Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File:                     K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier:          NA4sgEWB5LWdifz6Na3b+1A1zDoc5QralAMxeoex4QE=
Subject key identifier:   F5:14:CF:F6:F7:51:5D:23:77:C5:5E:2D:D6:4E:30:03:C5:6E:63:55
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer:       /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial:       019EC2C97F8BA2C3E7637CE81A31A478E8F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number:          1114
Signing time:             Sat 13 Jun 2026 21:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:45 +0000
Files and hashes:         1: 5MvGTIWvypnynatSCOFj8eEvQKU.roa (hash: zlpMkBrcV9PcuGvhpfeVQrRYScHNx6B9kKbHDGTMD3Y=)
                          2: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: RAF7cyIzVdN9KmgeUadUaDuXLJkomJzjNgJYm/mwXbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:7f:8b:a2:c3:e7:63:7c:e8:1a:31:a4:78:e8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
        Validity
            Not Before: Jun 13 21:00:45 2026 GMT
            Not After : Jun 14 21:00:45 2026 GMT
        Subject: CN=f514cff6f7515d2377c55e2dd64e3003c56e6355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:94:6f:5a:bc:b7:22:bd:05:a9:c1:20:35:
                    d0:22:4e:ec:99:87:a9:c2:c9:0c:e4:ce:d5:49:e1:
                    a5:d2:74:b6:f4:53:c5:3e:27:c2:56:d4:f2:d7:1d:
                    e2:86:ae:ce:5e:52:88:0e:d0:83:48:5d:18:41:f7:
                    e6:9d:9d:aa:bd:42:59:98:6a:65:4a:e5:80:61:3b:
                    fd:33:bd:a7:37:2a:39:ab:42:ae:4a:b9:3c:ec:3e:
                    78:14:e0:a1:8e:86:36:31:0c:84:d5:f4:9e:88:38:
                    eb:9c:6d:bc:42:59:55:4d:8d:4b:4d:49:cb:45:16:
                    ff:1f:15:bc:b4:bc:87:b4:a1:f3:34:4c:75:f8:04:
                    73:1b:ca:13:37:b0:a2:1f:25:98:a6:b8:ec:1a:66:
                    fa:96:22:8c:26:12:39:d9:3b:1f:28:89:e0:18:77:
                    e6:81:eb:bd:8a:a5:73:eb:62:34:69:39:d5:dd:4b:
                    8c:ba:4a:11:da:82:d1:1b:44:41:11:7b:82:88:c9:
                    4a:60:1f:23:62:39:43:16:9f:bc:17:a7:24:db:bf:
                    7c:ca:b8:9b:c7:45:21:6f:aa:cd:11:22:eb:04:02:
                    c6:56:58:c5:60:0e:15:4d:d4:b6:4d:c0:d8:bd:57:
                    2c:cb:0f:14:07:2a:37:2c:2e:a4:e8:3e:da:a9:78:
                    c3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:14:CF:F6:F7:51:5D:23:77:C5:5E:2D:D6:4E:30:03:C5:6E:63:55
            X509v3 Authority Key Identifier:
                keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:12:68:dc:81:1b:3f:56:9c:42:b2:44:70:0f:e4:8a:d1:47:
         2e:2c:d3:10:53:0f:52:1d:01:b3:18:d7:92:d1:84:a3:6e:76:
         58:39:b5:f4:ba:48:ba:00:53:45:58:58:74:e7:ac:b6:31:0c:
         5b:fa:b9:fa:e9:ed:5b:58:07:e5:8f:86:d0:fe:4c:ed:9a:03:
         ce:f9:57:e0:44:5d:e5:6f:81:5a:a1:60:bc:1a:ca:02:2f:30:
         36:5b:92:72:ae:11:30:30:d8:ac:cd:27:f2:e0:ce:f9:2e:b9:
         03:e2:6f:6a:15:27:86:ae:b4:0c:52:92:2d:ed:05:11:2b:01:
         c7:f7:76:43:e1:bd:61:a7:ee:e6:00:a1:c0:df:20:fd:91:11:
         a4:c3:3a:82:bb:20:2b:37:58:a5:7a:be:c4:cf:40:81:db:19:
         61:dd:5f:27:dd:f3:b9:74:84:2c:84:c8:ee:a1:1f:26:3e:a8:
         5d:76:2e:c8:a0:b9:ab:c1:f6:5e:f3:66:2d:69:e6:c3:a6:94:
         2a:94:9e:21:53:47:a7:cb:3d:7c:ca:5a:1b:49:d5:3a:37:5d:
         a5:62:1f:10:30:20:03:7a:f0:45:22:68:4c:f9:7d:b6:cc:cd:
         32:6d:60:f1:9e:95:03:b7:7d:59:26:90:9a:6a:93:05:d2:3f:
         ca:07:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:46 2026 by rpki-client