Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File:                     KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier:          W5kXndhayj18Uot1ILMHzL4fdg8zhAypR531TlsDW0Q=
Subject key identifier:   30:DF:A7:9D:B2:E0:69:8B:13:58:D1:59:6B:23:4D:3D:31:7E:68:43
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer:       /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial:       019EB9215B7EDE12BE89663B18B26F87244A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number:          1696
Signing time:             Fri 12 Jun 2026 00:00:31 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:31 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:31 +0000
Files and hashes:         1: 1-z20vDfkn7oH-6wUhtZ7pUOpXYs.roa (hash: 4MFRLpbPJz7onF3ec6CHT+GVAOztKot1i4cNl9/RUGQ=)
                          2: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: Ve/XWIIni36fJOEy6TlnYUV5+Kh4u9z7abgeQztmn9E=)
                          3: O21Shcq_z6RKIQVhghQ8x3iEUgo.roa (hash: PftCITy+sH9MILDPnvPA0rgTafRE24Enke6NGZ2wU40=)
                          4: kip9OEz8XKCqejVGiyHb4UeVJqw.roa (hash: 2JQk1BgdQDCMPFy2Bnpli4/vgD3QHxPKM4wyX0aSciw=)
                          5: qFN4BBxdmHy_3BcnNOupfLTZLMo.roa (hash: BnnmcXeCam4+KhT/CdouCX5HwDOQfbwphY/d8ikHz1E=)
                          6: uak-SP6C0SdGYf4Tcy5QLvzCEvQ.roa (hash: 5hi2l5GuzQIHHEKLjg//xukNKdrAlFGmuJKbjmJZ2aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:5b:7e:de:12:be:89:66:3b:18:b2:6f:87:24:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
        Validity
            Not Before: Jun 12 00:00:31 2026 GMT
            Not After : Jun 13 00:00:31 2026 GMT
        Subject: CN=30dfa79db2e0698b1358d1596b234d3d317e6843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:5d:0c:c8:44:b8:ad:71:a7:fb:27:5f:da:
                    69:eb:cb:4e:88:62:1c:ba:cb:f6:be:35:27:fb:76:
                    65:35:cd:6b:85:06:15:bb:b7:5b:78:58:33:9e:1b:
                    1c:d0:85:d7:a2:80:4a:9f:c2:5a:dc:14:f0:24:2f:
                    d3:99:b5:8d:ed:d1:5f:58:98:26:9e:95:5d:a5:29:
                    15:fd:a7:11:36:58:51:ff:34:a2:2d:50:de:56:1f:
                    8d:16:61:1a:82:a4:b2:26:db:b1:cd:b4:b5:73:49:
                    9c:22:7f:db:ae:64:fe:79:8e:72:68:33:de:62:60:
                    a2:d2:74:3c:ce:2d:8c:42:95:6b:84:e8:61:34:42:
                    bc:cd:34:e6:fd:74:2b:8e:e6:1e:5b:1e:72:ba:83:
                    ac:82:a4:39:cc:2c:0b:d8:a6:44:c0:6c:d3:d7:d2:
                    cc:b5:90:78:9e:5d:6e:c5:50:3e:e1:fc:4b:ff:de:
                    13:47:37:10:48:89:dd:1e:55:95:93:97:63:15:fb:
                    97:de:c3:00:f2:db:35:b6:d6:c0:b5:4c:49:ca:78:
                    df:32:47:7b:37:74:8a:35:9a:01:74:b7:20:31:b0:
                    d8:06:19:5c:ea:5a:d5:10:fa:fd:d4:a3:51:d7:90:
                    55:c5:8a:66:52:04:cb:79:4e:43:0c:fd:63:31:4f:
                    ae:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DF:A7:9D:B2:E0:69:8B:13:58:D1:59:6B:23:4D:3D:31:7E:68:43
            X509v3 Authority Key Identifier:
                keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:61:e2:52:c6:98:a4:dc:b1:9b:12:41:d9:a3:ef:55:3c:f1:
         76:c7:c4:c2:6d:44:4e:81:94:64:72:a0:72:91:0a:1f:9c:84:
         67:42:0e:10:45:e0:8b:af:e6:2b:f7:5c:ed:5a:b0:69:b6:49:
         27:81:8d:28:c0:d7:c6:e8:10:16:3a:6c:ea:0d:cc:e8:3a:80:
         21:a6:94:6c:e5:c6:20:ac:1a:75:36:cc:28:58:39:af:32:f3:
         97:f0:dc:00:db:d7:e8:58:9b:4a:4f:36:aa:9b:69:7a:fd:f8:
         98:fb:a4:09:3b:5a:38:b3:eb:22:b9:29:b3:92:28:81:1a:73:
         02:af:59:d6:41:26:5e:e8:b1:43:b7:55:3d:f1:b4:65:54:70:
         b8:b1:60:63:95:03:23:a5:08:ba:1d:95:88:c7:96:51:97:68:
         13:85:dd:fa:df:e9:b5:12:ed:5d:02:2c:06:32:fe:e6:bc:b4:
         50:00:15:da:db:19:c4:c2:e8:e7:c6:8f:86:8a:78:83:a6:5d:
         e3:18:11:39:1d:50:37:24:2d:cc:00:6c:34:1a:a5:3d:f8:48:
         d5:9d:59:0a:d7:03:0d:88:23:6b:58:de:14:68:cd:43:87:cf:
         f9:11:23:12:1c:fa:29:be:b4:c5:b3:36:24:7c:e2:a0:c9:5d:
         83:36:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:50:30 2026 by rpki-client