Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
File:                     1-KK2BcWOB0aq3Fvw18vDbJMH900.mft (raw, json)
Hash identifier:          GB1whWQmQgo5APmWDKxCuOGoTMbs+I4Zgov8clZVn/4=
Subject key identifier:   BD:D2:AF:23:93:F4:D3:11:25:AC:9C:24:2A:5B:1F:25:16:74:C2:25
Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
Certificate issuer:       /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
Certificate serial:       019EC148C60F7F2039A6849CFCC2A0A38494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
Manifest number:          0527
Signing time:             Sat 13 Jun 2026 14:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:32 +0000
Files and hashes:         1: 1-KK2BcWOB0aq3Fvw18vDbJMH900.crl (hash: dV39rtQ9oOl1Agzv2Zk6kNoAFTdgiq4BfRlYGgpUxu4=)
                          2: 5lw0Z8fN3yFK1pB9OZyXHQLW53k.roa (hash: WDVA9Lawkmj9ZCv4AbTYoBdoLfCfWXIwbeGfqru0gP8=)
                          3: q2x6Xc8ZZACW9fJu899MsKHJMM8.roa (hash: pwMpRh3wZ+J+ajZgUW7mCK8jkEGxvenqPQjzyuBapnU=)
                          4: rzIgn7Bc7AW1MuiRL3XQ-BG4jx0.roa (hash: arDjnmmejpgyaF8cmbFn6SUiXjaKhcHxmQG+SV3R6fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:c6:0f:7f:20:39:a6:84:9c:fc:c2:a0:a3:84:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
        Validity
            Not Before: Jun 13 14:00:32 2026 GMT
            Not After : Jun 14 14:00:32 2026 GMT
        Subject: CN=bdd2af2393f4d31125ac9c242a5b1f251674c225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:cd:17:ae:3f:82:65:be:be:84:4e:b8:48:
                    90:e6:78:8f:dd:df:d9:46:54:59:48:9e:ff:43:61:
                    1b:c4:1b:e3:53:71:b4:13:2d:54:d1:33:88:54:7d:
                    be:c7:d3:6e:f5:1e:a7:2b:a7:62:f3:56:c1:46:b7:
                    8f:63:6e:d8:b2:be:47:70:8e:30:12:14:25:23:a0:
                    1f:3c:5b:94:ba:49:a3:42:39:9a:3b:7b:80:58:f9:
                    2b:fe:65:0a:64:6f:9d:c8:5c:7c:75:7c:8f:9a:f1:
                    67:74:9b:4f:8b:9b:0e:d7:92:d0:34:35:d3:06:bd:
                    88:65:8d:26:91:b1:da:bb:7d:52:12:f2:7a:16:4f:
                    c2:47:4a:48:54:d9:29:bd:d3:68:dc:18:97:be:e5:
                    14:c5:c6:65:fa:75:91:2f:6c:b9:e0:d6:32:da:6b:
                    30:55:0f:dd:ff:7a:de:16:87:96:9e:72:bb:ad:f8:
                    df:75:78:6c:73:3c:96:d3:f8:0a:f0:ce:3f:ce:de:
                    2e:fd:f1:08:34:f1:de:12:a6:92:6d:d5:fc:2a:04:
                    18:7b:49:41:71:39:63:b0:da:db:85:cc:66:ff:b4:
                    89:b3:91:aa:cc:48:1c:4f:b7:92:b6:a4:3e:35:0f:
                    4b:b1:21:b7:ce:80:db:56:86:74:ac:a6:48:3c:b9:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D2:AF:23:93:F4:D3:11:25:AC:9C:24:2A:5B:1F:25:16:74:C2:25
            X509v3 Authority Key Identifier:
                keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c0:f6:84:c4:74:30:07:8b:54:d9:9f:9b:9f:32:fd:a3:73:
         89:9a:ae:c9:4d:97:59:ae:64:de:ea:ba:fc:6d:d8:84:62:00:
         b4:fb:42:6c:be:3e:bf:fa:ff:f4:a8:c6:dc:ca:89:7e:84:ea:
         5d:7b:27:7a:1f:32:d8:5b:71:90:69:f8:13:9e:73:52:31:92:
         a2:99:e9:2c:ba:44:cb:8a:52:99:f4:2b:13:22:50:bd:51:e2:
         73:3b:03:88:12:cc:77:f2:bc:13:01:62:d9:07:29:92:27:ce:
         06:35:5c:08:28:d2:fb:1a:77:30:31:88:2f:c0:75:9e:99:8f:
         63:7e:5c:46:cd:3e:29:ec:57:ab:90:0c:bd:b7:16:b5:a4:54:
         e4:84:2f:99:c9:4e:41:1b:ce:23:d4:0a:aa:76:c1:86:e6:a3:
         99:06:4f:a2:02:9b:9d:33:13:9c:ab:42:bd:ec:aa:f5:9b:2e:
         cc:c4:74:d3:7c:ab:0e:d3:c2:d1:eb:ae:a5:24:35:93:af:ee:
         5a:d6:c6:7b:2b:09:21:08:36:27:33:58:c4:78:b7:f4:5a:1b:
         8a:84:93:75:4a:74:39:01:a0:d0:d2:ba:0b:2e:1d:dd:26:f8:
         2a:04:a1:22:08:66:a6:a4:50:f6:4b:e5:94:c7:dc:15:b3:84:
         ae:70:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:27 2026 by rpki-client