Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File:                     tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier:          Pf5UVbNhglp5WhH5GUMeOmu5UItjo3aQUBJh2Yygl3s=
Subject key identifier:   EB:C8:1E:62:BA:92:91:07:38:6C:BA:BD:DA:40:2B:F2:DF:BA:8E:56
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer:       /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial:       019EC300B717A6C675DFA172FF604877B7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 22:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 22:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:04 +0000
Files and hashes:         1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=)
                          2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=)
                          3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=)
                          4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: +IrxIIbk9/5/Jls1vSSzXMtSmd3c9vkGsyVpdktDqWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:b7:17:a6:c6:75:df:a1:72:ff:60:48:77:b7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
        Validity
            Not Before: Jun 13 22:01:04 2026 GMT
            Not After : Jun 14 22:01:04 2026 GMT
        Subject: CN=ebc81e62ba929107386cbabdda402bf2dfba8e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:fb:86:aa:0b:a3:f1:70:29:99:da:ed:de:
                    ad:44:c8:20:39:e3:f8:2f:e6:b4:60:a3:8d:de:60:
                    7a:4a:14:09:7b:f8:ca:62:96:d6:9e:11:df:73:85:
                    9a:45:61:0e:7d:56:55:91:0c:2c:a2:b0:14:9d:04:
                    5a:94:5d:ce:49:f2:12:7e:b6:77:da:6c:96:f4:8c:
                    81:4c:03:87:ca:ca:f3:b2:b3:68:07:2c:65:c7:32:
                    92:fa:ce:ef:db:a3:7a:48:d1:b9:49:91:e4:b6:71:
                    44:7e:71:43:74:35:60:70:c4:c2:51:bd:60:5f:44:
                    7f:e6:61:63:f6:56:71:88:c3:5e:da:d4:60:1b:3a:
                    77:84:be:67:64:a4:a0:d9:8b:a8:65:05:ac:42:17:
                    51:a8:95:fe:3f:39:16:59:d9:1b:6d:cb:8f:51:f9:
                    76:5c:2d:41:3f:9e:f4:eb:61:69:b3:b2:d8:5c:59:
                    1c:6c:6f:9d:87:55:d1:ad:b4:26:ee:e1:6c:cd:b9:
                    1c:18:5d:28:5b:c7:90:4b:80:a3:23:91:c5:e4:bb:
                    22:0d:7e:a0:07:28:c1:48:4c:29:4f:3b:55:c8:3c:
                    b3:15:20:6b:82:16:90:eb:80:ea:ca:ad:3b:76:f5:
                    72:16:ef:11:59:24:eb:7f:22:63:18:e6:68:cd:f5:
                    8f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C8:1E:62:BA:92:91:07:38:6C:BA:BD:DA:40:2B:F2:DF:BA:8E:56
            X509v3 Authority Key Identifier:
                keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:74:48:cf:af:15:0d:4d:05:47:d8:2c:23:ff:c3:c2:14:
         74:23:43:50:1e:31:a7:b6:5e:b9:e5:1a:2e:1a:a0:a5:39:12:
         6a:27:69:73:5d:f1:5d:db:29:21:f6:7f:02:df:4f:7d:07:60:
         58:93:c1:87:b0:f8:f3:3c:d6:91:64:00:bd:36:2d:bb:aa:76:
         62:7d:92:fe:40:98:e4:89:c7:8f:b0:eb:91:e5:fd:54:5a:85:
         9b:61:ef:c5:b9:3c:ab:43:3e:f7:d0:f5:fb:9e:82:95:f4:07:
         62:0a:56:33:da:c0:c8:15:a9:43:93:2f:43:5b:45:f0:1f:63:
         80:41:8f:37:91:38:7f:80:5b:1f:f7:d4:3c:3e:2e:ad:ed:48:
         9a:08:a5:53:a5:72:d8:51:27:ef:5c:82:79:60:48:f0:98:c4:
         9e:c1:3d:6b:a2:36:53:1a:27:a8:70:ce:20:19:ae:93:97:9d:
         7f:0d:8e:f1:7c:db:fb:22:51:f4:ab:9e:6c:97:6b:ec:ef:a1:
         71:67:6a:6d:4d:bf:3e:dd:3c:48:af:5c:e4:b9:d1:1f:5d:84:
         79:75:0c:88:37:e3:57:8e:48:a7:18:52:9a:ee:a4:fb:5f:4c:
         20:76:96:c0:dd:e9:3e:7c:23:a6:66:be:06:f4:79:04:f2:4d:
         da:44:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:18:46 2026 by rpki-client