Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File:                     Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier:          mkkUleE+l6TJYvj9G5xDTGBL2rTbXnAzuJ5ymu3EqhU=
Subject key identifier:   D6:54:13:BD:40:39:71:33:00:CE:8C:1F:D4:84:8F:5B:13:94:5D:7C
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer:       /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial:       019EA82DCD1A76EADFE1ABCD1DE69DE5DE72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number:          1611
Signing time:             Mon 08 Jun 2026 17:00:34 +0000
Manifest this update:     Mon 08 Jun 2026 17:00:34 +0000
Manifest next update:     Tue 09 Jun 2026 17:00:34 +0000
Files and hashes:         1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: L/rOPXbb+anfZxjLou6rqgj6kD18xseQm6SaqFYbdU0=)
                          2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
                          3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
                          4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
                          5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 14:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a8:2d:cd:1a:76:ea:df:e1:ab:cd:1d:e6:9d:e5:de:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
        Validity
            Not Before: Jun  8 17:00:34 2026 GMT
            Not After : Jun  9 17:00:34 2026 GMT
        Subject: CN=d65413bd4039713300ce8c1fd4848f5b13945d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:cb:a9:54:95:4a:56:59:7a:0e:d3:8f:91:
                    92:77:8f:04:23:dd:bc:ec:86:12:4e:1d:d4:97:9c:
                    5c:ac:05:0c:07:52:a3:1b:84:62:ee:75:3c:47:1a:
                    4f:f1:09:39:ac:82:24:9d:47:01:69:0b:cd:c1:47:
                    2d:f7:f9:8b:b6:47:8c:f1:7d:e1:66:27:75:e4:be:
                    3b:7a:20:2e:de:e4:65:be:26:ae:9c:db:ee:66:ba:
                    82:fc:ef:d2:43:ca:5f:71:ea:16:99:de:37:14:9c:
                    32:81:e1:58:93:b4:44:38:6e:46:02:89:c5:06:eb:
                    25:ad:1f:5a:92:2a:20:d8:85:b7:4c:01:56:0a:ea:
                    42:43:53:c5:41:57:28:72:5a:c9:fe:3a:ef:57:bc:
                    bf:6f:d8:e3:2c:63:5b:6c:ae:69:ed:b3:78:4a:0f:
                    96:cc:f1:00:93:54:02:e6:2d:9e:de:47:67:09:7d:
                    82:17:92:fd:34:17:b8:4b:4d:47:8b:4f:a3:ed:e9:
                    4b:12:1c:3b:1b:b9:97:47:1b:4a:aa:6b:8b:af:30:
                    0c:19:b3:dc:e5:cd:81:32:cf:a7:10:ae:4c:80:97:
                    44:b0:ae:4e:dd:20:eb:81:3a:83:8b:aa:9e:06:ef:
                    c4:78:b4:83:38:e2:a5:e0:4d:65:c8:b2:b9:af:08:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:54:13:BD:40:39:71:33:00:CE:8C:1F:D4:84:8F:5B:13:94:5D:7C
            X509v3 Authority Key Identifier:
                keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:10:01:15:2b:12:a3:f9:d7:94:1a:c5:68:3d:82:20:3a:95:
         f7:e6:c6:e6:a0:1e:23:9f:3a:71:57:ef:27:3b:6c:e0:9c:a5:
         18:2b:d7:e5:c4:a4:bc:a3:eb:d1:6e:36:df:91:78:58:4b:49:
         23:8d:29:e1:99:9c:9f:86:53:16:8a:f1:48:ae:38:ab:59:b9:
         c3:b0:73:18:d3:89:38:16:0f:91:b7:6e:fa:0d:c9:85:f7:7e:
         49:df:86:ca:17:6a:4c:22:13:d2:fd:f0:43:af:c6:49:de:35:
         d4:84:46:b1:93:c0:ad:15:d7:ab:b4:27:d9:4a:0e:76:5b:fc:
         5f:63:13:3c:b8:b4:89:18:3d:24:70:fb:e1:5a:04:e8:d8:a0:
         a1:4d:87:62:65:b1:88:54:98:88:14:98:21:6c:4b:19:e3:4f:
         43:b9:44:76:36:1a:fc:e2:67:04:68:37:48:57:e3:4d:56:aa:
         06:7c:2d:aa:6f:a3:40:e0:2f:64:f9:e3:29:bc:5b:6a:28:ad:
         02:fb:c8:57:5d:99:32:12:93:e7:7b:a1:55:84:b0:34:90:20:
         1b:11:3e:66:c9:66:12:de:16:eb:a5:6e:19:c9:9f:d5:89:6d:
         6c:c2:d0:3a:e7:77:c9:25:16:49:be:3d:93:ea:af:e4:90:a2:
         b1:09:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 18:57:27 2026 by rpki-client