Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File:                     1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier:          2pkVOvzAjAkMiZmBjuPQl0LS1v5SUqOOd1WYlL3b6lM=
Subject key identifier:   27:7A:79:91:09:90:39:3D:4E:5F:63:93:0E:D9:0D:D3:F2:9A:BD:48
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer:       /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial:       019EBFC84755B351EFCD217D322CB396271A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 07:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:34 +0000
Files and hashes:         1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: lFSVgTyxn1/rOLJPtQXkFOSTRTm/qujTFurYr2VyHMc=)
                          2: dMl0CEajkrxcgLNcfpnLA8OuL7A.roa (hash: CYX2WX+QfrhOpGiBFy1DWZkIM2JKpSw/oiXkQ7UpKFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:47:55:b3:51:ef:cd:21:7d:32:2c:b3:96:27:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
        Validity
            Not Before: Jun 13 07:00:34 2026 GMT
            Not After : Jun 14 07:00:34 2026 GMT
        Subject: CN=277a79910990393d4e5f63930ed90dd3f29abd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:76:64:8f:26:e0:80:e9:3d:09:19:1e:0c:
                    91:7c:53:23:a1:a4:1a:9b:7f:f0:ba:6c:e1:a9:87:
                    5e:ee:b0:c7:32:55:7e:11:2e:5b:f9:fc:72:44:57:
                    26:b4:c5:03:00:e9:b9:e6:7a:6f:dd:05:75:3d:9b:
                    fd:e0:c9:b4:3d:f7:95:59:31:d4:2a:76:2e:f3:4f:
                    f0:9b:94:cc:9e:a9:93:06:ff:4a:3a:4d:a1:df:d5:
                    76:3f:ac:35:c6:ec:be:29:1f:f9:ee:8e:41:2d:62:
                    5e:97:15:f8:f4:d9:07:48:16:bd:9b:22:51:6a:60:
                    2c:a1:6f:18:11:46:fe:a9:89:a6:58:ad:c3:8b:ce:
                    c5:e8:d5:de:03:ec:44:6a:8b:fb:b8:39:4f:de:67:
                    ab:78:65:95:fb:28:63:db:82:bb:13:9d:2f:44:3d:
                    52:85:bc:74:57:14:49:e7:c5:23:38:75:be:ba:18:
                    fc:a1:24:b3:17:60:6d:ea:ec:11:ae:fa:20:46:d1:
                    be:55:a5:43:15:2b:f3:7f:54:63:d5:57:df:e8:93:
                    df:5c:5c:ce:be:37:43:5a:56:52:75:e9:0d:2f:76:
                    9d:d8:0e:5f:42:fa:5c:cb:f1:33:40:ff:88:78:01:
                    9c:db:70:4f:06:ec:c6:a8:57:16:6b:b8:68:32:2b:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:79:91:09:90:39:3D:4E:5F:63:93:0E:D9:0D:D3:F2:9A:BD:48
            X509v3 Authority Key Identifier:
                keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:fe:ab:b5:d3:25:6f:a2:85:28:65:94:f8:08:34:9e:84:dc:
         fc:83:40:bc:25:b9:d4:62:49:98:4a:8c:16:eb:62:20:f7:00:
         3e:f7:30:1f:2b:1c:44:ab:73:69:a5:4b:e4:bc:38:cb:a0:3b:
         03:97:08:44:47:77:1b:2c:5e:50:0e:a7:9a:b1:28:b1:e4:fd:
         4a:b5:1f:00:ed:60:cb:87:20:5b:40:9d:82:d3:fc:c9:45:eb:
         99:4c:59:e5:52:9b:c9:8a:f6:96:b8:6f:c9:fc:01:12:36:b9:
         19:b3:6a:44:15:16:7d:96:d2:fb:ae:fd:c4:84:70:0c:2f:55:
         ba:5b:61:01:0b:06:b0:91:61:db:fc:e8:1a:6e:d6:c0:81:27:
         3d:ee:97:f4:42:97:ef:be:5e:38:ed:47:97:26:92:55:fd:03:
         cf:ba:dd:9f:43:86:03:e7:8e:cd:fc:85:cc:dd:18:05:af:5b:
         3c:5a:6c:e5:36:f4:86:b7:66:00:db:91:9a:a8:e0:20:6a:29:
         00:49:2f:24:ef:16:b4:79:2e:a4:b3:85:98:1b:1c:b8:0b:59:
         b2:c3:ff:c7:68:ea:65:fa:45:d2:8e:44:61:a9:ad:e1:2e:30:
         68:d7:93:a5:0f:2d:17:e1:db:47:95:f1:7e:af:7c:32:5f:5d:
         55:fb:2b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:56:04 2026 by rpki-client