Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File:                     E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier:          lbc5TeqxwQR8Pu/ucMYA4O7wSQuGFfYPjHpL5C6jRNY=
Subject key identifier:   25:DF:D1:CA:30:AF:49:24:1B:3D:51:23:CD:8C:0A:60:0E:CD:78:5E
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       019D9B5064F738A6F7D8486A5A39C1D62A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number:          1491
Signing time:             Fri 17 Apr 2026 12:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:30 +0000
Files and hashes:         1: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: ebP0j7wSnaP/T87kkTf2fuvLDDP+2JBYWzTVv1/TM/w=)
                          2: QVZhA_jze4qVBDwSnQUmMxu1j6E.roa (hash: AWgQCld4mxknn1NvyY+yVEyOo5NSaCMfCYI2uqPVI18=)
                          3: d01OZQ1h5yd4zGfVbRIIarVh3s4.roa (hash: Xg/0ZNy0ArMdMbPyTvAy9IQ+pjsxh8KiRBOhFT7eW1Q=)
                          4: kviMEyCZuerPbRSjjOAweNUOX9M.roa (hash: XkVxdbAObzQecFi8jNeAZta/hKgnPT5nn3X0mpt80lw=)
                          5: rxoDYFpq8vIo4tsEseR7hW-PJWw.roa (hash: fCuVig3kLTHc4MXvnEsk4nmU3uAS7Jg8f43kLxgMMuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:64:f7:38:a6:f7:d8:48:6a:5a:39:c1:d6:2a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Apr 17 12:00:30 2026 GMT
            Not After : Apr 18 12:00:30 2026 GMT
        Subject: CN=25dfd1ca30af49241b3d5123cd8c0a600ecd785e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:53:0d:a4:1a:cb:7e:35:c3:24:00:c3:30:
                    eb:ef:fc:3a:dc:ec:1a:b0:c1:aa:b3:88:97:37:d8:
                    bd:19:35:e9:2f:8a:93:8a:36:1c:1c:a3:50:2f:14:
                    1e:73:82:af:40:f3:3c:2a:af:3e:c2:d3:36:8e:23:
                    4b:0c:34:88:b9:04:df:c9:75:b1:30:97:ae:c4:00:
                    6b:f7:b0:f9:16:ff:d6:d9:3d:79:fb:76:ce:2f:06:
                    09:b4:00:30:24:e5:0c:de:e9:52:e6:69:89:88:9d:
                    8c:88:10:61:38:d2:9c:21:90:ef:0f:db:3d:a9:ca:
                    e2:b6:7c:09:ea:a4:6f:ff:b5:68:2d:c4:4a:fc:a5:
                    e8:63:a3:dd:41:b7:56:ca:2c:26:56:01:36:38:95:
                    65:fa:13:65:a3:dd:50:f7:a9:5b:95:78:d6:db:23:
                    50:f8:33:df:7c:66:92:ee:44:19:19:e4:ea:95:5c:
                    41:54:5d:da:cc:25:e2:4b:7e:ba:84:bf:1c:41:5c:
                    e7:f8:5b:0e:65:2d:02:3b:b0:39:a8:a4:2c:be:02:
                    3c:1d:25:3a:a9:3e:c8:d4:19:93:56:c3:99:30:b3:
                    e5:23:e7:5b:23:34:9f:77:c5:50:1e:50:3d:5b:51:
                    c1:43:a9:8d:6c:b4:32:e2:e6:fa:30:1b:40:79:e4:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DF:D1:CA:30:AF:49:24:1B:3D:51:23:CD:8C:0A:60:0E:CD:78:5E
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:a6:e1:42:e5:ab:df:10:32:8b:35:b1:62:47:36:51:0b:
         10:16:f8:4a:4a:13:86:94:fa:26:66:1d:6d:fa:e5:99:88:31:
         a6:89:ac:bf:e9:52:d1:35:c0:e2:cc:cc:06:61:66:60:09:69:
         60:bd:86:3a:14:e8:1f:1a:3a:27:03:fd:4a:47:5b:5c:6c:a5:
         a6:33:73:14:3a:28:ca:4c:66:26:b8:62:f8:30:60:be:18:b7:
         63:23:be:55:0f:f9:09:14:e3:c4:57:8b:3c:85:a8:98:42:3d:
         08:b3:93:1f:c4:ca:cd:5e:a1:0d:05:9a:23:af:6a:9e:56:8a:
         9e:d0:c4:de:f4:76:b1:59:51:0f:5f:98:09:fb:ca:77:90:d0:
         62:22:cd:bc:ff:32:8f:62:13:0a:24:4b:0f:c9:e8:f6:ed:44:
         aa:1d:8c:d3:0c:5c:61:24:75:78:97:1e:5d:a9:10:f9:dc:45:
         a3:b7:8f:3d:86:77:8c:e9:0d:ec:7e:f9:6a:70:4d:c9:12:52:
         18:1c:9d:ad:12:0f:a5:32:eb:e0:08:3a:b9:31:79:61:62:a0:
         c8:8c:02:19:16:a7:3d:8d:fa:af:18:99:b7:d7:96:50:1b:5f:
         48:45:f3:57:61:c9:22:a1:50:38:73:c0:cd:d7:e0:39:97:3e:
         22:46:84:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:33:21 2026 by rpki-client