Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File:                     1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier:          Rvte6mu261rYohKFP7KHOtw7jCjGgJebk2cHdfB8O30=
Subject key identifier:   5A:1B:D1:26:2A:4B:01:4A:5B:E2:1C:E1:CC:57:D4:8F:31:40:D6:3D
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer:       /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial:       019EC0A458E6659DC4363373E86503FD21F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number:          079E
Signing time:             Sat 13 Jun 2026 11:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:56 +0000
Files and hashes:         1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: PhcP5pHq3AbE0cJvHul0IFTH3BVw6PjgFOCRxj4wJr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:58:e6:65:9d:c4:36:33:73:e8:65:03:fd:21:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
        Validity
            Not Before: Jun 13 11:00:56 2026 GMT
            Not After : Jun 14 11:00:56 2026 GMT
        Subject: CN=5a1bd1262a4b014a5be21ce1cc57d48f3140d63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:73:e9:88:03:4e:fd:37:9a:be:eb:6b:65:7d:
                    b1:45:b5:92:2e:50:61:43:cb:29:55:2a:3b:89:da:
                    29:50:3d:8f:7e:e9:e8:cc:d7:d6:10:bf:48:bf:c5:
                    05:4e:41:22:47:45:5c:ce:9e:67:c1:4c:68:fd:36:
                    46:e4:8e:93:82:99:fd:11:12:4f:5b:12:f5:ea:31:
                    96:c9:ad:2f:82:6a:b3:88:bb:d4:dc:2f:5a:e3:b7:
                    db:26:ee:1a:e0:5d:0f:69:96:08:71:f8:c1:09:a1:
                    6a:30:16:04:af:43:3a:ea:e1:f4:a9:95:5c:5c:2f:
                    14:d3:2e:8e:89:de:54:5a:dc:1c:26:c9:68:64:c5:
                    aa:ab:70:91:80:7b:68:48:6c:39:c1:fb:44:e4:5a:
                    84:98:b1:9f:f6:1c:bc:77:74:f2:67:5f:5a:dc:d3:
                    d5:77:23:ae:01:39:81:d8:24:96:3a:96:15:45:af:
                    5c:70:1e:43:9a:8b:0e:ca:b3:bd:b8:2a:b4:5c:1f:
                    3e:cb:c6:f7:70:e2:fd:a0:ed:4e:d4:d3:72:77:ff:
                    a4:c1:9f:ed:54:36:a7:7c:a7:d2:f5:bf:13:b3:cf:
                    2b:db:ec:3a:32:72:bb:42:1a:fe:7f:ae:61:2a:65:
                    0a:af:d6:9e:be:5c:1d:42:50:d5:74:fc:8d:79:fc:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:D1:26:2A:4B:01:4A:5B:E2:1C:E1:CC:57:D4:8F:31:40:D6:3D
            X509v3 Authority Key Identifier:
                keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:83:60:ab:1d:cd:cd:24:c9:93:86:89:3a:0b:50:cd:ad:9a:
         ad:30:e5:18:f1:5e:33:31:1e:8b:e2:29:12:34:22:94:1f:9e:
         82:9f:35:9d:b6:e3:d5:0b:c3:d1:3c:84:07:40:7b:b9:2a:ac:
         8b:f8:bc:30:11:19:3c:2e:87:11:b5:d6:9d:f0:7e:fa:74:a8:
         c2:ad:4e:b7:e2:10:82:07:da:2e:01:9a:aa:05:9b:5b:d9:fd:
         9e:70:8b:2d:af:f0:4e:81:8f:69:92:92:6a:18:37:aa:90:d9:
         14:2c:f9:0a:e4:cd:d9:86:6b:16:5c:22:a8:f5:70:15:d5:15:
         a4:12:d8:f0:dd:e0:28:5d:6c:cf:57:3f:08:14:90:db:04:99:
         d8:3d:d4:cb:11:67:2a:37:c5:36:27:ac:6d:e9:9c:f0:95:dd:
         c4:1f:f8:41:95:c0:da:e3:4b:0d:c9:ae:b4:2a:55:ca:5f:40:
         90:ee:fd:38:5a:44:63:49:f6:ca:15:80:1f:ac:b3:9f:f6:51:
         11:86:6f:62:c7:b3:ab:3f:ee:49:67:3a:fd:2d:ef:1c:c6:3b:
         d4:18:79:d9:0c:6a:2e:83:ce:bd:2e:8d:88:4e:d5:e4:d7:40:
         99:4a:c3:96:ba:f0:c5:67:bc:fe:32:74:57:ef:47:8f:b5:d7:
         3d:cb:50:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApFjmZZ3ENjNz6GUD/SH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTAwN2VkMmZlMDhkNDMzZTBmMGEwMmY0M2NhN2FjYjI2
ZjVhMGUwHhcNMjYwNjEzMTEwMDU2WhcNMjYwNjE0MTEwMDU2WjAzMTEwLwYDVQQD
Eyg1YTFiZDEyNjJhNGIwMTRhNWJlMjFjZTFjYzU3ZDQ4ZjMxNDBkNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XPpiANO/TeavutrZX2xRbWSLlBh
Q8spVSo7idopUD2PfunozNfWEL9Iv8UFTkEiR0Vczp5nwUxo/TZG5I6Tgpn9ERJP
WxL16jGWya0vgmqziLvU3C9a47fbJu4a4F0PaZYIcfjBCaFqMBYEr0M66uH0qZVc
XC8U0y6Oid5UWtwcJsloZMWqq3CRgHtoSGw5wftE5FqEmLGf9hy8d3TyZ19a3NPV
dyOuATmB2CSWOpYVRa9ccB5DmosOyrO9uCq0XB8+y8b3cOL9oO1O1NNyd/+kwZ/t
VDanfKfS9b8Ts88r2+w6MnK7Qhr+f65hKmUKr9aevlwdQlDVdPyNefwktQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFob0SYqSwFKW+Ic4cxX1I8xQNY9MB8GA1UdIwQY
MBaAFNSgB+0v4I1DPg8KAvQ8p6yyb1oOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84NmNlYjgtNDE4OC00YjZjLThiZDgt
YzJiODFjZTk4YzZkLzEvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84NmNlYjgtNDE4OC00YjZjLThiZDgtYzJiODFjZTk4YzZk
LzEvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKINgqx3N
zSTJk4aJOgtQza2arTDlGPFeMzEei+IpEjQilB+egp81nbbj1QvD0TyEB0B7uSqs
i/i8MBEZPC6HEbXWnfB++nSowq1Ot+IQggfaLgGaqgWbW9n9nnCLLa/wToGPaZKS
ahg3qpDZFCz5CuTN2YZrFlwiqPVwFdUVpBLY8N3gKF1sz1c/CBSQ2wSZ2D3UyxFn
KjfFNiesbemc8JXdxB/4QZXA2uNLDcmutCpVyl9AkO79OFpEY0n2yhWAH6yzn/ZR
EYZvYsezqz/uSWc6/S3vHMY71Bh52QxqLoPOvS6NiE7V5NdAmUrDlrrwxWe8/jJ0
V+9Hj7XXPctQ5A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:37:36 2026 by rpki-client