Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File:                     kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier:          yY306SprdvhlfNNRMpxTja7bjsmAA1N+KgFWvwrK/Os=
Subject key identifier:   07:33:8D:A7:44:A9:27:17:98:3A:20:99:9E:B6:C3:4E:C3:82:0C:66
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer:       /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial:       019EC36DFA60CBDF60A14298E21C118285C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number:          195C
Signing time:             Sun 14 Jun 2026 00:00:25 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:25 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:25 +0000
Files and hashes:         1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
                          2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: 9S4v4cwSdY8M03DOmi0HKNNdmZB+Ww8pzqr9lMGojZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6d:fa:60:cb:df:60:a1:42:98:e2:1c:11:82:85:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
        Validity
            Not Before: Jun 14 00:00:25 2026 GMT
            Not After : Jun 15 00:00:25 2026 GMT
        Subject: CN=07338da744a92717983a20999eb6c34ec3820c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:d7:29:bd:d6:b4:85:a9:dc:39:5a:c9:1f:
                    23:8a:e7:e8:04:9c:3f:c2:c6:82:94:b4:4a:04:83:
                    1d:98:07:23:27:e1:fd:96:83:9b:4e:67:3e:e7:85:
                    91:92:cb:5a:09:6f:18:ae:ea:e7:98:08:80:05:a9:
                    e1:40:cc:45:c1:a9:49:6c:49:96:24:9f:c2:46:e1:
                    cc:2a:ab:a2:b9:38:0c:ab:b8:2a:33:09:dc:44:c4:
                    69:47:0e:e2:c9:ea:b0:14:6b:3d:76:f0:20:13:51:
                    da:57:ef:c9:a6:30:f1:c2:d8:8b:9a:d0:4f:95:a9:
                    8e:a0:0b:d3:35:24:1a:dd:25:87:34:f7:7e:fe:72:
                    a8:fb:0d:18:65:13:eb:30:57:6d:62:2e:b4:ec:d0:
                    7f:14:ae:f1:a7:39:80:73:5d:14:bc:1a:1b:e6:c8:
                    b3:dd:12:7a:dd:40:fe:14:34:35:a2:5c:b9:8f:44:
                    05:fe:e4:cc:c2:c0:41:27:41:ea:70:0f:ce:e7:21:
                    9a:9c:ec:af:2a:22:76:cc:b0:e2:82:d4:81:49:1b:
                    ce:f7:67:c6:0c:f2:88:e7:32:79:6b:94:18:e5:bb:
                    6c:6e:c1:ca:e9:48:75:99:93:73:8d:24:2c:22:d0:
                    94:d3:80:3f:35:fb:0f:83:59:78:9c:05:5b:f5:39:
                    13:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:33:8D:A7:44:A9:27:17:98:3A:20:99:9E:B6:C3:4E:C3:82:0C:66
            X509v3 Authority Key Identifier:
                keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:36:7f:62:c2:31:ea:0e:3e:d7:29:2e:85:f8:51:d0:25:0f:
         1b:99:29:ea:16:07:d0:5c:08:77:e8:f7:f9:38:25:ee:35:69:
         33:c1:aa:5a:8e:ba:6b:00:9d:7a:7f:70:ed:a9:e2:1d:55:c2:
         e4:b4:9f:70:f1:a6:4a:dd:e0:21:d9:23:84:24:5f:00:7c:97:
         e7:b3:8b:ef:64:e6:ae:de:f1:2e:7d:73:81:04:c8:40:6f:8c:
         7f:55:b2:b5:6c:d7:98:76:e4:c0:31:e7:5c:7c:1b:58:e3:4b:
         a9:db:88:93:52:d1:73:a0:7b:ba:b6:2e:49:75:e1:c3:53:df:
         30:68:44:7a:15:e0:e5:8e:3c:5e:2a:03:67:eb:79:39:3a:d7:
         e2:13:b3:96:72:75:ef:2b:e4:1f:19:3f:ac:2f:9d:65:79:62:
         3d:1e:84:04:88:da:76:2a:ad:bf:d6:99:d4:21:a2:50:b3:21:
         ad:b1:10:9e:69:26:e3:09:f2:41:98:7d:cd:89:61:4a:0e:25:
         fb:b2:af:e2:6e:cd:68:aa:36:c9:2b:f1:ac:9f:9e:71:35:b7:
         0e:d2:fc:19:ce:2a:f4:09:78:bf:2b:7e:e5:81:ae:e3:5d:5e:
         e9:b8:6e:d4:c3:3f:f5:16:f6:2a:c0:29:27:2f:d5:e7:d5:a8:
         84:b2:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:30 2026 by rpki-client