Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File:                     pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier:          SqXtBXETfJj15HxDsMIM91Fm3ohlWbB3qIyRQ496Ygs=
Subject key identifier:   B2:57:23:59:B7:77:53:3C:77:0A:AB:2A:0D:4B:96:E1:92:4C:5A:E4
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer:       /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial:       019EB87CA1D3A54F01EBBE3618B5406F8C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number:          0FEB
Signing time:             Thu 11 Jun 2026 21:00:35 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:35 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:35 +0000
Files and hashes:         1: iV4TEXZQGdAAaWWF18D6iGDTgkU.roa (hash: 8qmQo/R70e8QrQGIHQoR59I934fzerQsOqLOaPFw/WU=)
                          2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: EzJIQ5TQng17zWg8tKoemPCwc6swwPrtBcYdvfa7Tv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:a1:d3:a5:4f:01:eb:be:36:18:b5:40:6f:8c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
        Validity
            Not Before: Jun 11 21:00:35 2026 GMT
            Not After : Jun 12 21:00:35 2026 GMT
        Subject: CN=b2572359b777533c770aab2a0d4b96e1924c5ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:2b:01:f2:af:69:0b:49:51:32:c7:ed:f6:
                    85:c6:ba:f6:d6:89:56:7c:1b:a6:f6:e7:75:74:f6:
                    db:d8:bf:82:97:1a:80:ef:12:21:e5:08:13:3f:4f:
                    7f:0a:0a:be:28:04:a2:bb:71:3d:09:de:d2:be:32:
                    e3:c7:25:6a:7f:5f:bb:57:db:b2:35:9b:77:d5:dc:
                    48:e2:f3:b5:df:c4:f7:64:68:50:84:ca:31:32:88:
                    fb:41:29:2b:8c:a0:c2:72:c7:49:0e:af:e2:07:61:
                    d4:60:ff:7b:3e:2d:8a:e1:75:f9:bf:da:36:ea:c9:
                    d8:c4:e1:a6:7f:ab:c2:e0:0d:4d:54:5d:d8:00:6c:
                    78:52:12:ae:c8:e8:12:35:24:33:14:9e:fb:92:ec:
                    c8:50:f6:d8:74:4c:a3:71:27:cb:90:16:33:9e:8d:
                    5c:34:6b:54:19:e1:c3:ed:b5:c5:34:a2:b2:0c:ae:
                    ff:61:48:a8:92:55:7f:18:97:2f:54:7e:7d:8e:c5:
                    35:fa:61:b7:22:54:67:c3:5a:46:4b:a6:9a:1e:c2:
                    b0:8d:a8:09:d0:d2:1b:00:10:b8:fd:42:52:74:e8:
                    bc:39:b9:97:c6:5e:a6:88:59:fe:ad:87:89:7e:e8:
                    03:89:1b:dd:b8:88:96:72:a9:38:d5:a9:87:c0:4c:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:57:23:59:B7:77:53:3C:77:0A:AB:2A:0D:4B:96:E1:92:4C:5A:E4
            X509v3 Authority Key Identifier:
                keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:ca:d8:60:5b:de:72:10:31:05:1f:ba:b9:ad:a6:49:30:
         be:82:04:dc:31:c7:88:f9:d1:fa:2d:6a:d1:c4:a6:9a:cc:62:
         4d:97:17:f1:1a:b5:ce:47:f9:ae:d9:1d:57:68:df:15:30:2d:
         21:d5:57:70:40:20:86:61:f9:82:f2:d1:34:93:1f:9e:f8:67:
         49:66:01:f4:10:c8:3f:1b:bf:f5:2e:e2:e2:a4:1c:d6:c9:3a:
         69:79:f9:52:11:11:ce:c6:13:54:81:f1:5d:05:2d:1d:0a:3c:
         9d:ba:3a:be:4f:c2:c5:08:7b:9c:a4:9a:7d:4c:17:ea:6a:b4:
         d3:b5:3d:32:b1:3e:a6:3e:10:74:b4:0d:d3:71:98:95:2f:bb:
         dc:7b:89:4f:6d:7d:70:20:ce:25:6b:fe:46:62:d8:db:4c:2b:
         af:83:1f:1d:e9:69:5b:79:b4:70:43:26:7b:e4:27:a6:c0:85:
         5d:cf:4b:77:90:06:00:96:c0:23:27:74:bf:3e:6d:c1:95:44:
         1d:6b:ae:2a:59:88:a7:07:5f:de:ff:08:11:c4:56:99:f0:d1:
         aa:c9:bf:9b:1a:0f:87:0c:cd:89:01:50:1a:18:e9:18:7e:5a:
         4b:88:b0:77:45:07:a2:37:52:14:61:23:ca:00:02:16:5c:30:
         e1:2a:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:26 2026 by rpki-client