Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File:                     KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier:          zbnHlzywafFUl4FhJ+d2eKVQBaLcQkjL701dQErA9vc=
Subject key identifier:   1F:79:C7:DB:D0:6D:BC:9A:4C:1B:B9:C5:D2:A4:E2:9B:CF:0E:41:26
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer:       /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial:       019EC25BD722A21ABEE8F8F7887753E5954C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number:          0A07
Signing time:             Sat 13 Jun 2026 19:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:59 +0000
Files and hashes:         1: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: xyYaYzWdeseo4/HnrkwZpmCoZ7i39Q4VfniTOZLOjd0=)
                          2: lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa (hash: v7lM7R+6ILWW0k1iy98P/XQH6IMSFCizQ4V8D9n6X0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:d7:22:a2:1a:be:e8:f8:f7:88:77:53:e5:95:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
        Validity
            Not Before: Jun 13 19:00:59 2026 GMT
            Not After : Jun 14 19:00:59 2026 GMT
        Subject: CN=1f79c7dbd06dbc9a4c1bb9c5d2a4e29bcf0e4126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:04:b3:cc:4b:1a:58:15:fc:24:ea:8a:d5:
                    47:3c:7e:30:a3:76:6a:d2:b5:56:75:22:a7:5e:a6:
                    3a:47:7f:b8:ed:a6:0e:c3:c0:9d:74:44:d5:8e:96:
                    de:28:a5:d9:03:4e:18:e4:ed:b2:06:d1:1b:a6:a8:
                    76:52:34:a0:50:49:5b:04:a5:a5:c6:b9:72:c1:20:
                    e1:f4:6d:e3:74:8a:0d:2b:70:d3:57:ff:2a:92:1e:
                    ea:cd:bc:be:87:9e:99:66:15:f5:1e:a5:47:2b:2b:
                    85:56:4c:89:94:32:fa:b1:b4:ca:7c:a2:c9:fd:03:
                    fc:b3:f7:f2:a3:9b:a2:14:3b:02:5c:ca:2d:74:b9:
                    90:6f:32:ae:9a:03:91:3e:73:22:c6:26:fc:e8:3d:
                    39:41:8e:2f:14:40:dc:70:69:16:6f:e4:19:e1:77:
                    c3:ac:12:43:47:f1:70:b1:59:13:26:0c:fa:9f:5f:
                    ab:7b:19:a6:64:7d:da:72:1c:e2:b3:e8:0c:b1:3b:
                    6f:e4:ab:b2:33:82:8d:4b:9a:7d:af:90:39:4c:8c:
                    72:38:77:52:5c:b4:97:93:26:84:cc:00:3f:23:bc:
                    39:b6:a8:f3:00:59:19:b4:17:49:73:17:16:6b:5a:
                    f2:69:4e:99:36:52:d1:0e:36:36:86:8c:0f:fc:1c:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:79:C7:DB:D0:6D:BC:9A:4C:1B:B9:C5:D2:A4:E2:9B:CF:0E:41:26
            X509v3 Authority Key Identifier:
                keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:91:fa:ab:0f:4f:20:40:d9:f3:a9:46:08:ac:36:d1:bf:b1:
         2c:a4:3d:0e:ad:5c:d0:fd:c3:c0:27:ac:81:83:6a:30:3a:4b:
         b7:67:5d:3e:c8:29:52:00:89:73:c4:49:cc:29:a8:9b:8b:82:
         d2:69:49:6c:a3:50:76:64:c1:d2:e5:65:fd:0f:3f:89:f4:84:
         d9:65:77:0d:71:34:c8:fe:6d:3c:00:30:75:a6:68:11:39:bc:
         01:c5:50:6e:66:bc:6f:0c:7c:42:07:f8:28:0f:a7:57:fc:99:
         b6:5f:ee:bd:16:56:bf:ca:81:be:2c:7d:bf:84:9c:4f:df:95:
         63:94:30:b0:00:32:ed:18:60:ce:e5:85:38:e6:a1:61:79:c8:
         44:7b:42:05:b1:9a:64:96:88:ec:fa:76:d4:c4:ec:43:68:a9:
         c3:d0:e6:38:c5:17:38:f0:e8:e6:4f:3e:66:5f:a0:6e:bf:09:
         48:1e:0b:e3:b0:25:9e:23:35:2f:4f:ba:79:f8:91:9e:6a:21:
         0e:9f:7e:11:67:d1:98:e7:d6:d7:ce:2d:43:b5:08:92:77:61:
         f0:d7:ae:ab:a8:56:5b:ea:a7:8b:34:7a:5d:10:c8:51:da:40:
         30:51:f3:16:33:54:0b:3f:b3:b5:be:bc:bd:4d:be:6b:ba:60:
         87:89:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:26 2026 by rpki-client