Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File:                     K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier:          AxUx75lfNBlH7M3ZR7Ssi4SROqJlk3CHJispcYNMU7Q=
Subject key identifier:   22:2F:EA:7A:51:50:27:DD:54:9F:2E:8C:CE:D2:7F:A9:DC:DD:EC:80
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer:       /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial:       019F1B686FD41438C401219A1CE6726EF319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number:          1629
Signing time:             Wed 01 Jul 2026 02:00:56 +0000
Manifest this update:     Wed 01 Jul 2026 02:00:56 +0000
Manifest next update:     Thu 02 Jul 2026 02:00:56 +0000
Files and hashes:         1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: Lum2cTNIlKgbrDvIfaB2bGnUQuLtxY5payzBksfNIRo=)
                          2: bPwyaBbJqcQN7JQtu51i9S9uIaM.roa (hash: SC7PxmBSPghpd6hjRs92LdR0jqsFurZFEwEHVN8gVC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1b:68:6f:d4:14:38:c4:01:21:9a:1c:e6:72:6e:f3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
        Validity
            Not Before: Jul  1 02:00:56 2026 GMT
            Not After : Jul  2 02:00:56 2026 GMT
        Subject: CN=222fea7a515027dd549f2e8cced27fa9dcddec80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:14:e6:11:84:88:f1:34:a9:77:4b:50:af:
                    07:14:87:17:d7:41:bd:39:72:94:43:d2:86:1e:26:
                    75:8b:66:4e:01:72:88:3b:70:0e:e2:2d:00:71:ff:
                    38:2e:d8:2b:ed:38:bc:8b:b0:1b:56:39:2f:d2:d5:
                    90:8d:46:b7:aa:8c:af:c6:d6:dc:ab:c7:cf:6d:8d:
                    2a:b7:89:f4:78:ec:86:80:6f:74:3d:1b:9d:0c:86:
                    c5:54:1a:6a:c2:62:29:14:9f:03:9d:f8:b9:d0:2c:
                    a1:8f:65:99:63:6a:50:47:51:1a:ad:44:a9:11:1e:
                    14:6a:42:1d:35:d3:d5:67:ff:38:0f:8e:c4:a8:53:
                    e6:d0:f8:3d:7c:d6:85:d5:4a:07:85:5f:65:50:71:
                    7e:dc:7d:75:da:fc:cf:49:1d:a9:e7:2f:44:2d:50:
                    79:bd:9d:22:ba:a0:68:06:f5:63:a0:aa:2d:c5:ea:
                    2a:f2:93:77:da:c5:ba:d6:70:7d:8d:8a:49:13:c9:
                    7f:6b:20:37:c7:ad:c0:d2:47:0c:81:d9:e0:df:20:
                    fd:87:6a:94:5b:17:17:d8:66:2d:f4:f9:17:56:fd:
                    3b:3b:cc:7f:0a:48:a3:5f:0b:7c:6b:e0:1f:1c:f3:
                    98:19:88:22:e3:82:c7:ff:6b:a2:9d:0d:f7:1f:54:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2F:EA:7A:51:50:27:DD:54:9F:2E:8C:CE:D2:7F:A9:DC:DD:EC:80
            X509v3 Authority Key Identifier:
                keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ab:7f:b6:d8:cd:94:c4:8e:56:57:eb:8b:9f:d4:4c:c5:fe:
         17:cc:dc:ee:15:ec:22:86:37:24:3e:94:cf:50:e4:be:bd:ef:
         fd:9d:88:e8:eb:98:00:76:cc:7c:82:6c:2d:b2:cd:e4:7e:0b:
         37:0f:ff:cc:9b:56:1e:14:33:d7:fb:ba:7c:bd:1f:51:ec:1c:
         9e:86:c8:52:2a:d3:b8:08:5d:b0:aa:32:4f:0f:5c:b2:40:4f:
         18:1d:ae:87:93:4c:7b:9a:c5:5c:d5:c2:91:e3:f4:22:f4:51:
         38:0f:2d:c9:07:db:ce:3e:be:da:b2:10:1a:80:f0:05:1a:94:
         77:51:14:99:31:34:7a:ee:ad:20:47:6c:a7:61:e6:89:62:56:
         52:67:ff:7c:cd:d8:b8:fa:4c:3e:a9:84:f9:da:47:86:c7:13:
         ed:45:34:91:ef:e4:4f:b6:83:8c:a2:ac:bc:48:5d:67:fa:ad:
         19:bd:a8:5e:1c:4f:6f:b4:b6:b5:63:86:3f:d9:f8:f3:8f:f4:
         d7:c6:cb:e2:72:6f:ab:90:17:46:92:be:05:75:00:78:75:6d:
         d4:8f:91:18:f2:6c:45:86:44:a8:ba:e9:e5:1b:80:4c:81:c2:
         b1:f6:da:36:72:f7:a9:46:2a:dc:b3:b7:32:94:6c:68:89:ef:
         ba:12:a8:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8baG/UFDjEASGaHOZybvMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1
MDhmZWUwHhcNMjYwNzAxMDIwMDU2WhcNMjYwNzAyMDIwMDU2WjAzMTEwLwYDVQQD
EygyMjJmZWE3YTUxNTAyN2RkNTQ5ZjJlOGNjZWQyN2ZhOWRjZGRlYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolcU5hGEiPE0qXdLUK8HFIcX10G9
OXKUQ9KGHiZ1i2ZOAXKIO3AO4i0Acf84Ltgr7Ti8i7AbVjkv0tWQjUa3qoyvxtbc
q8fPbY0qt4n0eOyGgG90PRudDIbFVBpqwmIpFJ8Dnfi50Cyhj2WZY2pQR1EarUSp
ER4UakIdNdPVZ/84D47EqFPm0Pg9fNaF1UoHhV9lUHF+3H112vzPSR2p5y9ELVB5
vZ0iuqBoBvVjoKotxeoq8pN32sW61nB9jYpJE8l/ayA3x63A0kcMgdng3yD9h2qU
WxcX2GYt9PkXVv07O8x/CkijXwt8a+AfHPOYGYgi44LH/2uinQ33H1TM6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIv6npRUCfdVJ8ujM7Sf6nc3eyAMB8GA1UdIwQY
MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt
NDQ5MTI0YWNlMDI2LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2
LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6t/ttjN
lMSOVlfri5/UTMX+F8zc7hXsIoY3JD6Uz1Dkvr3v/Z2I6OuYAHbMfIJsLbLN5H4L
Nw//zJtWHhQz1/u6fL0fUewcnobIUirTuAhdsKoyTw9cskBPGB2uh5NMe5rFXNXC
keP0IvRROA8tyQfbzj6+2rIQGoDwBRqUd1EUmTE0eu6tIEdsp2HmiWJWUmf/fM3Y
uPpMPqmE+dpHhscT7UU0ke/kT7aDjKKsvEhdZ/qtGb2oXhxPb7S2tWOGP9n484/0
18bL4nJvq5AXRpK+BXUAeHVt1I+RGPJsRYZEqLrp5RuATIHCsfbaNnL3qUYq3LO3
MpRsaInvuhKojQ==
-----END CERTIFICATE-----
Generated at Wed Jul 1 06:28:38 2026 by rpki-client