Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File:                     KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier:          IBdPSb5pfcg0UKyKL/Oh3Wg/xr7ttTjvTxCgWgBdnV8=
Subject key identifier:   20:C3:F1:57:6E:64:78:BB:DB:EB:81:84:46:7E:F9:FC:5C:E6:E7:8D
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer:       /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial:       019EBF5ACB163A62C25D611AEE4C1614DBF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number:          033F
Signing time:             Sat 13 Jun 2026 05:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:58 +0000
Files and hashes:         1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: ubkQ01r4UO55TDD0VHf8KLgHzLde5qJgA+Xl+9eHOlw=)
                          2: cjM0znzLJC2QR0PgnNVfAe1h_mI.roa (hash: niPdw0pZGGHLaXhD+OqWZAWoags/W4iskvjHWI94b6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:cb:16:3a:62:c2:5d:61:1a:ee:4c:16:14:db:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
        Validity
            Not Before: Jun 13 05:00:58 2026 GMT
            Not After : Jun 14 05:00:58 2026 GMT
        Subject: CN=20c3f1576e6478bbdbeb8184467ef9fc5ce6e78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:ef:86:3c:59:dd:68:04:28:9b:87:d6:71:
                    bc:5f:7e:43:85:79:70:8c:d5:f5:30:5f:07:b2:5d:
                    35:8b:a2:74:2d:f0:92:a2:3c:60:2f:bc:c7:43:23:
                    42:44:9b:5b:a8:0e:1c:43:66:8e:2e:43:e4:dc:d2:
                    49:bc:00:52:0c:49:e0:a6:35:cf:cc:9d:28:09:c6:
                    34:91:25:d3:10:ee:58:b2:67:9a:23:af:70:d8:d5:
                    9d:55:6e:e9:d8:e0:79:02:c1:ef:f0:d8:3a:e8:03:
                    cc:d6:ac:7e:b1:1e:c7:23:5c:16:e7:9b:c1:0a:9e:
                    d4:ec:bd:6c:41:0a:61:9f:7f:08:a8:bc:74:ff:b3:
                    76:3c:a3:45:ec:76:58:60:47:76:1a:52:db:66:4b:
                    58:f3:86:e6:1f:f7:39:72:a9:a5:f4:13:78:53:9b:
                    1e:8d:9f:3b:a2:16:55:5f:dd:65:eb:26:e1:6c:6b:
                    e1:ee:25:6c:09:25:49:9f:80:09:83:22:76:ce:d3:
                    47:4c:cb:b4:8a:f3:83:85:77:49:f0:6b:5d:17:a6:
                    b0:2e:96:10:a2:00:88:27:83:b8:66:a3:2a:fd:f2:
                    2b:eb:54:ed:44:2b:3c:5f:7e:1d:fb:ea:46:bf:98:
                    64:bb:f1:8c:b3:c6:41:2e:d4:d7:d3:1e:e7:24:3c:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C3:F1:57:6E:64:78:BB:DB:EB:81:84:46:7E:F9:FC:5C:E6:E7:8D
            X509v3 Authority Key Identifier:
                keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:de:69:e8:a2:b6:e3:9f:fb:db:08:70:b2:ad:36:76:ab:b8:
         4b:bd:41:4e:a3:1e:9e:c2:80:79:74:60:36:4f:58:a4:2c:d3:
         ad:1b:58:82:38:62:19:6b:f2:4f:41:0c:86:c1:bd:66:7b:c5:
         62:c7:51:68:f0:d2:90:50:88:9c:40:74:6c:f1:32:3b:09:5c:
         54:d1:ce:1d:17:77:08:2a:91:39:9b:32:e3:b1:5e:d0:cc:57:
         5a:d0:ec:4b:2a:57:bc:89:b2:2a:23:fd:ff:4a:08:02:14:44:
         d6:6e:fb:59:fc:93:49:7b:55:1f:d0:50:ac:f4:9e:ea:15:7c:
         ce:91:e6:fc:17:78:83:89:12:72:1d:b9:8e:4a:15:36:47:5d:
         82:b5:e5:a5:d3:4e:92:7e:e4:86:de:18:28:55:8c:f4:8d:86:
         cc:35:b5:ef:12:2a:a8:e3:29:8b:11:08:b9:ba:ff:1d:92:ee:
         9c:37:a8:55:b2:18:4f:90:07:10:bc:68:fb:91:e6:1a:a7:4b:
         37:05:77:b1:ba:05:1d:fe:4b:1a:3d:ad:00:41:3b:38:72:cc:
         e3:99:f8:a3:e8:73:6d:4b:50:e2:a6:70:4c:d5:36:c5:bc:65:
         f4:6b:7a:1e:b4:6a:c4:c1:b6:21:70:59:13:34:ab:1a:55:7f:
         cd:8c:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:13 2026 by rpki-client