0:b3:3f:
                    01:2a:f4:b1:5e:9e:26:b8:08:34:5e:52:a2:f6:df:
                    b1:c0:fd:fe:14:97:e5:07:c9:ef:c2:2b:87:8d:44:
                    07:25:53:de:30:73:1d:0d:9c:59:6c:55:72:5b:f8:
                    ea:2a:dc:bb:88:53:f5:d5:2b:51:7a:81:48:91:ad:
                    cb:07:46:7c:57:0f:4a:79:67:09:05:65:2d:ec:8c:
                    b0:d4:8c:6e:22:95:7e:ac:ef:0e:60:b3:17:1d:5c:
                    7b:ef:b1:bd:c5:63:e1:2a:35:a9:31:92:f1:8a:b5:
                    5a:88:ea:56:53:a6:c7:c2:de:14:de:5b:74:13:3d:
                    5c:5d:95:5a:65:02:ef:3b:0d:ab:7c:b3:c2:b8:1e:
                    eb:d0:15:6e:fe:e1:89:3c:11:41:49:f6:bc:06:fe:
                    91:42:09:a3:25:29:2e:6d:3a:dd:0c:d6:0e:c4:96:
                    d2:9f:d3:6e:b6:80:f9:a4:9c:be:7d:9a:90:8b:94:
                    c0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:15:7F:B4:C5:57:76:D0:AF:6E:2C:D3:9B:CD:71:CD:11:2F:71:D6
            X509v3 Authority Key Identifier:
                keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c3:83:09:8c:af:67:1d:c6:3d:25:18:47:a8:f6:14:c3:03:
         99:8d:4f:e8:fe:ac:c7:68:27:75:2b:14:f7:d5:28:c1:07:62:
         84:d3:9e:99:85:f1:56:44:73:3d:37:2e:19:cb:64:3c:b3:d8:
         cc:74:f1:bc:03:ce:46:34:a8:8c:cf:e9:d8:f6:55:5b:23:bb:
         e9:d7:91:78:20:ce:f7:e6:0e:b4:9b:9f:0c:74:64:c2:00:b4:
         80:16:9b:16:3e:ef:fe:09:e3:a8:cc:8d:d9:3b:cc:7c:23:a9:
         42:16:41:15:30:63:7f:39:2a:10:77:9d:87:00:38:09:70:ae:
         8a:8d:5e:c9:ec:d1:b0:00:8f:f0:20:cb:ec:29:47:24:0d:9a:
         cf:6b:df:aa:e1:2b:c6:f6:fa:7e:8e:d5:70:81:1c:70:9a:33:
         bc:3d:ac:e2:19:0e:8e:ae:b0:4d:b9:5f:3b:a5:ad:25:79:10:
         0a:f7:bb:50:34:e3:18:7d:d9:7c:29:f5:9e:36:6e:09:36:8b:
         0e:30:15:82:37:0e:a5:35:e6:6b:9a:0d:71:b3:71:2e:41:15:
         af:ef:5e:b9:97:dd:d3:4a:37:79:14:6e:a1:71:86:eb:06:15:
         13:20:ec:cf:31:d8:b0:f5:1a:52:83:f2:08:20:43:81:cc:67:
         c0:02:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:10 2026 by rpki-client