Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
File:                     KIBHSpYWHd4pQs-58YVsL_yICQQ.mft (raw, json)
Hash identifier:          gwGXZLnnFCW2u14tdD76uryCBA6lD2TXDmdY9WF1TFk=
Subject key identifier:   D7:40:55:2E:3F:ED:4A:FC:F8:04:2E:EB:5E:EB:BC:E7:3A:88:02:B1
Authority key identifier: 28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
Certificate issuer:       /CN=2880474a96161dde2942cfb9f1856c2ffc880904
Certificate serial:       019EC4131F7023947A9D5B40EC52935EB4D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
Manifest number:          051A
Signing time:             Sun 14 Jun 2026 03:00:48 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:48 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:48 +0000
Files and hashes:         1: KIBHSpYWHd4pQs-58YVsL_yICQQ.crl (hash: GzagQBe9BnLoWZ2TkfhBVQLaNRhV0MDxw5NVZF4kSdw=)
                          2: p5OtBuJ_H7AvfUmYp0Nby5w6BSc.roa (hash: oRePnKuJGEJuRAGyqz3spXqznhrS2YOXLr+XXfpc3VY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:1f:70:23:94:7a:9d:5b:40:ec:52:93:5e:b4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2880474a96161dde2942cfb9f1856c2ffc880904
        Validity
            Not Before: Jun 14 03:00:48 2026 GMT
            Not After : Jun 15 03:00:48 2026 GMT
        Subject: CN=d740552e3fed4afcf8042eeb5eebbce73a8802b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:91:31:76:5d:75:b9:26:d8:77:b8:3c:7d:
                    39:ee:b5:55:68:f3:ee:63:73:f1:05:f3:ea:fb:b4:
                    0c:eb:0d:8f:b4:0f:c3:09:37:cf:bc:b9:ec:11:37:
                    fa:95:55:ff:6b:43:de:6b:e5:e4:89:6f:7c:e5:22:
                    fe:f8:ae:b1:5e:11:ed:22:63:ba:b4:b1:d9:2c:3c:
                    a7:f8:38:4d:89:b6:66:76:7f:de:f0:05:0c:db:10:
                    53:19:43:db:3c:f5:c5:42:49:d3:ce:11:91:8e:55:
                    17:50:a0:6d:5a:92:0a:9f:26:84:14:24:a2:b2:55:
                    31:db:c6:2a:d1:5c:a3:a9:30:54:b6:13:d6:1d:61:
                    f8:ba:c8:ba:90:14:6b:cc:07:a2:da:c3:ac:2c:6c:
                    ea:ea:10:c1:08:27:19:7b:92:b5:5e:19:42:5f:a2:
                    43:a4:6b:57:ac:c5:cc:3d:4e:67:db:77:7a:eb:b4:
                    c5:72:f4:db:53:db:70:16:b0:ef:ed:59:5b:1a:ee:
                    3d:41:09:50:f3:18:2d:14:36:58:8d:c7:70:64:61:
                    7c:87:dd:06:60:97:51:b6:ce:f7:61:92:b3:68:f7:
                    eb:8f:ab:fe:fb:c7:b4:62:ed:94:42:83:f1:06:a7:
                    9e:6c:43:a4:d6:1b:84:98:9a:70:53:73:5c:b6:0e:
                    52:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:40:55:2E:3F:ED:4A:FC:F8:04:2E:EB:5E:EB:BC:E7:3A:88:02:B1
            X509v3 Authority Key Identifier:
                keyid:28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:55:2e:75:71:f6:4e:a3:a2:b2:da:aa:60:9a:b9:5a:2d:af:
         48:65:76:2b:a4:14:a7:1a:29:75:c0:5b:d4:42:f4:41:06:45:
         8e:cf:78:6b:ff:08:4b:0a:51:eb:25:0e:f9:f6:18:02:03:77:
         de:17:32:69:1c:1d:c7:b6:db:54:24:a2:55:bb:12:47:e5:ce:
         0c:08:3c:d8:14:41:33:5f:c4:96:11:37:55:ec:2b:53:1f:65:
         26:44:df:26:5c:be:0e:58:84:6f:c5:ea:bb:e8:ae:59:a8:bc:
         27:58:7f:8b:71:fd:6b:17:c7:05:c2:ff:e9:4d:46:72:a3:df:
         42:a7:eb:ab:7b:dd:8c:56:95:ba:1a:fb:15:65:12:f8:6c:59:
         ef:9f:31:a5:2f:95:63:b6:9e:ed:94:a4:a1:d1:b7:1a:75:0e:
         16:5c:98:e8:6f:4f:0f:84:32:2d:40:9f:42:61:e2:82:02:62:
         6b:88:42:fd:29:43:f5:26:dd:53:6c:3a:fe:db:44:f9:92:4a:
         80:dc:05:8e:46:b3:a7:1b:a5:fc:80:64:34:b6:01:9a:61:2f:
         d6:45:12:d5:44:f4:2d:f3:08:17:4e:e4:5d:c5:23:a6:c9:8f:
         f8:a2:7a:18:19:c7:c4:76:82:09:da:bc:f9:05:2d:23:01:76:
         78:98:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:45 2026 by rpki-client