Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File:                     k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier:          8/VYAb6q6u7dIId38qE1md4KuuBClqGn1U6gOmjOcPE=
Subject key identifier:   60:5A:24:9C:23:55:9A:C6:E9:45:7B:A8:49:DA:E7:7D:7A:88:71:2F
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer:       /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial:       019E20917E25E24FC02B9D67CCF4240E000D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 09:01:06 +0000
Manifest this update:     Wed 13 May 2026 09:01:06 +0000
Manifest next update:     Thu 14 May 2026 09:01:06 +0000
Files and hashes:         1: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: aYJ1/EZTumwPyfXj8E1hML6If8BBhZO1YjqBitHFUoo=)
                          2: wgb1-iULWQz8zD4swlphbIF6xCw.roa (hash: 6+l6f6hi4vlzVRdz3OtcxpncvT0dUWv6vEKKsHWTOaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:7e:25:e2:4f:c0:2b:9d:67:cc:f4:24:0e:00:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
        Validity
            Not Before: May 13 09:01:06 2026 GMT
            Not After : May 14 09:01:06 2026 GMT
        Subject: CN=605a249c23559ac6e9457ba849dae77d7a88712f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:d4:97:2b:a1:d9:8e:9e:18:a5:55:d5:09:
                    04:36:dc:ef:50:4b:36:95:43:28:41:bb:30:f2:b8:
                    a9:79:bc:7e:93:75:11:74:79:72:67:b1:af:d3:2c:
                    63:f9:d0:93:1f:62:23:d1:bf:49:ab:b5:75:90:f3:
                    66:f3:b4:19:6d:7b:0c:5f:c3:37:71:c3:be:3e:aa:
                    7a:81:70:bc:3e:24:1f:6c:86:87:fc:55:a8:9e:1e:
                    cc:d0:24:95:c8:6f:60:aa:2c:33:e0:6a:4b:b8:45:
                    a5:5e:58:c5:ce:29:c6:22:02:25:d8:3c:db:e3:9e:
                    b8:8b:2b:1c:85:6e:3d:e8:6b:6e:05:6a:9b:54:64:
                    57:e0:1f:44:95:fc:10:0e:2a:a7:4b:6b:7e:b0:61:
                    86:c4:43:81:32:a6:c5:a9:76:39:62:6a:8c:ab:4f:
                    62:06:7e:eb:37:4f:13:33:a7:17:dc:8f:88:4a:28:
                    70:b2:9d:7c:62:10:b1:f5:8c:cb:72:89:1b:dd:0e:
                    05:0a:92:a2:df:11:5c:a9:54:45:24:d8:8a:be:17:
                    e9:ec:7e:92:99:c8:04:fd:43:40:2e:ed:16:1a:fe:
                    1c:c0:40:9a:f0:54:a7:23:ce:c1:6a:b7:83:ef:a3:
                    a9:4d:76:ee:53:24:06:f6:3c:d1:c2:ac:9d:2d:b7:
                    e3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5A:24:9C:23:55:9A:C6:E9:45:7B:A8:49:DA:E7:7D:7A:88:71:2F
            X509v3 Authority Key Identifier:
                keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cd:d7:e0:c9:6b:8a:6d:48:76:c9:68:0e:68:27:da:73:70:
         9a:0d:5b:35:1f:38:0b:30:57:34:ea:3a:90:9e:1b:02:e3:43:
         ff:43:cf:0b:e4:aa:fb:d0:9e:57:5a:b0:1c:86:c7:f0:7f:f6:
         fa:99:f3:4a:b6:91:f1:6a:ec:1d:87:e6:fc:5e:70:9e:35:07:
         b6:a0:d5:8d:75:f1:dd:4c:e9:0b:5d:44:01:41:4e:ab:b9:2b:
         91:a1:64:b9:a8:80:53:58:02:5c:36:2f:e8:e8:8b:49:c1:3c:
         ee:6e:a0:35:b9:78:05:40:df:ff:d8:39:aa:84:74:e1:8c:56:
         35:ea:85:10:ed:b7:1c:bf:80:70:57:97:0b:9e:5d:8d:87:c7:
         b1:6b:d2:8d:51:20:b6:96:25:bb:1b:d4:24:71:87:ab:9f:5d:
         71:d2:8b:10:ab:c0:01:7d:5f:2b:5d:70:d0:ab:63:51:e9:ad:
         42:fa:b2:e4:8b:76:c8:57:52:e4:37:ac:23:44:68:48:b8:16:
         1f:21:fb:d7:25:b1:50:cb:18:2b:c2:08:8b:30:32:d4:c0:76:
         cf:c5:af:44:aa:8d:ae:58:12:cf:65:2f:df:ca:5d:72:92:2f:
         21:e1:7b:cf:3b:8e:34:2e:39:f2:7d:dd:70:9f:8e:21:a8:f9:
         69:af:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:19 2026 by rpki-client