Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File:                     C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier:          +/ppi2l2ehsL66ars/5QAL0//0KGMUeV01fkrhJHteM=
Subject key identifier:   C4:44:21:B1:80:56:60:02:B8:6C:BC:B3:EE:2E:75:87:F8:09:9B:A5
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer:       /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial:       019EC036414F75446ABED2C45753560D2F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 09:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:41 +0000
Files and hashes:         1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: CLmYTzZYaLIUzvLG6begGg/c7ABMX+refjJ3Ff05yVE=)
                          2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:41:4f:75:44:6a:be:d2:c4:57:53:56:0d:2f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
        Validity
            Not Before: Jun 13 09:00:41 2026 GMT
            Not After : Jun 14 09:00:41 2026 GMT
        Subject: CN=c44421b180566002b86cbcb3ee2e7587f8099ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:1e:9a:9a:5d:5a:56:62:05:59:24:d4:83:
                    50:c6:c8:54:68:34:22:1c:bc:f5:7c:62:25:b1:7d:
                    a8:7f:eb:9d:d6:d3:41:92:45:06:35:c5:55:4a:08:
                    61:a7:b9:c8:69:e4:a9:16:93:e1:ed:92:64:3f:5f:
                    04:d2:6a:9c:7e:85:01:25:8b:f1:42:9d:08:fa:59:
                    64:e7:42:33:09:1e:e9:86:ac:5b:c8:c2:5b:ea:b2:
                    c2:3b:c5:63:91:1a:05:c7:dc:a2:80:a7:b6:b2:14:
                    f6:e9:82:b5:ff:64:84:01:e5:e7:39:ae:31:03:3b:
                    cf:f8:01:3d:87:4b:d4:32:a9:fb:72:67:cb:53:aa:
                    d4:57:54:e6:28:ab:5f:6a:8a:88:ff:bc:18:33:6a:
                    f0:97:f1:bd:6d:89:a7:63:a5:3e:3e:57:f4:9c:6d:
                    b7:66:7d:59:4b:f2:f3:18:bd:fa:de:48:ec:00:90:
                    2c:e6:d2:e8:b7:37:f5:16:b5:ba:33:60:36:7f:16:
                    8a:55:6f:bb:3f:d6:45:8d:86:74:9c:f5:e7:51:9e:
                    37:e8:ca:67:55:17:b6:04:33:af:f9:46:49:0a:12:
                    1f:a6:81:43:03:8f:3d:64:c7:eb:31:78:5c:3c:23:
                    c8:15:e5:62:01:a2:db:88:07:64:04:f8:38:a6:75:
                    26:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:21:B1:80:56:60:02:B8:6C:BC:B3:EE:2E:75:87:F8:09:9B:A5
            X509v3 Authority Key Identifier:
                keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:1a:8f:b6:f1:ae:63:f9:9a:79:ba:a2:42:87:81:e1:b4:dc:
         1a:c0:07:c6:41:d1:94:e8:be:f1:60:92:ca:a5:7b:07:54:85:
         15:34:43:ea:cb:86:63:4b:bf:44:99:ac:8f:59:0a:0e:8e:af:
         5f:29:c0:29:60:1c:e5:ef:d3:42:c9:64:9c:50:fc:4f:eb:b3:
         da:f8:fc:ef:03:b8:a0:57:04:fb:b9:3e:5d:df:77:75:79:ed:
         02:f1:3b:03:3f:90:21:f9:18:ef:07:d7:70:24:0c:3e:f7:07:
         5c:16:63:2d:ab:fb:b5:86:1f:89:fe:95:e0:dd:e4:b6:a9:d4:
         d7:83:71:b9:44:81:49:d5:53:bc:b5:b6:8d:be:eb:aa:93:a9:
         5d:b4:84:b9:9d:ac:e4:95:b2:32:8e:df:0b:81:1c:97:b2:88:
         17:b0:27:d2:a7:bb:74:7e:01:58:fd:69:4f:11:31:83:0b:a8:
         bb:3a:67:ab:13:ec:ed:ab:a8:51:8a:f0:e6:56:32:7f:74:87:
         2f:6a:dc:57:ab:02:86:56:31:ef:b1:de:98:bc:d2:90:be:5b:
         00:a7:a2:b6:d6:04:60:3f:ac:32:ee:30:b6:21:0a:cb:cb:82:
         7e:40:6a:f7:38:43:96:1e:80:8d:e9:8b:8b:fa:e4:eb:bb:e5:
         61:f2:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:37 2026 by rpki-client