Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File:                     K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier:          BLlhyCQ0yDSdjQbCvFG12bfqpu4nIuzW9IFoVlxvRjw=
Subject key identifier:   B6:B5:82:C9:A9:07:D1:8B:74:99:0D:44:49:3F:DA:54:F8:7F:4C:C8
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer:       /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial:       019FA7BD9A5A276B57ECD14CA19C4F29035A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number:          0353
Signing time:             Tue 28 Jul 2026 08:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:48 +0000
Files and hashes:         1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: NCVrb89B2EKJZWVNDITxV6d675NjC8F2+Ft5f30cCnQ=)
                          2: TV4yZeh5gb-YNu16ne89KzqjkHI.asa (hash: ZF+GnFpj0JJbI8NWDxgtBCaESGA8VYEeovm/zlGZB0A=)
                          3: b2FwzXwPA4h4cgwtnyc60OtTa88.roa (hash: lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=)
                          4: sX-7jKd4Jkup4SzLh7V9fhcXJIY.roa (hash: zRqjfBS/ZWhDgqQc0xO/XDUwPIazRjKs3hCDGDdnfh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:9a:5a:27:6b:57:ec:d1:4c:a1:9c:4f:29:03:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
        Validity
            Not Before: Jul 28 08:00:48 2026 GMT
            Not After : Jul 29 08:00:48 2026 GMT
        Subject: CN=b6b582c9a907d18b74990d44493fda54f87f4cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:93:1d:bc:f3:18:e5:fb:ba:56:4f:23:2f:
                    8f:d6:7b:87:90:b3:b5:f6:6f:7e:00:a0:ad:a9:44:
                    07:88:0f:02:e6:8d:15:f3:31:f5:68:b4:fb:49:31:
                    04:ba:e1:ee:1b:e9:73:13:9e:ce:2d:e3:61:1f:37:
                    75:eb:bc:56:3c:36:1f:e4:6d:e8:37:f8:ed:23:83:
                    ca:50:56:96:d8:4c:e8:2f:ef:a5:56:39:82:e1:20:
                    95:52:ae:df:40:63:7c:f4:c1:6e:9b:ac:2a:a4:a2:
                    bb:40:81:ca:a1:e5:13:6a:00:21:77:bf:a0:fa:ae:
                    e4:19:38:4d:8d:31:11:5b:ee:6a:fa:4f:9c:12:f0:
                    ea:b4:10:61:35:ca:7d:e4:56:3d:3a:82:c2:e3:b1:
                    95:e4:30:4d:c2:86:72:e5:0a:9c:35:79:65:26:2e:
                    5e:d2:71:b5:e8:03:9e:71:9b:df:6c:fc:7f:b0:f1:
                    5e:2e:59:ad:02:81:e1:c0:fe:97:c1:e8:7c:0c:8b:
                    11:bc:c1:6d:52:8f:5a:b6:1c:99:a7:d8:a8:47:8e:
                    dc:b7:1d:22:09:20:ca:ff:83:42:78:50:1a:66:35:
                    15:4c:3f:cc:0c:19:3e:d4:dc:a5:a1:02:fa:be:76:
                    54:ac:16:1a:d2:46:ce:57:d9:24:f5:56:54:ef:89:
                    c2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B5:82:C9:A9:07:D1:8B:74:99:0D:44:49:3F:DA:54:F8:7F:4C:C8
            X509v3 Authority Key Identifier:
                keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:25:a5:e7:d0:20:f3:ae:a5:21:c5:bd:cc:6a:06:80:dd:a3:
         3f:01:cb:16:3a:05:97:4f:ec:55:11:75:7a:26:80:34:8f:72:
         63:b5:95:4c:3a:e5:af:bc:45:0b:9e:6f:02:12:da:8d:a4:e3:
         55:5a:03:f1:27:b6:c7:a8:43:6a:6e:a0:ca:8f:8e:0a:c5:fc:
         75:2b:4e:b4:3b:52:c7:0b:cc:84:98:0c:28:81:a5:be:64:9f:
         be:f8:5d:f5:66:91:d6:ae:97:5a:42:28:a6:14:76:4a:a1:fc:
         fb:bb:bc:56:42:45:7b:96:19:cc:e9:e6:73:f1:61:3c:78:ae:
         b3:5a:4a:49:88:4a:32:22:12:c7:66:a8:1e:ec:3e:50:6b:23:
         ec:ff:06:4d:c2:92:96:2a:e6:58:0e:8a:3b:f3:a9:c9:ba:90:
         60:ac:4a:29:a1:66:94:4f:75:7c:fc:31:c3:cd:3f:90:b9:b7:
         63:c1:25:09:ab:8d:92:f0:30:e6:92:ae:43:5c:7e:b6:69:1c:
         5b:a5:a7:c5:3c:f7:9f:8a:10:37:df:ab:40:43:fc:6e:d9:41:
         22:0c:4e:45:65:c3:d6:8c:0e:ac:96:6f:0f:bb:29:3e:95:07:
         11:3a:dd:03:8e:ad:8e:69:44:74:a5:81:b7:c5:66:85:00:39:
         07:c7:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:40:28 2026 by rpki-client