Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File:                     DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier:          uOEogM9zXeH2pEX0Zi5+IxWxSZ8c049IbBG9xtATT9g=
Subject key identifier:   21:C0:40:41:2C:B4:DA:52:D0:92:78:24:CB:63:5D:5A:57:AD:42:13
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer:       /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial:       019EBEB5AE3DC065C4528F9CE885FA2E814B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 02:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:38 +0000
Files and hashes:         1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: pu/jZvLp6aZAXP/S4v838qLTrJIB2d4SFjXR5o5GdfI=)
                          2: WMPWbERH9P2n3niPjWrFvgxXnog.roa (hash: wqaHkXlpMy/p6v+U45zXhhU2rWewv6uSFHA6UjESriQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:ae:3d:c0:65:c4:52:8f:9c:e8:85:fa:2e:81:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
        Validity
            Not Before: Jun 13 02:00:38 2026 GMT
            Not After : Jun 14 02:00:38 2026 GMT
        Subject: CN=21c040412cb4da52d0927824cb635d5a57ad4213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:d2:06:28:05:6b:53:49:86:bf:d4:09:2c:
                    b8:aa:cf:56:bf:04:90:d3:f3:cf:54:15:13:9f:b0:
                    35:4d:ec:ba:bd:a8:b0:13:4c:ac:18:bf:10:00:fd:
                    e9:8a:88:69:b2:f2:29:a6:f0:69:99:52:9f:b8:23:
                    05:a0:ee:32:87:eb:3b:94:0b:d5:b2:9f:b1:ea:61:
                    a1:91:67:a6:b2:d7:b8:d5:84:34:e7:16:6a:96:9e:
                    8a:17:60:e7:62:1f:b9:a1:7b:64:5a:c5:52:5d:0f:
                    57:91:7e:3b:17:0b:f1:36:dc:b3:d1:2d:3d:33:e4:
                    be:a3:25:47:b2:42:f5:d4:02:4a:a7:b5:b8:a9:db:
                    0d:63:18:49:e5:7d:cf:b5:92:bc:a0:fd:7c:1b:f0:
                    02:ea:6b:d0:06:0b:9e:d4:a1:97:21:09:8b:8c:b8:
                    de:6c:4d:00:f3:db:8f:2b:d8:6e:da:12:07:2a:00:
                    81:9d:a3:2f:c0:ad:88:2d:10:65:84:59:41:32:68:
                    00:c1:60:40:ac:5b:88:f5:35:b9:ee:3e:08:15:c9:
                    b6:47:79:92:77:be:2b:fc:5c:b4:e8:7e:f5:b1:ef:
                    58:09:e6:57:3c:a3:08:8e:af:f3:17:0d:2c:fb:a3:
                    fd:a3:8d:34:93:22:8c:e1:d8:3a:cf:bf:dd:64:fc:
                    58:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C0:40:41:2C:B4:DA:52:D0:92:78:24:CB:63:5D:5A:57:AD:42:13
            X509v3 Authority Key Identifier:
                keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:2d:24:18:a6:5c:f2:a9:78:ab:cf:de:10:4c:0b:31:91:03:
         42:d3:06:3c:ac:8d:1f:3b:1c:94:e7:b1:ed:9b:5a:6b:3e:b8:
         95:01:f9:1c:3a:63:84:2d:82:60:75:0d:e3:af:fa:e7:bb:99:
         12:93:99:28:e0:f5:5c:ef:de:f8:74:c6:59:17:e7:e2:a7:a4:
         0a:51:22:cf:50:b2:7b:09:7e:15:d0:fa:09:7a:a3:93:2a:4b:
         74:ec:f4:f0:bf:b6:b1:44:1e:9f:b9:3c:3c:f8:bf:6e:85:80:
         96:62:07:28:be:83:4e:03:9d:11:c2:5e:d5:19:50:4f:0a:74:
         4e:d0:0f:dc:5e:87:a8:ac:72:5f:88:a6:03:61:da:0f:0f:6a:
         e0:2f:4e:a3:05:6f:7a:e4:31:0f:4e:fb:09:af:6b:1f:5f:95:
         3b:47:b7:23:4e:f8:32:92:37:9e:c2:8e:6f:6f:17:c6:6d:f8:
         0a:59:92:04:d4:10:7c:be:e9:ef:26:ac:c4:cb:7b:77:02:52:
         9e:2a:ac:b7:4b:7e:43:11:61:8d:91:ba:10:f1:76:3c:53:f6:
         48:2f:fe:78:93:c1:29:6b:0e:58:2e:a6:8f:69:fa:78:cd:3f:
         d6:e2:80:d9:14:60:95:1d:aa:2f:eb:f3:3c:46:cc:53:fe:f7:
         6a:ce:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:05 2026 by rpki-client