Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File:                     7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier:          e4eIn5FUjDJkthZxD95Py6dYw+ccuecfSjKtQb08C8E=
Subject key identifier:   C2:B3:0D:07:EC:72:6E:0C:E0:7C:DC:50:04:73:9A:CF:2F:8B:4C:D4
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer:       /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial:       019EB921E14B62E2F8E418834AFC960C63E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 00:01:05 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:05 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:05 +0000
Files and hashes:         1: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: qPFAiiFVDwPxP+WvF9qRDrCM19LVeV8q4gjbfHBOz/M=)
                          2: krZVBDiWkvm4PD1vJnwzxrmFRBs.roa (hash: U9k/zcmCxVKcnCozIhgmcwJH3uFDUp/Q9q36sgU5rBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:e1:4b:62:e2:f8:e4:18:83:4a:fc:96:0c:63:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
        Validity
            Not Before: Jun 12 00:01:05 2026 GMT
            Not After : Jun 13 00:01:05 2026 GMT
        Subject: CN=c2b30d07ec726e0ce07cdc5004739acf2f8b4cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:c9:33:d8:37:25:6d:ed:75:30:9f:4a:09:
                    09:43:8c:df:13:d1:92:90:25:e9:22:b2:50:e9:9c:
                    70:a2:72:92:77:65:4d:de:fd:25:f5:7e:b9:7f:f5:
                    63:f8:a6:15:f7:37:fe:5f:11:e2:8c:13:51:c9:dd:
                    29:28:ca:91:29:28:9b:b1:ec:3e:58:02:2c:37:20:
                    02:87:9c:2b:4b:a0:bc:a6:5f:ff:30:07:46:b2:c9:
                    5a:db:8b:58:23:f6:82:f4:e4:18:d7:fc:f7:3d:65:
                    04:b1:fd:d6:de:ef:08:d8:33:0e:cf:6b:5e:cb:70:
                    5b:e3:1d:b5:03:ff:9b:50:74:62:57:78:3b:71:41:
                    f7:db:42:d3:86:0a:f7:4e:d1:ba:4a:47:99:39:10:
                    91:c5:50:3e:74:93:6e:2e:80:e3:2b:d7:cd:83:81:
                    13:e1:d8:d8:cf:73:cf:78:9c:08:96:9e:84:01:16:
                    48:22:b2:64:67:79:1d:87:91:41:4d:29:99:76:94:
                    cc:f8:71:a4:25:71:27:31:87:fb:f5:91:5d:25:92:
                    f8:b5:f7:b3:35:cb:20:95:10:e6:fb:58:13:97:a6:
                    c4:ac:0b:93:d5:07:5d:27:5c:d9:c1:8d:3d:e4:50:
                    65:73:28:cf:1b:b3:e0:50:0f:bc:ff:92:ae:76:f3:
                    f3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B3:0D:07:EC:72:6E:0C:E0:7C:DC:50:04:73:9A:CF:2F:8B:4C:D4
            X509v3 Authority Key Identifier:
                keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e5:b9:be:7c:ed:d9:ff:93:ab:75:de:b9:10:9b:80:dc:af:
         b3:15:3a:63:ad:43:06:c7:70:53:d0:c9:61:d7:7f:ad:40:37:
         63:7a:51:75:5e:17:06:f3:f6:e8:e6:65:1e:c1:25:b4:d9:77:
         3e:52:8d:4a:cd:9c:fa:22:ca:c5:c3:f5:f8:e7:83:ba:63:04:
         03:d4:37:70:23:c5:15:51:98:1e:e1:29:bb:79:af:8a:e5:d1:
         f5:be:9c:7b:0c:84:d4:17:d3:18:0f:a8:ef:c5:08:bd:4c:f2:
         3c:f0:9e:08:15:79:b5:cb:19:d7:ca:5b:87:ec:c4:16:5d:d1:
         66:7b:89:7d:fb:ec:b2:83:7d:b9:09:5e:00:7b:a6:7f:7a:7f:
         63:23:18:61:22:0a:11:e9:2c:b6:7f:40:3d:ca:2b:32:89:86:
         9f:04:7f:a8:25:4b:77:75:9c:24:b0:61:c4:36:3e:bb:f3:2c:
         74:60:3c:84:7e:44:b0:b1:89:6b:cd:53:c5:fd:77:75:0a:ad:
         c6:65:aa:c8:27:8a:e8:47:7e:cd:49:ba:69:48:6e:58:df:40:
         39:c0:cb:b0:17:d9:77:64:3d:37:5f:e9:ed:98:46:15:87:85:
         7c:85:e5:ec:67:7d:b3:8d:8f:d2:2d:54:f3:0a:f1:8e:04:e5:
         de:34:a6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:39:21 2026 by rpki-client