Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File:                     KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier:          i0l6xM4RUQbmLdI+eB2nuIc0KwH5wZno6kWm0OTYdD0=
Subject key identifier:   BC:8C:9E:58:9C:FD:15:21:00:E4:43:77:51:B1:BB:82:53:48:AF:AE
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer:       /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial:       019F115293B27FC05034EEFA857DDA12C7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number:          018F
Signing time:             Mon 29 Jun 2026 03:00:52 +0000
Manifest this update:     Mon 29 Jun 2026 03:00:52 +0000
Manifest next update:     Tue 30 Jun 2026 03:00:52 +0000
Files and hashes:         1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
                          2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
                          3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
                          4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: Bk7mMO74VHMwVLsdeWN69Mztsoj2BuJ52w/e7gUJMvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:52:93:b2:7f:c0:50:34:ee:fa:85:7d:da:12:c7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
        Validity
            Not Before: Jun 29 03:00:52 2026 GMT
            Not After : Jun 30 03:00:52 2026 GMT
        Subject: CN=bc8c9e589cfd152100e4437751b1bb825348afae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e5:a4:a5:d6:39:18:e1:7f:14:0b:32:f4:67:
                    df:a7:02:2f:5e:a0:dd:41:a9:b9:2f:7f:0f:4e:28:
                    91:6e:ac:21:01:43:e8:db:2f:bf:72:af:12:99:8d:
                    1b:7d:f3:b4:7f:75:8e:9b:18:27:90:8b:a9:aa:ec:
                    33:c3:92:0e:8a:0c:22:d8:d9:0e:b2:b7:57:4c:57:
                    10:04:dd:0e:14:2b:c9:c1:97:eb:0f:fd:d5:a5:74:
                    eb:d7:6b:ed:b4:40:43:93:0a:35:2c:cf:d5:fe:7e:
                    8a:4a:79:3b:d6:90:95:a6:f6:94:12:4b:4c:ff:1c:
                    e4:c5:4c:30:4c:97:12:46:aa:77:c9:10:b4:1a:5e:
                    4e:da:6e:a5:e0:80:d4:50:af:97:28:4b:ba:ea:27:
                    2d:6d:ac:a4:87:00:25:73:e5:bb:40:30:e1:dc:c3:
                    ab:62:a3:97:46:3c:8f:54:6b:fa:dc:47:42:8d:32:
                    fb:00:2c:bf:c8:59:ce:bf:51:bc:79:38:b4:f4:e7:
                    72:31:cd:d9:a2:32:f4:07:50:0a:73:db:70:3d:a1:
                    78:d0:73:4c:90:2b:fd:cc:ad:e7:dc:07:7f:41:ed:
                    3a:ca:20:72:53:4f:de:da:76:ff:b4:ab:5d:ce:ac:
                    4b:e7:52:8a:d8:7f:1b:86:3b:8e:7c:05:09:5d:9b:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:9E:58:9C:FD:15:21:00:E4:43:77:51:B1:BB:82:53:48:AF:AE
            X509v3 Authority Key Identifier:
                keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:54:9b:6a:a1:a1:46:26:28:73:ff:7a:7e:c3:37:c0:94:5d:
         ed:8c:b4:99:53:6a:e3:86:ab:e1:6c:f0:5d:b5:2f:1b:29:2e:
         29:6a:99:c3:b6:00:87:ca:5b:c7:e9:bc:f1:8e:d6:07:98:e1:
         41:14:a9:49:d1:da:21:9e:be:63:7f:ee:41:d3:74:f4:9d:07:
         84:e9:62:a2:df:28:31:22:75:fb:f4:1b:de:9f:37:60:ad:9d:
         50:f2:a9:1b:96:c8:bb:6e:ed:ce:a4:e1:d7:7d:cf:8d:e7:c0:
         05:68:fb:6c:2c:3f:5d:b9:21:4e:8e:e0:51:19:8d:3f:67:48:
         4b:34:de:60:e5:99:8c:a2:75:30:97:cc:60:80:e2:54:b2:f4:
         6e:16:46:c7:0f:b1:5c:0d:90:2b:0c:bd:80:42:01:d7:88:c5:
         ff:26:52:e6:6c:d9:df:f9:1e:b7:ee:13:8f:fa:f8:84:0d:61:
         22:98:80:f4:f1:a8:5a:3f:6c:66:e8:bb:8d:dd:60:b4:5a:15:
         e0:62:fc:58:75:77:8c:bb:9a:a3:21:3d:f8:d5:a9:db:b2:98:
         79:3d:48:56:09:7e:9c:00:58:25:12:ca:02:ec:45:35:dd:ee:
         bd:f0:ff:13:60:4a:03:6d:ae:40:91:0a:98:60:86:af:57:9f:
         11:bd:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:13 2026 by rpki-client