Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          XA+6HD6vOB2X64PhNF2hVQQBIogN3MCsEwXIzLgWOog=
Subject key identifier:   AE:14:79:A2:57:D9:0C:C1:E2:6E:32:DE:1A:8E:1A:A9:51:C9:1D:7F
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       019FA0DFD9E5BF7E19822E9F51D30FCEB5F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          0957
Signing time:             Mon 27 Jul 2026 00:00:52 +0000
Manifest this update:     Mon 27 Jul 2026 00:00:52 +0000
Manifest next update:     Tue 28 Jul 2026 00:00:52 +0000
Files and hashes:         1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: QHNn37KqDGGWF1f5bESk/lnkU6fkQH8trXvJ96rpfkY=)
                          2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:d9:e5:bf:7e:19:82:2e:9f:51:d3:0f:ce:b5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: Jul 27 00:00:52 2026 GMT
            Not After : Jul 28 00:00:52 2026 GMT
        Subject: CN=ae1479a257d90cc1e26e32de1a8e1aa951c91d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:ce:6d:71:45:1e:1b:d9:9b:84:2f:65:05:
                    6d:b4:bc:70:69:cc:f7:be:82:61:c3:e4:e3:32:e6:
                    47:cf:5f:25:2a:c4:89:a5:77:62:49:1d:44:4e:1a:
                    02:30:fa:0d:13:a5:e0:75:7e:35:58:af:9a:1f:5e:
                    8a:10:66:7d:3f:bd:e6:48:3f:5f:d7:ce:f7:4a:c4:
                    3c:04:c6:90:ef:af:fe:25:6d:02:6b:5e:3f:91:cb:
                    f7:42:d4:72:c0:db:9b:20:36:39:1d:df:25:74:41:
                    64:a1:d9:69:a2:34:44:39:07:fb:02:0e:a8:ed:68:
                    57:99:4a:eb:18:7b:ac:8c:07:95:e4:16:be:3c:30:
                    46:c7:6d:ce:57:66:97:1e:93:8c:6b:f1:d9:cf:ba:
                    84:2b:fe:75:80:f7:53:a0:a2:21:e8:bf:2c:2d:18:
                    0f:99:74:a0:ff:ac:f8:02:cf:84:f7:26:92:76:f8:
                    3b:67:ce:47:69:90:69:dc:a7:14:d7:0a:92:70:7e:
                    60:ad:b2:4d:23:3b:43:31:f4:ad:73:ba:e1:1d:2a:
                    4d:ef:87:a3:f4:2d:4c:36:63:60:bd:f1:67:29:e2:
                    2d:bb:81:18:b1:b3:15:97:7c:f6:80:09:7c:e5:5f:
                    19:53:ca:ca:2a:7a:62:2e:76:d7:f1:13:9d:2e:89:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:14:79:A2:57:D9:0C:C1:E2:6E:32:DE:1A:8E:1A:A9:51:C9:1D:7F
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3d:58:04:48:34:7c:d6:61:4b:f0:97:cd:ad:ba:f7:4f:5d:
         e6:39:2c:86:cd:bc:d9:7e:06:d8:74:02:f8:94:7c:3b:39:17:
         7e:c9:bf:78:2b:56:20:37:68:ff:57:45:c4:51:ee:3d:53:3f:
         17:8e:39:d0:fa:fe:a9:46:ac:a2:a0:85:47:62:4f:42:4f:41:
         45:34:5c:fa:7f:f2:54:db:0e:12:9a:2c:1d:02:15:5a:57:91:
         72:e1:d8:e7:a3:e2:56:57:3a:c9:f5:59:46:21:e3:bb:30:45:
         bd:86:40:95:d1:d8:a8:2e:d1:1b:69:76:f8:24:6a:da:f2:68:
         69:f4:25:52:ef:4a:a1:69:d7:ea:52:c9:77:07:61:b4:3a:ef:
         40:06:b4:50:44:4b:6e:57:b8:cb:64:a5:81:26:76:0a:20:42:
         c2:a1:d7:d3:d1:07:d3:dc:34:28:1d:c3:86:31:1e:07:46:d5:
         dc:43:f1:63:21:ea:6f:7a:44:6f:ce:58:68:08:f6:53:a8:a5:
         53:26:fe:89:7d:d4:44:2b:22:3c:78:9b:c4:05:3d:a3:f9:4d:
         09:7a:0f:c6:fc:6a:3d:56:c5:4c:ba:72:4e:c2:ab:c9:3c:70:
         d3:02:92:12:1c:dd:76:b8:33:4a:d0:76:0e:05:8d:3e:5b:60:
         96:d7:48:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:00 2026 by rpki-client