Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File:                     KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier:          UlrLK/LYxex5PqFlI58wrt8xgdQgXROhPSBzjTaax4M=
Subject key identifier:   88:55:E2:EA:57:A9:F4:DA:D7:6D:B5:24:1D:E4:36:A8:FD:BA:F6:9C
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer:       /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial:       019EB9588642C4AAB156E3BECA5033A657F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number:          1265
Signing time:             Fri 12 Jun 2026 01:00:46 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:46 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:46 +0000
Files and hashes:         1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: oNrA8xUJySUBvfJPDyfN7fAXdODx+H/ZnHUeeUbkGG8=)
                          2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:86:42:c4:aa:b1:56:e3:be:ca:50:33:a6:57:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
        Validity
            Not Before: Jun 12 01:00:46 2026 GMT
            Not After : Jun 13 01:00:46 2026 GMT
        Subject: CN=8855e2ea57a9f4dad76db5241de436a8fdbaf69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:41:0f:ad:1f:55:c9:e1:7d:04:a9:70:2a:
                    74:92:24:dc:4d:0c:84:96:f4:be:0f:87:d3:bf:ce:
                    bb:87:43:fd:61:b2:8b:c9:10:53:fa:54:80:60:51:
                    e0:48:07:8a:47:07:d9:90:f5:a7:1b:e8:4b:96:38:
                    f0:73:3d:9c:18:9a:34:5b:68:f3:28:29:0a:60:af:
                    b1:91:5a:b4:60:0b:f7:01:8e:e9:c4:eb:40:bc:3c:
                    e1:40:d5:e8:2f:9e:d1:0c:a3:54:c9:95:65:6c:87:
                    69:0e:13:4e:a1:24:5f:ba:ee:c5:fd:53:26:5a:bb:
                    7f:9a:72:e8:e2:17:2c:91:55:f2:19:e5:c8:f9:78:
                    e5:70:ff:c9:b7:6a:1b:ae:94:86:be:87:c2:4f:58:
                    f0:20:be:33:2f:3b:32:6a:c6:59:92:48:b1:35:69:
                    68:77:a5:68:1c:2b:a1:02:87:4e:db:00:44:f1:1f:
                    02:ea:d2:0c:f5:eb:f0:d4:75:2d:3a:59:a1:c5:2e:
                    8e:d9:41:a2:f1:5b:a6:d3:c2:6d:70:b8:5e:04:d3:
                    f9:21:83:e8:a3:09:5d:59:2d:ec:09:81:5f:c1:18:
                    7d:ba:c7:21:a6:39:d7:90:e3:14:b5:91:b3:a3:35:
                    54:35:36:1b:52:dd:c3:73:d7:26:c6:7a:5e:aa:06:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:55:E2:EA:57:A9:F4:DA:D7:6D:B5:24:1D:E4:36:A8:FD:BA:F6:9C
            X509v3 Authority Key Identifier:
                keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:5d:fb:04:5d:e8:b1:63:04:db:51:f3:cf:93:42:b0:01:
         0a:6e:19:d6:69:4c:90:54:ad:7a:03:ed:95:be:d7:6f:e6:fb:
         f9:78:6f:d7:06:06:46:4b:9b:f1:27:a9:76:51:68:14:21:16:
         61:6b:13:43:00:05:57:3b:e3:49:94:93:96:5a:12:db:46:70:
         aa:ed:4a:9d:e8:76:66:18:42:eb:0b:63:d0:36:1c:19:ef:d5:
         cf:94:4f:c7:3a:87:e6:3e:b3:1b:68:ee:de:4b:91:82:13:04:
         39:77:af:16:59:66:c8:75:8e:8d:4a:9a:9d:06:8a:b5:38:cf:
         9c:37:85:93:85:12:12:ee:c9:30:4b:8f:da:b2:eb:47:b0:bd:
         c6:0e:76:c4:06:cd:82:9a:04:9e:2b:06:b9:71:82:c4:03:e4:
         97:2b:30:a4:6a:a2:c8:36:3e:4f:1e:5c:ae:a4:52:b7:7a:16:
         74:7b:95:dc:b3:9c:96:a0:03:cd:74:bd:77:54:90:c5:d8:39:
         0f:dd:5f:1d:03:dc:22:93:eb:aa:90:14:db:ba:f9:91:05:0a:
         e6:4e:2d:66:e4:2e:7c:7e:16:c7:e9:4f:79:cb:6d:4e:c5:36:
         97:13:8e:81:d0:28:76:01:46:bf:7c:c0:a5:59:ed:73:a4:17:
         53:6c:4b:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65WIZCxKqxVuO+ylAzplf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj
OGIyMGMwHhcNMjYwNjEyMDEwMDQ2WhcNMjYwNjEzMDEwMDQ2WjAzMTEwLwYDVQQD
Eyg4ODU1ZTJlYTU3YTlmNGRhZDc2ZGI1MjQxZGU0MzZhOGZkYmFmNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PNBD60fVcnhfQSpcCp0kiTcTQyE
lvS+D4fTv867h0P9YbKLyRBT+lSAYFHgSAeKRwfZkPWnG+hLljjwcz2cGJo0W2jz
KCkKYK+xkVq0YAv3AY7pxOtAvDzhQNXoL57RDKNUyZVlbIdpDhNOoSRfuu7F/VMm
Wrt/mnLo4hcskVXyGeXI+XjlcP/Jt2obrpSGvofCT1jwIL4zLzsyasZZkkixNWlo
d6VoHCuhAodO2wBE8R8C6tIM9evw1HUtOlmhxS6O2UGi8Vum08JtcLheBNP5IYPo
owldWS3sCYFfwRh9uschpjnXkOMUtZGzozVUNTYbUt3Dc9cmxnpeqgbdBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhV4upXqfTa1221JB3kNqj9uvacMB8GA1UdIwQY
MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct
ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3
LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMZd+wRd
6LFjBNtR88+TQrABCm4Z1mlMkFStegPtlb7Xb+b7+Xhv1wYGRkub8SepdlFoFCEW
YWsTQwAFVzvjSZSTlloS20Zwqu1Kneh2ZhhC6wtj0DYcGe/Vz5RPxzqH5j6zG2ju
3kuRghMEOXevFllmyHWOjUqanQaKtTjPnDeFk4USEu7JMEuP2rLrR7C9xg52xAbN
gpoEnisGuXGCxAPklyswpGqiyDY+Tx5crqRSt3oWdHuV3LOclqADzXS9d1SQxdg5
D91fHQPcIpPrqpAU27r5kQUK5k4tZuQufH4Wx+lPecttTsU2lxOOgdAodgFGv3zA
pVntc6QXU2xL6w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:51:00 2026 by rpki-client