Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File:                     ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier:          j/OmlD2h1Jqejyxax5a/biCmwy5fp5LsnRK5SC993nA=
Subject key identifier:   2F:79:77:5F:DF:0B:DA:39:60:95:38:3F:61:EA:4A:56:80:68:8B:51
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer:       /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial:       019E32299228E8D3EFB59CCAF7A31E3B14D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number:          18A2
Signing time:             Sat 16 May 2026 19:00:45 +0000
Manifest this update:     Sat 16 May 2026 19:00:45 +0000
Manifest next update:     Sun 17 May 2026 19:00:45 +0000
Files and hashes:         1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
                          2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: ygVwvPVRtN9tnj8RkMlue2LWE1kQsxV3+OVg/oU9NNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:92:28:e8:d3:ef:b5:9c:ca:f7:a3:1e:3b:14:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
        Validity
            Not Before: May 16 19:00:45 2026 GMT
            Not After : May 17 19:00:45 2026 GMT
        Subject: CN=2f79775fdf0bda396095383f61ea4a5680688b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:29:c4:0b:e2:5a:f0:e2:26:88:13:05:e4:cc:
                    75:83:06:34:df:b6:28:f6:32:56:52:8b:bc:52:0b:
                    51:34:24:e1:60:fa:a7:d4:c9:08:30:7b:76:06:45:
                    4c:47:56:9e:4e:0b:a0:52:72:0d:8f:35:00:90:00:
                    6e:c1:d9:d1:f1:26:2a:69:4e:b2:1f:8c:85:dc:63:
                    7e:36:3f:fd:a2:3f:9f:73:0e:0b:9f:98:2b:76:4d:
                    ec:1e:3a:0e:17:ce:e5:d9:e1:98:e4:bb:ee:e0:2d:
                    79:68:e4:57:f5:cf:d9:1b:3f:97:15:ae:62:21:86:
                    a3:79:fe:eb:c5:9e:f7:3e:20:92:8b:78:10:20:95:
                    5d:93:06:f2:da:16:76:b1:36:1b:44:dc:c5:83:70:
                    39:5e:33:3d:f2:a1:40:ac:34:4d:b5:da:38:6a:78:
                    68:0b:6a:f4:57:0e:1a:57:75:ab:f1:b4:a5:d4:54:
                    c1:d0:e1:f6:4d:3e:a2:9b:99:77:9b:1e:ed:4e:43:
                    b8:8b:dd:8e:b6:60:6e:60:80:57:be:18:0d:17:8a:
                    b6:cc:57:60:97:f0:c7:5f:d4:b9:47:ab:6a:5f:dd:
                    3f:20:97:83:dd:a8:c8:ab:36:55:bd:52:73:b8:57:
                    78:d4:c3:3a:e6:56:69:9c:ad:ae:99:af:2e:2d:97:
                    26:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:79:77:5F:DF:0B:DA:39:60:95:38:3F:61:EA:4A:56:80:68:8B:51
            X509v3 Authority Key Identifier:
                keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:87:e4:6a:85:8c:f2:97:48:66:6c:e8:b2:e5:79:04:03:61:
         a7:ef:fe:4c:08:14:3c:df:a8:88:6c:17:77:e1:af:17:3f:14:
         cd:08:a4:12:0c:c0:b5:37:f8:42:72:e9:8e:9e:ab:b7:a5:e7:
         e7:7d:30:16:df:5e:7b:1a:f3:88:cc:88:37:ba:dc:1d:1a:61:
         16:c6:3d:78:6c:62:f8:e3:81:4e:cb:88:92:24:cb:d5:ff:5e:
         2c:96:c6:52:52:21:7c:5a:e9:00:d3:63:b9:34:20:a8:7e:71:
         99:17:a9:cf:98:63:8f:2b:1f:56:e5:81:14:00:b6:07:5a:df:
         0a:e8:8b:b5:6e:46:4a:e5:ad:d8:2c:11:15:a9:e9:aa:eb:8a:
         2b:7c:96:bc:26:d5:fc:a2:3d:60:c4:d5:ae:0e:25:f5:c6:6d:
         ce:13:85:9a:56:2e:bc:09:1f:69:a0:58:86:2c:dd:83:a9:42:
         6d:44:39:07:81:56:87:5d:4b:ec:b4:88:09:06:53:2b:9f:28:
         7b:48:a2:d5:2f:ab:78:82:06:32:6e:0e:35:31:a7:13:b3:44:
         c4:1e:bb:37:da:f2:ec:3f:42:9f:2b:d7:6a:69:21:7f:90:e0:
         31:82:18:85:e3:bc:4f:21:e1:6d:f7:9c:e4:dd:15:c1:e6:30:
         b4:59:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:32 2026 by rpki-client