Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft
File:                     K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft (raw, json)
Hash identifier:          b79cT50Ublf0kjUSV6htp01ZKGI2HtfUUVFvzacCuYg=
Subject key identifier:   5F:6F:50:42:81:6A:B5:C2:48:15:8C:8B:36:C4:7C:B4:38:91:82:3C
Authority key identifier: 2B:F3:F0:FD:45:4A:E8:0C:99:45:AD:BC:1E:30:CD:BC:1C:2F:40:20
Certificate issuer:       /CN=2bf3f0fd454ae80c9945adbc1e30cdbc1c2f4020
Certificate serial:       019F8F109F8927A45CD85A44FD814A8351B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_Pw_UVK6AyZRa28HjDNvBwvQCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft
Manifest number:          D0
Signing time:             Thu 23 Jul 2026 13:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:58 +0000
Files and hashes:         1: K_Pw_UVK6AyZRa28HjDNvBwvQCA.crl (hash: msAaxFD5+QkJn1bbfFtmmN1jIAW3WPxDkgU9VV4d/z4=)
                          2: t3FyYhHRPqJ-a3_z-yeKN1Sdvh4.asa (hash: 6+uN5m0MDTZzrHFrqFDKq2fqSVkd4BTjnly82iu2JIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_Pw_UVK6AyZRa28HjDNvBwvQCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:9f:89:27:a4:5c:d8:5a:44:fd:81:4a:83:51:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf3f0fd454ae80c9945adbc1e30cdbc1c2f4020
        Validity
            Not Before: Jul 23 13:00:58 2026 GMT
            Not After : Jul 24 13:00:58 2026 GMT
        Subject: CN=5f6f5042816ab5c248158c8b36c47cb43891823c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:b6:46:75:9b:87:0e:9f:28:38:68:db:42:
                    46:b2:54:56:ee:18:73:1e:dc:16:f0:ec:fe:f0:8e:
                    85:7b:cf:b0:f4:91:b8:0d:49:43:51:df:8c:0b:db:
                    f3:8e:dc:55:4f:45:fd:48:bf:b7:02:d6:99:55:7b:
                    c3:d1:40:36:6c:d2:d5:93:df:94:8b:52:5b:37:fb:
                    61:b2:2d:1f:1b:07:96:aa:4f:4f:2f:c8:95:50:17:
                    97:48:bf:85:82:fb:69:51:57:4b:c3:09:f3:4c:6b:
                    42:9b:ff:84:36:13:06:1c:2c:0c:17:72:7c:e8:6a:
                    d9:33:4e:1b:9a:aa:36:df:9a:c9:e9:d4:d9:11:49:
                    15:e6:6f:3d:d4:89:6a:fd:53:c2:f1:7b:f1:2e:fc:
                    11:c5:76:1b:59:af:9c:0c:20:b7:fb:43:48:66:c6:
                    18:2d:9f:be:ca:47:40:bf:40:be:19:a3:20:81:01:
                    c4:f1:dd:00:64:a8:50:c8:ca:c4:be:dd:09:d8:87:
                    77:5f:d0:39:9a:4e:52:e3:52:7f:3f:b0:df:3e:2d:
                    02:87:36:03:12:61:c6:7d:22:92:64:19:5b:4c:14:
                    cf:8b:99:aa:d6:38:dc:39:e5:76:1a:6d:0f:d1:36:
                    c0:bc:9c:0e:37:b3:f4:16:47:fc:70:b9:d8:10:2a:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6F:50:42:81:6A:B5:C2:48:15:8C:8B:36:C4:7C:B4:38:91:82:3C
            X509v3 Authority Key Identifier:
                keyid:2B:F3:F0:FD:45:4A:E8:0C:99:45:AD:BC:1E:30:CD:BC:1C:2F:40:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_Pw_UVK6AyZRa28HjDNvBwvQCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/43f129-d9d6-4117-b68d-1914c3aa37b9/1/K_Pw_UVK6AyZRa28HjDNvBwvQCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4f:06:e4:46:b8:35:cc:ed:b4:4a:d9:37:5f:ce:16:fe:49:
         b2:d0:47:d1:33:9f:39:ad:42:09:5d:36:56:3a:c0:41:4f:6b:
         e1:34:68:ed:d5:3a:da:b5:f0:b7:66:94:ab:82:ac:a2:98:02:
         98:f7:52:cc:19:47:30:9d:fa:fb:93:22:01:9c:50:4a:d2:30:
         8e:7f:f2:d7:84:9e:70:0a:64:78:be:a6:5b:4a:d2:7b:e5:9c:
         dd:26:5c:95:26:04:43:c1:db:ac:94:2d:3c:e6:b7:c2:9e:00:
         e2:86:87:ac:3a:cf:1a:ea:ac:84:dc:db:0b:67:2a:26:97:1c:
         93:ad:ce:9f:38:45:3e:0a:2f:78:b0:52:e1:c6:66:28:4c:c5:
         df:97:8b:89:26:44:a7:78:60:28:78:0c:5e:72:66:58:90:f8:
         0c:5d:58:41:cb:79:3b:bc:19:43:20:9d:64:6d:ca:6d:e5:d1:
         d3:a3:80:ab:5d:32:8c:e5:db:ec:6f:60:9d:24:ac:42:86:ba:
         81:0e:eb:95:dc:b8:46:64:b6:67:d9:b1:20:5f:dd:db:21:ca:
         6d:17:87:4b:6f:e6:3b:37:1c:fc:8d:92:2c:c6:af:ac:3c:10:
         bd:1f:a4:7d:ed:18:bb:c0:e9:c2:51:c2:a3:78:a0:a6:4e:0b:
         fb:7f:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:13 2026 by rpki-client