Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File:                     KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier:          qxWWpN27DX+63GufMuY9wsJI5IZlJ4q+KY4tqnzCStg=
Subject key identifier:   58:41:A0:17:D6:EA:20:65:E9:DF:73:4A:C5:67:C6:8B:F1:3B:D6:B4
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer:       /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial:       019ED34F8899C091619CBF30680DF9B5286C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number:          0A62
Signing time:             Wed 17 Jun 2026 02:01:05 +0000
Manifest this update:     Wed 17 Jun 2026 02:01:05 +0000
Manifest next update:     Thu 18 Jun 2026 02:01:05 +0000
Files and hashes:         1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
                          2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: /mmS2oADMMhaZpXtinDthsVvJpZ/nd/9TlBE5Zb1y84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:88:99:c0:91:61:9c:bf:30:68:0d:f9:b5:28:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
        Validity
            Not Before: Jun 17 02:01:05 2026 GMT
            Not After : Jun 18 02:01:05 2026 GMT
        Subject: CN=5841a017d6ea2065e9df734ac567c68bf13bd6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:fc:5f:c5:09:8a:fb:42:55:4a:02:c2:fc:
                    45:fb:39:43:f5:3a:68:98:63:ec:f2:90:42:ac:b7:
                    16:b9:b1:a1:95:52:ba:5e:a3:ea:f9:59:fc:a8:3a:
                    b4:81:91:0a:a5:53:6a:66:1b:f5:7e:f0:a3:34:b5:
                    5c:60:c7:30:10:a3:05:fa:69:9d:a0:08:d6:e2:e6:
                    64:43:9e:ab:f2:04:6a:52:96:1d:ac:98:89:b1:ff:
                    24:f1:20:3f:ce:52:b8:43:c7:33:57:9e:a7:82:f1:
                    a6:4e:73:b7:4d:72:97:4d:2c:ca:5b:44:b3:1e:2f:
                    bc:16:0d:a7:71:b3:7d:37:b1:4c:29:4a:b1:14:9c:
                    c0:15:77:40:84:46:c3:61:c3:d1:0f:7c:53:92:c8:
                    11:46:96:3d:e7:52:8f:30:e0:27:95:a5:ec:ab:80:
                    28:bf:30:3c:51:98:57:a8:02:39:cb:97:db:08:59:
                    eb:bc:3f:a6:2c:c9:0b:15:8c:46:0e:69:bd:f3:0f:
                    a3:c0:9f:3d:0b:50:03:8e:84:f1:79:85:97:02:64:
                    89:5b:a8:57:51:be:b2:f2:3b:7a:9d:4c:43:c6:c1:
                    c8:34:54:1f:d9:24:5e:d9:e1:3f:57:49:d4:42:2f:
                    75:2c:3a:06:46:f3:3f:89:41:a0:67:05:e9:d8:17:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:41:A0:17:D6:EA:20:65:E9:DF:73:4A:C5:67:C6:8B:F1:3B:D6:B4
            X509v3 Authority Key Identifier:
                keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:06:1f:7c:fd:7f:14:2e:d2:16:83:fe:53:a1:c9:96:32:48:
         28:b1:f2:26:b8:d8:18:82:d9:4f:ac:39:5b:3c:e4:c1:ed:a8:
         56:19:ea:de:74:7c:49:69:9e:1a:74:84:c3:a2:e2:b2:53:c1:
         d2:d4:4b:82:f0:a4:ba:4f:b1:56:e8:04:76:9f:f4:cf:46:5a:
         5e:59:03:3b:d0:1a:9d:27:13:4e:8b:6f:4c:ca:22:d6:2d:25:
         6e:1a:53:7b:8f:a2:67:41:1f:fc:dc:99:98:41:51:67:24:31:
         99:2c:5e:6f:d2:9e:39:23:1a:4a:64:85:dc:64:d8:7c:8d:e7:
         79:8a:69:7f:ba:65:1f:02:a1:5b:4f:2d:26:6b:16:18:97:14:
         95:d5:1c:06:9f:58:42:af:0f:3d:33:f2:db:7f:f2:53:dc:e4:
         1d:cd:a9:5d:be:d5:c4:e0:4b:dd:67:7e:d1:a6:b4:a6:64:2e:
         50:16:16:8f:62:b2:90:7e:94:7f:7f:fb:a2:38:6d:86:dd:11:
         70:0a:e9:47:fd:75:96:fe:97:2a:53:3a:bf:31:27:8f:01:ad:
         9b:5c:b7:86:83:c0:10:96:c3:db:eb:96:43:33:15:81:10:66:
         80:af:05:44:e8:fa:b6:72:91:83:ab:19:99:ff:47:ba:88:70:
         5d:ae:97:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:48:47 2026 by rpki-client