Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File:                     K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier:          /2uP8vXUhjZIFsd2nxAomoJOekEwagG/LWD96zm8diI=
Subject key identifier:   F8:44:75:C6:08:DD:13:3F:91:A0:83:8B:7D:D0:5C:74:57:BB:83:A2
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer:       /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial:       019FA9E2B26BBD2E0BD4F6B4925E56576AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number:          1865
Signing time:             Tue 28 Jul 2026 18:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:33 +0000
Files and hashes:         1: 1llWNK65NedtiWi8qyia848ELaA.roa (hash: 0oTSLbXlh3Ln2/Z2bu7ijN1NRwtM3qIsyO0kzqAkxPw=)
                          2: BqgWVwKrUwtqB3EhbXBRr-yliUI.roa (hash: wrHBPbSOTOknzdCwY9I0P0V5ce9Z0KVc/zAbuVfbtfg=)
                          3: Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa (hash: G5PDsg/wG8I5/QaFUvVe7A5FW81hq3JrSXknwZ7dvi0=)
                          4: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: n+/ECzXQeBD8+SZpBMQ1lNWT4oVYGRaTKsVpyNitE3s=)
                          5: _CXCyeMnJtUiSqVx5IT_kZaP1uU.roa (hash: qLYdSwnACT46V5B9jzvAqJGjph1sko0ABQcmLfDqZPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:b2:6b:bd:2e:0b:d4:f6:b4:92:5e:56:57:6a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
        Validity
            Not Before: Jul 28 18:00:33 2026 GMT
            Not After : Jul 29 18:00:33 2026 GMT
        Subject: CN=f84475c608dd133f91a0838b7dd05c7457bb83a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:93:33:a0:4f:13:67:5b:36:7a:f5:4d:03:
                    66:f1:52:39:04:2c:c9:b3:7f:27:d9:bf:d5:3f:6d:
                    78:13:bd:e2:c9:fc:61:82:03:34:35:39:1b:c2:b1:
                    e4:c4:2e:48:d7:a8:d0:a1:1a:8a:ec:99:04:e6:3b:
                    8e:96:89:11:97:17:79:80:70:16:46:c5:65:f4:bf:
                    ba:73:e8:ff:fc:67:17:34:0b:c5:97:14:b8:bf:1d:
                    db:e5:ba:b8:9c:9e:7e:10:ad:de:cc:17:69:d4:ad:
                    d7:f4:8d:84:b6:42:64:3a:db:19:34:b1:a2:cb:79:
                    f6:62:6e:76:19:9c:6b:28:7f:7a:83:d9:6c:da:56:
                    a9:87:50:fc:c6:f2:ec:9f:a9:7d:bd:c9:a0:21:22:
                    bd:bb:87:0b:c3:7a:88:e4:d9:3b:d5:70:1a:c5:d6:
                    d5:c2:cc:c9:26:13:ef:a9:f7:b0:8b:86:4b:08:ff:
                    d0:ed:2e:b3:60:af:2a:bd:2a:29:de:67:8e:0a:09:
                    26:44:ec:5f:d5:8d:71:f0:4c:df:d7:a9:66:3b:b2:
                    2e:f0:2c:45:7e:14:b1:e0:38:dc:8c:0e:f5:44:db:
                    9e:ac:ef:6b:e2:58:ad:1a:9c:94:45:60:e1:62:b5:
                    0f:c2:71:69:5b:50:0d:f2:57:3c:0c:56:15:27:af:
                    a4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:44:75:C6:08:DD:13:3F:91:A0:83:8B:7D:D0:5C:74:57:BB:83:A2
            X509v3 Authority Key Identifier:
                keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:50:12:ea:90:86:7f:3e:68:0a:d7:41:79:7e:bc:fa:f2:aa:
         24:f1:7f:81:de:30:69:d5:63:d2:42:3a:21:fd:58:75:f5:be:
         4a:5e:24:ca:fb:0e:d3:75:14:f4:3d:5d:c5:72:0f:22:ce:e5:
         1e:f7:cd:87:f0:b6:64:59:97:53:8a:73:ca:25:27:88:bd:c5:
         9c:2a:36:76:31:6f:60:5e:ca:f6:07:c3:27:27:6c:29:63:a8:
         9f:3f:93:78:1f:00:4f:07:b4:58:67:1f:44:62:f0:27:e2:59:
         0f:5b:4f:01:ca:9e:53:08:b1:18:75:1c:5a:a1:9b:c4:02:bd:
         85:d2:a2:3a:67:6b:e9:f4:76:f1:17:15:fc:e6:91:07:34:68:
         10:dc:83:54:a4:fb:c9:1f:7d:2a:f5:02:fb:0f:28:73:f1:88:
         a0:e0:46:f6:8e:2f:36:a0:3e:ad:6f:6d:8a:37:1b:1f:0e:47:
         68:24:17:42:6b:93:e0:fe:a6:cb:cb:ec:ad:8e:1d:81:1b:3e:
         63:67:99:37:ff:e4:1f:67:d8:84:dd:c8:a6:d2:5d:55:ac:b9:
         2a:d1:d9:67:35:ff:5a:40:93:1c:6f:a3:d7:72:48:11:19:86:
         09:9f:a5:ce:88:01:b3:dc:d2:2e:f8:00:80:2c:bd:18:3b:b1:
         4f:cb:2a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:22 2026 by rpki-client