Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File:                     kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier:          mAdgwweFin4d2YkQsJz4hDewKoeJP7U5J1PWqGTmsKw=
Subject key identifier:   BC:29:14:9E:E0:41:36:1F:61:01:7F:8A:B3:50:76:3F:F4:78:71:FD
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer:       /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial:       01A03E286594F0D02F01FB81D21DB6453421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number:          137D
Signing time:             Wed 26 Aug 2026 13:00:29 +0000
Manifest this update:     Wed 26 Aug 2026 13:00:29 +0000
Manifest next update:     Thu 27 Aug 2026 13:00:29 +0000
Files and hashes:         1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
                          2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: xbN/gfYJo5/i+fe2dEM76qR0bJ7Gh3YEESLg+rYMszw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3e:28:65:94:f0:d0:2f:01:fb:81:d2:1d:b6:45:34:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
        Validity
            Not Before: Aug 26 13:00:29 2026 GMT
            Not After : Aug 27 13:00:29 2026 GMT
        Subject: CN=bc29149ee041361f61017f8ab350763ff47871fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:36:de:38:ba:a0:f3:de:fc:5c:be:1c:59:
                    29:96:e4:76:d2:f2:59:9c:25:76:21:c1:59:ad:36:
                    e4:3a:a5:7a:36:02:80:30:f3:17:a1:43:3d:68:0a:
                    63:65:38:32:ed:6a:37:39:72:6d:9e:ef:3b:b4:ed:
                    65:f8:12:56:60:f7:0d:8f:34:39:3a:bd:6c:49:20:
                    0c:29:7b:6c:48:ef:a0:37:77:60:70:62:52:82:5f:
                    f6:83:08:3f:cf:fa:e2:31:1e:7f:ea:44:3d:ba:b6:
                    12:de:0e:b4:51:c3:cd:49:9f:1e:69:52:a0:8a:11:
                    fa:9f:ee:7c:63:4d:f9:d8:5d:26:15:8b:d1:81:f9:
                    0b:0e:93:e4:a2:ea:c2:fe:be:ee:5f:fb:69:b2:cc:
                    13:30:a9:03:63:e5:9f:54:95:ee:b6:8e:c2:59:72:
                    9a:f9:b0:ee:94:f5:33:ec:1e:02:6c:59:8b:18:1c:
                    40:92:ed:33:ae:1a:74:d3:bf:ef:8f:c3:91:c5:59:
                    c2:45:65:d7:57:9c:ab:31:6c:86:8d:75:b3:b8:26:
                    3a:08:0e:25:3f:c0:ed:f2:1e:33:78:38:c5:f2:ff:
                    1e:aa:df:c3:1b:64:97:76:5e:4f:eb:fd:b9:66:35:
                    6a:3e:53:ae:17:20:25:ca:66:7e:2c:fb:61:95:cc:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:29:14:9E:E0:41:36:1F:61:01:7F:8A:B3:50:76:3F:F4:78:71:FD
            X509v3 Authority Key Identifier:
                keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a9:25:ea:c9:03:5c:90:66:d5:08:00:e6:e9:74:be:3d:a9:
         09:00:a9:25:f6:67:be:96:24:77:35:34:19:32:1d:32:60:29:
         dc:55:3d:b3:60:95:e9:cc:58:e3:4f:58:1d:77:f4:a4:95:66:
         51:4d:60:a2:e4:00:f3:a9:f7:82:68:34:b1:b3:61:61:85:8a:
         6f:05:c9:90:1f:50:98:51:66:5e:4e:dc:cd:ae:d9:9c:3f:32:
         1c:e2:39:89:1f:8b:6c:99:71:8b:21:fc:97:81:f6:75:7a:30:
         64:70:03:e9:9c:34:d0:78:7f:41:4e:c5:38:88:79:65:f0:6f:
         23:33:5e:26:eb:39:b0:5d:ee:78:21:9e:79:32:31:eb:3e:2c:
         03:f9:1e:79:ba:fb:8f:ac:1f:53:1d:95:52:24:26:84:c7:38:
         e6:ef:c2:cb:b9:35:6f:2c:cb:54:5f:43:b4:b5:f7:cd:df:66:
         90:ba:08:22:b1:88:58:d9:2d:30:e6:b9:bc:d4:34:b4:4b:64:
         1e:2e:47:ce:8d:d8:f3:8c:b4:8c:7b:8a:24:cb:bb:35:3b:e8:
         fb:a2:47:b1:e8:58:e1:b4:88:f5:a7:dd:8e:cf:e1:65:61:37:
         81:04:37:89:ef:94:48:ec:08:1b:72:d3:62:23:d3:7f:d4:f5:
         b7:56:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:55:31 2026 by rpki-client