Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File:                     Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier:          zgGefB9eBQz+Ak4C6PHW41hl1tqZS6fXNgtG+9tgJ2A=
Subject key identifier:   27:04:42:E8:E0:02:AC:56:72:0B:E1:EF:6A:25:2D:31:B9:23:49:4F
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer:       /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial:       019FAB638D0E77C6D21A446628B1AF550D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number:          1966
Signing time:             Wed 29 Jul 2026 01:00:55 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:55 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:55 +0000
Files and hashes:         1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: XTRDZL58/kiLMdY9DSfQ5poKQG672bXlMKed1kxJK6w=)
                          2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:8d:0e:77:c6:d2:1a:44:66:28:b1:af:55:0d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
        Validity
            Not Before: Jul 29 01:00:55 2026 GMT
            Not After : Jul 30 01:00:55 2026 GMT
        Subject: CN=270442e8e002ac56720be1ef6a252d31b923494f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:ab:ed:21:b2:de:d6:0b:48:51:1c:04:5f:
                    70:a9:21:38:e4:e6:1c:5a:cf:65:17:13:db:17:f9:
                    d2:bd:e4:cf:7f:a1:14:65:88:6d:40:bd:9f:bc:f2:
                    5f:dc:dd:ec:dd:4a:75:60:16:1a:e7:7f:74:df:20:
                    7f:0b:9f:74:84:21:9b:37:c8:ea:46:4f:c6:bb:f4:
                    22:17:0c:f6:c2:7d:e8:ba:71:46:fe:14:5b:ee:be:
                    fb:4b:a4:ee:3f:17:10:01:1c:c4:aa:e1:9b:1d:bc:
                    df:37:05:20:8e:3a:cf:0d:af:6c:67:01:1c:15:35:
                    f6:e0:df:6f:b1:10:51:4b:8b:8f:41:c2:75:93:d0:
                    6a:f0:fb:4e:bf:a1:eb:ca:03:01:73:2a:7b:b5:37:
                    9c:ff:8d:02:3e:a7:d7:30:c8:22:25:5f:8c:aa:7b:
                    f7:00:3c:e4:e1:6a:90:66:83:fb:f3:8e:90:76:1c:
                    8c:0d:15:5a:d0:c8:82:86:2e:53:75:4b:c1:59:31:
                    f7:aa:ec:1c:e4:ce:8c:18:46:d3:a6:95:ec:d0:60:
                    74:d0:4e:0c:65:25:a8:77:16:06:5a:0f:f4:36:29:
                    08:f1:37:2c:a1:22:f1:b3:62:db:36:03:ad:06:b6:
                    23:89:65:c9:80:03:2a:33:98:ff:4f:92:f1:e9:44:
                    2c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:04:42:E8:E0:02:AC:56:72:0B:E1:EF:6A:25:2D:31:B9:23:49:4F
            X509v3 Authority Key Identifier:
                keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:f0:97:aa:27:94:53:6d:0c:44:ae:2e:8c:a1:97:73:bf:
         52:55:1b:a1:a7:1e:99:45:1b:64:ef:63:56:e9:b4:fe:4c:5e:
         df:23:cf:e4:d1:c7:5c:a0:38:2b:04:2b:25:eb:c9:f2:62:2c:
         59:89:f4:62:75:ab:83:c8:04:35:21:bb:93:44:87:43:06:fd:
         b2:ad:b2:9e:3f:ec:18:0b:8a:fa:b9:99:3a:05:c4:c3:15:20:
         f1:ad:db:ca:b1:a3:a3:f8:f7:18:d8:02:27:c4:1f:9a:95:40:
         c0:07:2d:25:7f:fd:a8:64:fc:fe:4f:b9:6c:9b:4c:2a:be:56:
         4d:bf:ec:6b:3b:7e:11:20:8d:d8:53:00:0b:68:c8:f0:b6:14:
         b3:fd:f9:1f:10:bc:ea:97:9e:30:04:ce:23:e9:3e:9b:2a:64:
         25:0a:37:15:77:1b:a2:bf:f4:e2:8a:98:6d:a2:10:6b:eb:5b:
         5e:c4:55:49:e6:c0:47:d6:6a:8c:9b:92:36:b7:d0:ec:51:f7:
         af:42:fc:be:b6:31:1a:fb:80:69:62:61:24:95:65:56:aa:73:
         ff:52:aa:e6:99:31:fb:6b:72:a1:e3:63:bc:2a:70:f0:c6:d4:
         5b:2b:34:ab:ac:53:17:37:a4:d7:89:e0:4e:16:4a:3b:35:68:
         45:91:9d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:16 2026 by rpki-client