Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File:                     Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier:          +f4g90KJU5qQMLb1sunkSb9X6oH/OFj5s4p3tPMONbk=
Subject key identifier:   BC:28:BF:15:C8:0F:5A:C8:2E:7D:43:AC:AF:DA:D6:45:A3:0C:08:D5
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer:       /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial:       019EB6C515C175C30A1A1C87C9EB2242249E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number:          11A4
Signing time:             Thu 11 Jun 2026 13:00:29 +0000
Manifest this update:     Thu 11 Jun 2026 13:00:29 +0000
Manifest next update:     Fri 12 Jun 2026 13:00:29 +0000
Files and hashes:         1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: ioqDgdmFO6ZbhUZVwi5wnql6+8iUvIwbk7/Bn24xIC0=)
                          2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=)
                          3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=)
                          4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=)
                          5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:15:c1:75:c3:0a:1a:1c:87:c9:eb:22:42:24:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
        Validity
            Not Before: Jun 11 13:00:29 2026 GMT
            Not After : Jun 12 13:00:29 2026 GMT
        Subject: CN=bc28bf15c80f5ac82e7d43acafdad645a30c08d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:77:19:04:89:2d:4d:a6:ee:de:93:77:27:
                    4a:27:a5:55:2a:ac:5e:e6:8d:23:f1:83:e2:8f:a9:
                    35:b1:68:12:0b:a8:3f:d0:d7:fa:0d:2d:cf:72:da:
                    f8:08:7a:b9:d4:87:1e:38:20:70:85:b8:d4:c0:36:
                    d4:5e:cb:fd:dc:31:1a:31:11:d7:9d:74:6e:34:76:
                    56:07:f6:4d:f9:49:2c:e8:66:c1:95:fb:c7:6e:fb:
                    55:62:9d:4a:4e:45:63:27:d0:f5:1d:df:80:fb:bc:
                    1b:cb:2b:38:51:f4:ee:98:0b:68:2e:5c:6e:65:af:
                    1e:8d:b5:6d:da:e7:a3:3b:be:e4:9c:0a:cf:ee:a9:
                    15:05:d6:2a:c8:03:7b:65:2b:0b:ee:1e:24:60:d2:
                    52:ce:0b:87:e4:3e:97:27:2a:e2:4f:57:6e:2f:a2:
                    3e:49:e2:30:ee:de:b6:4e:54:33:78:bd:f7:1b:a3:
                    d1:7f:9f:66:c6:db:a4:3d:83:7f:0c:3e:53:d2:60:
                    a3:c0:58:ce:76:f7:a5:67:27:cf:b7:72:34:62:bc:
                    9e:d2:c3:ef:d1:9d:bc:5a:11:7a:b2:60:f8:c5:8f:
                    5e:a9:44:3b:4a:fd:cd:68:df:14:d2:af:c7:29:d1:
                    ae:82:7f:50:08:2f:02:99:b4:21:03:dc:80:fa:81:
                    da:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:28:BF:15:C8:0F:5A:C8:2E:7D:43:AC:AF:DA:D6:45:A3:0C:08:D5
            X509v3 Authority Key Identifier:
                keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0f:86:4b:75:09:d6:77:b2:42:3f:b3:ca:fb:c7:8b:ba:71:
         19:e8:d8:2c:21:9e:1b:9a:7e:55:bd:4d:19:ff:2e:53:09:a8:
         c3:fd:f3:56:72:7f:09:17:f7:42:7d:62:02:02:6e:ba:79:02:
         5d:eb:9c:13:1a:f3:47:7f:c5:61:67:54:62:92:f1:de:32:55:
         67:48:af:96:24:b8:c2:0b:19:2a:b5:67:57:2f:7b:d9:06:82:
         56:bb:7c:b1:47:9b:ed:eb:ee:0f:83:43:28:7f:bb:15:32:c6:
         3e:af:13:99:24:47:f5:65:3a:1f:34:74:62:2d:b8:60:e5:9b:
         4e:d4:75:69:af:3e:0f:62:ca:97:19:87:9d:1b:86:62:1a:87:
         bb:9c:d3:73:81:89:b1:50:1b:23:ee:4d:92:2e:1a:95:33:e4:
         de:d0:eb:0f:50:8f:ea:77:58:ef:b1:c1:bc:08:50:94:3c:1d:
         29:15:27:87:ff:cc:c0:98:36:32:a8:9a:01:78:78:b0:ef:b0:
         dd:3d:d7:e2:b7:81:36:0e:03:13:b9:e8:84:44:45:16:91:80:
         2d:21:2f:f6:c1:e8:3b:f9:bf:66:13:c3:47:4e:bb:b0:69:ba:
         74:5e:3a:d6:d6:fb:e5:7b:63:16:2f:6a:75:14:0c:be:bd:b4:
         42:91:9a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:26 2026 by rpki-client