Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File:                     kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier:          YrMIhxPgsSsiaOJIrnpsP763MkmMun9d4j03u5BTSjo=
Subject key identifier:   98:5D:AB:33:09:E9:FE:61:C5:46:35:F0:47:87:64:1B:92:B2:B0:0D
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer:       /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial:       019E8E6DCF3E8363EECE0679315F53EF7F0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number:          0430
Signing time:             Wed 03 Jun 2026 17:00:21 +0000
Manifest this update:     Wed 03 Jun 2026 17:00:21 +0000
Manifest next update:     Thu 04 Jun 2026 17:00:21 +0000
Files and hashes:         1: igP_j0gqdj6VYQfMBatyuvEtzjE.roa (hash: Cvo1yExlPO8Dsib93UiD0RmAn7lporXrd5tMSD8Uf7s=)
                          2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: YKU+wg9B3xdwrfvc5uoQTZkiV/hEaq77RkA7s7eluMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8e:6d:cf:3e:83:63:ee:ce:06:79:31:5f:53:ef:7f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
        Validity
            Not Before: Jun  3 17:00:21 2026 GMT
            Not After : Jun  4 17:00:21 2026 GMT
        Subject: CN=985dab3309e9fe61c54635f04787641b92b2b00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:6f:af:23:28:b5:e7:35:5e:b0:03:7e:e8:
                    77:92:41:8d:09:82:c9:4b:c6:02:89:bd:bc:37:85:
                    50:0b:44:51:74:70:31:6b:49:1b:45:c2:7e:a4:ae:
                    f2:42:8b:44:a7:71:84:4a:e0:68:59:8a:24:48:43:
                    41:b5:b6:d1:89:ec:84:ae:56:58:61:ba:5c:7e:ff:
                    af:13:b9:a2:86:e2:bb:fc:9e:13:bf:16:44:5e:e8:
                    36:3b:96:a5:ba:ff:ba:4f:d5:af:80:56:93:f3:dc:
                    24:d1:3e:07:f1:e8:2a:b2:39:1d:29:8e:a8:97:b1:
                    9d:7c:7f:4c:c6:a0:c8:1b:7c:40:f6:02:b5:f1:eb:
                    9b:be:62:31:dc:89:e2:c6:7c:a8:8f:ed:fb:ba:31:
                    15:ff:e8:c3:80:ed:f3:cf:4f:a6:e9:d9:a3:ac:13:
                    52:6c:e5:13:2e:cc:c4:39:c5:43:9e:95:7d:29:ab:
                    76:a8:b3:ce:28:59:b2:1a:4a:87:e5:a1:b6:8c:a7:
                    a8:8e:cf:82:9a:81:16:c5:af:d4:32:00:37:9b:ac:
                    22:04:f7:98:74:43:11:5e:91:f9:33:1a:b2:22:cc:
                    c1:3a:50:2e:88:c0:a6:ea:f5:e1:11:38:eb:f6:14:
                    38:55:9b:27:28:79:73:a2:62:40:e6:91:6f:78:58:
                    63:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5D:AB:33:09:E9:FE:61:C5:46:35:F0:47:87:64:1B:92:B2:B0:0D
            X509v3 Authority Key Identifier:
                keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1e:c3:d9:5e:b4:1d:b8:c5:ae:d5:30:5a:a5:e9:8d:d4:ab:
         a6:b2:01:1d:41:5b:b0:3f:95:41:63:4d:d1:1d:d4:18:b1:9a:
         b1:a2:04:e0:d8:35:0e:82:c2:08:87:ee:93:d9:22:86:5b:10:
         24:a4:9d:f8:2e:87:d8:6c:12:9c:3c:b0:b3:5a:99:7a:17:70:
         53:78:20:15:e3:7b:17:db:a9:0d:32:b2:6d:24:1a:8c:25:e7:
         3b:b5:ff:41:98:81:15:ac:2b:2c:ff:37:18:4b:e9:f6:2b:c7:
         a0:58:a3:4b:3e:b7:c7:7c:93:a0:c0:c9:85:6d:5a:99:88:96:
         cd:03:39:8e:49:70:02:3e:aa:69:42:83:14:76:59:bb:75:e5:
         cd:40:25:df:ee:e9:eb:4e:0f:c5:6e:2d:b0:f6:3a:48:8b:2e:
         21:72:b9:40:69:3c:ff:2e:53:f4:73:a8:b9:b3:81:25:66:21:
         b6:49:ba:c5:b7:1a:36:d1:d9:18:3d:cd:8e:ea:a7:ad:86:7d:
         ca:87:6f:f9:0f:2b:74:4e:79:72:7f:5e:fa:63:7c:5a:da:da:
         b6:82:c8:0e:b1:96:c8:97:87:2a:8e:63:3d:fd:09:11:22:9d:
         65:e5:83:e6:b9:9e:5d:bf:74:d6:24:34:d1:68:e3:ab:ba:e7:
         75:a5:78:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:57:11 2026 by rpki-client