Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File:                     cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier:          SoOWQifcHNEq4vZFNFjlwvhu7dbJezwTkZEId7WFgRA=
Subject key identifier:   4A:6C:6D:65:33:7A:7E:3A:E6:CF:2B:7B:71:FC:93:47:63:CB:21:42
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer:       /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial:       019EBFFF8523B166C6C7A97C8D40D0FB9853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 08:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:54 +0000
Files and hashes:         1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: xtrHmjKvQRW++wQmDSD1m/K2KozSMz7rea8CCEAZZhQ=)
                          2: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
                          3: mdV0Fqg427mYIUG5dBcvLrPAxKA.roa (hash: WTLE6TPjJAJPSn+BMFPBYzhnIQZbDzYgMm+ivoo+rVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:85:23:b1:66:c6:c7:a9:7c:8d:40:d0:fb:98:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
        Validity
            Not Before: Jun 13 08:00:54 2026 GMT
            Not After : Jun 14 08:00:54 2026 GMT
        Subject: CN=4a6c6d65337a7e3ae6cf2b7b71fc934763cb2142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:7d:96:d4:5a:9f:c3:67:86:62:79:83:33:
                    41:3b:2a:cb:bf:10:9e:5f:7b:24:4a:c8:33:ca:c2:
                    5a:37:3a:d8:e4:d6:3e:c1:83:99:d9:ca:74:bf:f3:
                    b8:e7:44:9d:b0:b7:4a:30:7f:69:5e:89:73:12:c1:
                    38:c4:b6:6e:0e:c4:17:dc:31:34:a1:92:24:51:db:
                    f7:73:7c:f9:6a:83:b7:22:1c:35:8f:e9:aa:c1:4d:
                    ee:b2:88:3c:63:22:d9:00:1f:df:ef:07:a6:ca:1f:
                    56:51:60:34:ea:dc:64:4e:17:3a:df:44:82:44:1c:
                    7b:e4:08:33:68:5a:9e:2d:a9:43:56:33:60:36:f2:
                    09:78:f2:d5:37:68:df:f2:b3:91:64:93:ee:08:47:
                    98:11:fc:f2:af:25:a5:8b:e9:fd:e2:6d:0b:d0:0b:
                    93:0c:c1:26:83:12:d1:54:97:93:0c:3c:78:0b:6e:
                    72:60:d2:53:d9:c8:d9:3c:32:02:6f:5b:eb:46:0c:
                    16:81:6e:df:2e:51:9b:d0:72:f0:c3:f3:b0:cd:6e:
                    99:50:74:90:67:7f:d8:c4:60:a1:8a:a0:6c:f9:71:
                    91:98:08:be:8e:f4:51:75:36:80:9b:58:ed:93:19:
                    fc:23:49:4e:df:03:a1:00:51:21:55:ba:8b:66:d0:
                    24:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6C:6D:65:33:7A:7E:3A:E6:CF:2B:7B:71:FC:93:47:63:CB:21:42
            X509v3 Authority Key Identifier:
                keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a6:c6:b0:67:a7:c0:e4:2f:3e:c2:33:72:54:4e:df:f2:cf:
         16:f2:37:8b:ab:f3:88:bf:18:22:ec:c6:1f:f5:4b:26:17:ed:
         39:a8:96:d3:6d:36:6d:09:76:53:7e:ca:9c:bd:9a:42:ba:9f:
         ba:a7:c7:ce:d6:16:5c:f3:2f:7b:34:f6:e7:7f:eb:dc:10:32:
         70:07:f7:38:af:bc:b8:ef:10:87:25:44:07:74:88:26:61:43:
         26:ef:5a:ed:fa:30:5e:e6:67:47:ec:fb:6f:19:db:3c:46:e0:
         06:02:72:aa:22:97:5a:47:e0:f1:9c:6c:ea:de:ec:6f:a5:bc:
         40:38:d6:ae:7e:d3:50:fd:21:b2:eb:de:79:65:8f:d3:d5:f6:
         33:f0:07:6f:c3:fa:24:7e:9f:66:30:5d:05:8d:3b:2c:98:d7:
         59:23:0c:e8:ef:53:a3:fc:38:22:ca:84:da:6f:7b:62:41:e6:
         98:99:5b:d4:a0:e2:47:44:79:6c:41:ea:49:8c:3c:5b:ed:83:
         8c:3b:78:a7:41:38:24:58:fe:6e:92:8a:e8:8b:7e:13:ff:ee:
         d2:d8:8d:3f:95:0a:32:e2:3f:a0:8c:a6:1e:d0:1f:d0:48:73:
         a3:12:a8:f1:c6:48:b8:96:8f:b5:96:ec:e2:88:40:a4:40:82:
         6d:66:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:44 2026 by rpki-client