Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File:                     KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier:          f7iieJNoBb26DcmcKgy8Zr1I5vW/0eaT0H0Iq9f8xFE=
Subject key identifier:   E8:B1:F1:7C:FF:DB:22:CF:3E:EA:41:1B:69:48:E6:A8:74:7D:3E:67
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer:       /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial:       019E20FF3174C4C942101C9216862153C908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 11:00:55 +0000
Manifest this update:     Wed 13 May 2026 11:00:55 +0000
Manifest next update:     Thu 14 May 2026 11:00:55 +0000
Files and hashes:         1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: oFyTSduaLZAsBCl9XQgvi88WJ9QGKeMBXZPG0NmJ08k=)
                          2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:31:74:c4:c9:42:10:1c:92:16:86:21:53:c9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
        Validity
            Not Before: May 13 11:00:55 2026 GMT
            Not After : May 14 11:00:55 2026 GMT
        Subject: CN=e8b1f17cffdb22cf3eea411b6948e6a8747d3e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:25:af:be:ad:29:06:8f:21:b1:a6:e5:18:
                    91:91:35:f5:9a:fe:9d:af:4a:29:f8:71:cc:55:39:
                    4d:9d:c2:8c:83:3b:41:ed:90:be:e1:c3:9f:35:6f:
                    71:d0:89:ba:fd:fa:fb:c0:da:03:9d:f8:81:8b:21:
                    39:32:2c:40:c2:7b:76:d4:64:28:71:c0:a3:44:ce:
                    28:55:41:02:99:a5:64:a2:15:ea:77:da:f6:56:99:
                    84:83:50:24:cc:3b:e4:9f:08:a2:35:da:d0:71:45:
                    55:12:37:61:fa:11:e5:e7:ae:f6:b3:50:fc:a7:13:
                    3e:65:a4:bb:e6:fe:33:f0:b8:dc:d3:77:d4:eb:99:
                    a1:bf:c1:a9:1a:0e:63:eb:b7:66:fb:35:8f:96:b7:
                    af:e9:57:15:fd:6b:9d:67:fd:fb:35:e3:c1:0d:cc:
                    d1:11:ff:d5:26:9f:39:87:7f:3f:75:38:47:62:89:
                    80:0f:b0:95:d9:6c:8f:da:68:49:df:76:ac:26:a8:
                    18:9d:d2:e2:9c:00:7c:18:63:40:c4:b5:bd:3f:24:
                    a1:5d:7f:01:c0:67:b6:ce:ab:3b:96:85:3f:d6:29:
                    d3:89:b3:99:7e:c1:68:7c:db:ac:26:7e:31:d5:10:
                    82:c5:0e:c3:f3:12:32:9f:75:69:a4:cf:94:87:c0:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B1:F1:7C:FF:DB:22:CF:3E:EA:41:1B:69:48:E6:A8:74:7D:3E:67
            X509v3 Authority Key Identifier:
                keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f6:40:ec:fe:05:c9:0f:4e:8b:24:38:52:6e:c5:a6:e4:c2:
         d2:f4:ae:bd:4c:9d:81:08:55:c9:f3:a4:b8:70:9d:08:f6:cc:
         4a:52:32:d7:e5:8f:95:36:34:f7:5e:0e:f7:9f:b3:8a:c9:d9:
         1b:48:05:fe:f8:e7:48:50:34:14:cd:0e:21:0c:e4:7f:94:ea:
         d2:9e:c0:55:15:75:5a:28:53:00:18:da:e0:3d:88:da:f8:cf:
         9e:1f:c4:4a:b5:28:54:37:19:d4:f2:09:e0:fc:5c:ca:e3:df:
         70:0a:6e:f8:a7:1d:2f:cd:08:fa:84:fd:d0:1c:2d:39:31:b5:
         21:28:02:1e:40:fe:b7:bf:6f:4d:09:6b:ef:72:9c:06:0c:d0:
         53:c2:90:81:df:d5:61:3f:e0:d2:be:c7:39:f8:af:93:87:48:
         6f:cd:0b:88:d1:82:24:41:31:07:81:95:2e:d5:0a:72:f4:93:
         62:44:2d:5e:f9:a7:a9:8a:5a:f9:51:68:73:ca:01:17:e1:33:
         11:6a:50:3b:fb:7b:23:7b:b8:da:89:28:f5:f3:b2:f1:a1:9c:
         07:2a:8b:08:70:95:ce:46:f7:e5:71:2b:ae:38:41:60:08:9e:
         54:fb:b1:a1:4b:70:a5:2e:8f:97:b5:72:3b:d7:97:b9:9a:6b:
         78:a6:18:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/zF0xMlCEBySFoYhU8kIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz
MWViMGUwHhcNMjYwNTEzMTEwMDU1WhcNMjYwNTE0MTEwMDU1WjAzMTEwLwYDVQQD
EyhlOGIxZjE3Y2ZmZGIyMmNmM2VlYTQxMWI2OTQ4ZTZhODc0N2QzZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfUlr76tKQaPIbGm5RiRkTX1mv6d
r0op+HHMVTlNncKMgztB7ZC+4cOfNW9x0Im6/fr7wNoDnfiBiyE5MixAwnt21GQo
ccCjRM4oVUECmaVkohXqd9r2VpmEg1AkzDvknwiiNdrQcUVVEjdh+hHl5672s1D8
pxM+ZaS75v4z8Ljc03fU65mhv8GpGg5j67dm+zWPlrev6VcV/WudZ/37NePBDczR
Ef/VJp85h38/dThHYomAD7CV2WyP2mhJ33asJqgYndLinAB8GGNAxLW9PyShXX8B
wGe2zqs7loU/1inTibOZfsFofNusJn4x1RCCxQ7D8xIyn3VppM+Uh8B8eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOix8Xz/2yLPPupBG2lI5qh0fT5nMB8GA1UdIwQY
MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt
ZWNjZGMwY2U3ZDE0LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0
LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPZA7P4F
yQ9OiyQ4Um7FpuTC0vSuvUydgQhVyfOkuHCdCPbMSlIy1+WPlTY0914O95+zisnZ
G0gF/vjnSFA0FM0OIQzkf5Tq0p7AVRV1WihTABja4D2I2vjPnh/ESrUoVDcZ1PIJ
4PxcyuPfcApu+KcdL80I+oT90BwtOTG1ISgCHkD+t79vTQlr73KcBgzQU8KQgd/V
YT/g0r7HOfivk4dIb80LiNGCJEExB4GVLtUKcvSTYkQtXvmnqYpa+VFoc8oBF+Ez
EWpQO/t7I3u42oko9fOy8aGcByqLCHCVzkb35XErrjhBYAieVPuxoUtwpS6Pl7Vy
O9eXuZpreKYYLA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:58 2026 by rpki-client