Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          TJrC1xPgMTrQi/WGSq7aY6JKOJEex2im9NR4ySvwyZQ=
Subject key identifier:   FA:60:56:EE:41:C5:41:EC:CC:A3:05:B1:C1:A1:D6:06:6F:17:4B:45
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       019F91DAC57BEBCB37A80B618177317F3557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          1728
Signing time:             Fri 24 Jul 2026 02:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:01 +0000
Files and hashes:         1: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (hash: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM=)
                          2: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (hash: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo=)
                          3: DSzDYKP0Eliter60MSyPBC3uoBo.roa (hash: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY=)
                          4: K7pjnPK8S24idyOMea3NYin5SO8.roa (hash: YckTf9iIpdd+XsvzzovN9f+k8o5y12iUYrJM+OVIcPk=)
                          5: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: eSCzhPWHBP8GCHOGNnIiMKdUHAkfx0vdWhXeW5oyslE=)
                          6: o-d6O05K7BPSIDagH_dA7QNFluU.roa (hash: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:c5:7b:eb:cb:37:a8:0b:61:81:77:31:7f:35:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Jul 24 02:01:01 2026 GMT
            Not After : Jul 25 02:01:01 2026 GMT
        Subject: CN=fa6056ee41c541eccca305b1c1a1d6066f174b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:08:60:2d:65:1d:a9:5f:2a:3f:0b:25:2a:
                    86:3e:f0:f3:a5:80:33:41:af:92:fa:f8:f9:34:08:
                    db:c9:3b:78:99:44:70:91:94:dc:77:a8:85:f9:30:
                    12:5e:2b:1b:46:10:e9:c5:16:66:01:a4:35:f0:e0:
                    e0:70:b1:ff:c5:aa:4a:f3:e0:c0:4c:72:25:83:74:
                    db:82:b7:36:bd:17:62:15:f2:97:73:1e:31:d9:6e:
                    cc:ca:12:fa:b4:fc:6c:1b:9f:43:b9:7f:da:ec:28:
                    ac:48:d1:f7:95:1f:69:b2:e3:5e:9b:aa:0a:d3:cf:
                    96:76:60:cf:85:a1:e0:c9:11:6c:d6:5d:29:56:45:
                    47:4b:09:c7:76:18:c8:94:d7:d3:e1:60:88:31:65:
                    87:8f:85:94:93:16:b3:e2:b7:f1:2a:62:fb:97:51:
                    6b:a4:6c:09:18:70:b1:42:27:95:0f:02:22:85:17:
                    db:97:9e:de:a0:d9:a6:21:83:d3:75:ce:37:8e:3e:
                    da:8e:ce:4a:a4:cc:da:e7:d2:e3:1e:2a:c5:dd:9e:
                    a1:93:bd:f5:a4:13:fc:a7:af:2b:b0:2c:0a:88:7a:
                    71:70:0c:c2:50:27:b1:46:ae:b5:52:39:49:89:2a:
                    44:df:be:2c:ab:7f:9c:15:e1:c1:7e:ec:b4:9f:98:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:60:56:EE:41:C5:41:EC:CC:A3:05:B1:C1:A1:D6:06:6F:17:4B:45
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:56:46:a8:fd:12:6e:08:a7:ac:fc:55:16:24:c4:7e:e4:68:
         43:f7:d7:fc:77:ea:c7:9f:5e:93:3b:f7:80:ba:bd:61:ff:19:
         cc:5f:63:35:dd:ad:34:48:6e:a4:f2:33:ff:ac:e6:14:d5:66:
         9b:ad:3d:4c:e4:17:21:61:87:58:63:18:ac:7f:f8:34:d8:55:
         53:db:54:87:47:2f:2b:01:c4:24:3b:d9:71:b3:22:f2:84:57:
         46:b2:75:75:18:34:8c:9e:15:e7:90:a1:66:ca:03:2a:d0:c1:
         e9:6d:b2:90:8b:81:9e:89:a3:f4:57:93:7b:55:2f:71:0e:04:
         88:95:bb:c7:6f:04:af:7f:25:2b:b8:9b:d4:36:39:e8:2c:d7:
         52:3c:c6:81:af:af:10:9a:b7:d6:cc:22:89:43:1b:13:7d:0e:
         ad:95:d5:33:45:13:cb:f0:39:b8:be:da:c8:7d:4c:f9:8b:b4:
         65:28:02:21:c4:87:79:b1:1a:da:8f:c3:e8:6f:8b:c5:36:28:
         06:26:d9:1b:05:5d:05:0d:00:97:ae:37:d0:7a:58:e8:74:c2:
         67:e7:6b:63:48:22:02:5c:75:3b:70:f7:58:6e:95:01:f1:45:
         88:75:bf:fe:8c:06:85:5f:b1:85:1c:ae:e8:58:c8:c2:bb:d8:
         19:be:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:04:46 2026 by rpki-client