Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          PF+GSSSQO5pN0TvErfJga+Ul/aqouCmlZdEzAHeTF+Y=
Subject key identifier:   DF:E1:B8:52:EE:7B:BD:DE:47:CB:62:A4:07:69:23:A6:AD:14:3E:28
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       019EB8B44681230F2F269051EFF71AD17A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          16B6
Signing time:             Thu 11 Jun 2026 22:01:22 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:22 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:22 +0000
Files and hashes:         1: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (hash: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM=)
                          2: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (hash: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo=)
                          3: DSzDYKP0Eliter60MSyPBC3uoBo.roa (hash: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY=)
                          4: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: JrP26YwCKPo8hro7PfeB2nBfsBwIoKVF+ZM4HTpwyHg=)
                          5: o-d6O05K7BPSIDagH_dA7QNFluU.roa (hash: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:46:81:23:0f:2f:26:90:51:ef:f7:1a:d1:7a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Jun 11 22:01:22 2026 GMT
            Not After : Jun 12 22:01:22 2026 GMT
        Subject: CN=dfe1b852ee7bbdde47cb62a4076923a6ad143e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:83:87:d4:f5:47:e5:f6:98:82:11:19:cf:
                    9d:c8:30:c0:e4:2d:46:45:fd:9e:bb:5a:f9:b2:38:
                    38:aa:2e:32:59:b8:7c:68:47:35:ce:d8:81:2e:65:
                    67:88:e9:d1:b3:bf:d8:11:f0:d5:57:95:a0:dc:82:
                    c8:95:f4:36:30:c5:3e:6d:23:a8:db:2b:1d:e6:54:
                    d7:2d:d1:53:5b:b5:88:69:52:b7:46:a8:2a:93:ab:
                    f1:81:8a:38:40:1a:4a:b4:15:70:0a:84:b4:8e:80:
                    b1:08:5d:ed:ec:ea:6d:15:ee:d3:2b:9e:5b:d5:d8:
                    ed:d3:28:f6:d6:f8:dc:71:38:5b:63:82:4e:a3:43:
                    c7:04:c4:6f:2f:20:39:20:57:22:93:d2:99:b3:7c:
                    4c:1a:43:b1:e9:3e:5a:78:56:be:80:88:e7:f3:74:
                    b3:9f:39:1e:ce:a8:22:db:28:d0:28:e7:3f:a7:c5:
                    a5:fa:0d:c5:6d:b9:93:d4:b6:9d:5e:aa:c1:fc:67:
                    43:3a:6a:99:7f:e0:f1:35:4c:19:80:4d:f8:89:11:
                    8a:72:f3:2a:d0:39:fe:cc:90:e4:84:8d:4f:ea:d8:
                    50:32:9e:9f:55:34:eb:0d:4c:6d:a9:e1:3e:47:97:
                    d4:a4:42:74:77:cd:5f:46:5e:2f:be:97:74:ce:de:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E1:B8:52:EE:7B:BD:DE:47:CB:62:A4:07:69:23:A6:AD:14:3E:28
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:af:78:40:aa:86:a8:16:2f:20:6e:38:8d:ff:ae:d8:34:ef:
         60:53:7f:43:2e:73:6e:e5:6c:71:b2:09:9a:09:c9:9c:6a:97:
         a0:46:98:cb:3b:90:4c:ca:85:1f:5b:ef:2b:a3:ff:9e:32:53:
         3a:bc:21:72:47:87:ce:cd:76:38:b2:05:9f:70:92:72:58:97:
         ab:5e:bd:8a:73:17:dc:e2:71:57:0b:bc:c3:1d:46:3f:ce:c9:
         94:23:a7:00:2d:83:78:bf:a4:83:e8:dd:3e:36:c6:29:b6:6f:
         62:ad:e5:14:77:54:69:76:fa:7b:e1:66:86:1e:da:8c:9f:de:
         2e:7c:fc:3d:44:d1:9b:c3:a9:f4:06:7d:eb:ea:86:c4:88:36:
         a8:70:3d:09:0c:3f:30:f7:99:fb:94:24:62:76:40:b7:d5:e3:
         e5:42:ec:46:fe:d5:2a:76:97:6b:c1:9a:c8:84:29:84:3f:55:
         68:5c:55:fa:14:68:81:cb:04:90:89:5a:7e:82:e6:f2:5e:06:
         c6:1b:26:5d:09:3a:43:d6:67:6f:92:7a:4c:f9:ea:b3:88:cd:
         c6:d9:af:35:60:89:05:57:cb:94:89:5a:32:75:f0:e4:b3:55:
         02:a8:bc:2e:fc:24:c3:84:6d:cc:f1:fc:f6:d9:ae:b2:bc:c6:
         f9:41:58:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:17:43 2026 by rpki-client