Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft
File:                     K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft (raw, json)
Hash identifier:          SrrhqZ9qwYI0tm15GMY4sA1E3BsWgVgvBqZqC0Q6GPI=
Subject key identifier:   84:E3:F5:FD:16:0F:B0:81:EA:97:88:0E:B5:F7:2A:A1:5B:83:7D:39
Authority key identifier: 2B:F3:F0:FD:45:4A:E8:0C:99:45:AD:BC:1E:30:CD:BC:1C:2F:40:20
Certificate issuer:       /CN=2bf3f0fd454ae80c9945adbc1e30cdbc1c2f4020
Certificate serial:       019EC06D7EC34B862FCCB05004413DA2B13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_Pw_UVK6AyZRa28HjDNvBwvQCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft
Manifest number:          65
Signing time:             Sat 13 Jun 2026 10:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:01 +0000
Files and hashes:         1: K_Pw_UVK6AyZRa28HjDNvBwvQCA.crl (hash: hffeD3kZESMqnCZJCiLrAbdTgoVMsXR3nkuVp0Q5glY=)
                          2: t3FyYhHRPqJ-a3_z-yeKN1Sdvh4.asa (hash: 6+uN5m0MDTZzrHFrqFDKq2fqSVkd4BTjnly82iu2JIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_Pw_UVK6AyZRa28HjDNvBwvQCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:7e:c3:4b:86:2f:cc:b0:50:04:41:3d:a2:b1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf3f0fd454ae80c9945adbc1e30cdbc1c2f4020
        Validity
            Not Before: Jun 13 10:01:01 2026 GMT
            Not After : Jun 14 10:01:01 2026 GMT
        Subject: CN=84e3f5fd160fb081ea97880eb5f72aa15b837d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:1f:ad:94:74:63:f9:85:0c:ac:e5:dc:10:
                    0b:e8:f9:c8:81:27:85:b8:fa:17:87:ab:0d:1f:7a:
                    5f:99:c5:b4:22:4c:d9:52:3c:6e:3d:c2:24:03:97:
                    b4:49:6e:72:5b:10:a5:3c:42:6a:d2:96:b8:fd:3b:
                    d4:87:67:0e:a8:c6:01:02:ec:de:d7:02:27:68:a7:
                    4e:36:74:a1:e1:bf:55:7c:60:8e:22:79:27:fc:00:
                    c4:31:74:49:3b:b5:49:ed:4a:50:af:bc:9d:a5:9a:
                    ad:65:4f:6b:2a:98:19:7e:1c:40:03:16:9b:9b:3a:
                    f0:9b:7f:a0:c1:14:03:bc:5f:99:76:4b:6d:72:76:
                    24:b7:9e:d6:c3:8f:93:08:dc:a6:16:e5:fa:4c:6e:
                    32:46:b3:15:08:9a:f2:ce:4b:4b:73:f7:e6:da:ff:
                    0d:ea:2d:3e:02:03:7d:3b:de:a9:43:8f:d3:69:d3:
                    48:bf:a5:4a:dc:77:48:e5:b2:a4:f1:56:19:9a:89:
                    a3:8f:3f:88:fd:93:1e:32:f3:5c:33:41:f4:e1:4a:
                    87:a0:0a:c3:f2:40:ed:87:0b:a5:ae:2e:5d:82:5f:
                    84:dc:a2:46:c6:03:6c:ed:3b:a4:9d:0f:f1:8d:66:
                    9c:c3:d7:2b:2a:88:08:65:93:c7:9f:de:92:59:45:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:F5:FD:16:0F:B0:81:EA:97:88:0E:B5:F7:2A:A1:5B:83:7D:39
            X509v3 Authority Key Identifier:
                keyid:2B:F3:F0:FD:45:4A:E8:0C:99:45:AD:BC:1E:30:CD:BC:1C:2F:40:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_Pw_UVK6AyZRa28HjDNvBwvQCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:16:37:07:a0:b1:f2:01:80:78:ac:bc:af:55:21:13:a9:
         8b:9f:66:d1:9a:bb:86:2e:d9:64:3c:69:0c:48:2f:96:fb:80:
         e7:f1:ab:78:67:27:82:17:79:5d:f3:6a:27:eb:e5:61:8e:b2:
         40:72:f5:d1:ce:66:ab:35:5d:ff:00:fa:5b:af:42:e7:7f:ba:
         02:0c:8c:e1:8f:61:58:d1:62:ec:03:41:c3:a5:87:ba:53:6a:
         11:13:0a:ef:2a:cd:d0:1b:3f:b1:7d:34:0f:56:62:93:9d:ef:
         d4:80:53:33:9b:da:92:ae:dc:18:4e:88:a2:b0:2a:64:e2:17:
         a7:ae:4c:1f:5b:26:a1:b2:98:c1:69:49:92:f6:e3:4d:00:5a:
         41:06:bc:f2:97:ae:53:50:db:fe:b9:24:4c:74:d2:a0:57:28:
         75:91:47:09:7d:f8:fd:18:9c:2f:f0:58:4a:eb:0d:b9:25:5d:
         6e:7a:ef:30:77:7f:5f:36:ad:58:18:d2:2d:68:2d:5a:6c:a7:
         98:8d:07:92:28:96:21:c1:15:2b:5f:31:71:eb:ad:25:f4:74:
         21:14:b2:64:8b:7d:31:53:13:02:38:75:84:18:85:cd:27:e9:
         d0:2d:66:38:9b:90:9a:c2:bd:c9:53:05:ae:67:60:10:76:7a:
         70:61:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:24:57 2026 by rpki-client