Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File:                     kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier:          9l1GU2aVjej4u7L3nvYJf9D1zrGCYVK52JMBQZ5YxNI=
Subject key identifier:   0B:61:5E:AF:68:E2:82:FF:1F:E9:CB:32:B9:C2:D3:D1:CE:A3:04:D8
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer:       /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial:       019E1FEC7D7BEC06E38FD843A69A8D640100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 06:00:52 +0000
Manifest this update:     Wed 13 May 2026 06:00:52 +0000
Manifest next update:     Thu 14 May 2026 06:00:52 +0000
Files and hashes:         1: ddmt2-uWwkD03hR8f-AnYnhHvEQ.roa (hash: NzfyOsp8qB/kzAypqWkHF3Ue4tcxIJ2yaDyTF4sPpVU=)
                          2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: iGrqd7uQEV9srRf2Zw5a9UPM5L8TI9vCws9DYtRx5S8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:7d:7b:ec:06:e3:8f:d8:43:a6:9a:8d:64:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
        Validity
            Not Before: May 13 06:00:52 2026 GMT
            Not After : May 14 06:00:52 2026 GMT
        Subject: CN=0b615eaf68e282ff1fe9cb32b9c2d3d1cea304d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:bb:31:60:29:9e:8e:8d:15:f1:d1:fe:cd:
                    86:8d:35:6b:2d:85:88:74:7c:e0:3e:a9:6c:19:ba:
                    a9:05:35:dc:0f:92:8a:cb:73:7f:9d:f0:ae:3e:12:
                    01:12:16:bb:c0:e3:5e:bf:b7:e2:60:6b:35:99:3f:
                    4e:41:a2:2e:7e:bf:0e:ee:c2:99:cb:81:70:8a:b3:
                    b5:da:48:cd:20:7b:8f:c4:b9:eb:d3:26:ad:77:0b:
                    52:10:e8:25:7d:ea:d2:91:40:d2:46:6b:0d:03:59:
                    9e:53:87:4a:45:93:3b:5d:3a:15:5a:d3:e0:0b:89:
                    64:32:d6:e8:94:48:2d:9a:d1:ef:ee:a9:25:82:43:
                    c3:ff:fa:bc:3a:16:0a:eb:d5:f9:cb:00:fc:99:dd:
                    5a:eb:39:ff:53:a0:fb:8c:8c:dd:0a:7a:59:f4:59:
                    63:b1:7a:f0:e6:b2:4d:bc:0a:1f:40:b1:7c:24:66:
                    f4:b5:91:74:b1:16:5f:d1:dc:34:bd:45:fe:c4:88:
                    31:94:25:05:ae:56:c8:ae:e6:5b:83:f9:f1:37:ce:
                    7f:ee:91:8b:ab:fc:6d:a4:1f:72:0b:ad:4e:2d:0c:
                    d3:3d:e7:85:5f:d0:82:57:5a:91:a4:33:20:88:eb:
                    f5:41:c8:c2:52:84:7e:a8:64:05:52:39:af:74:42:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:61:5E:AF:68:E2:82:FF:1F:E9:CB:32:B9:C2:D3:D1:CE:A3:04:D8
            X509v3 Authority Key Identifier:
                keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:60:09:16:16:61:b6:33:64:55:e0:a4:b1:6b:38:aa:58:53:
         6f:80:52:0d:4d:ce:27:f4:fd:6b:45:5b:72:eb:d9:61:2d:36:
         89:16:f9:82:5d:d2:29:12:62:e4:1f:2f:7f:23:26:25:ad:87:
         fb:f3:28:57:dd:67:77:ae:ea:5a:3f:28:e0:bf:97:10:5f:95:
         10:8f:d7:a7:72:1a:b9:28:fd:a1:9e:51:15:fe:00:11:98:1c:
         57:54:f8:dc:8a:3d:0d:c1:f0:f0:b6:a2:d9:da:1e:d0:13:50:
         13:c0:3b:1f:72:06:1b:bd:ec:e4:b9:1c:2f:94:2a:e9:42:0d:
         ae:fd:7c:9e:62:e7:88:1d:79:13:2c:16:7a:b6:c7:20:28:91:
         0f:58:22:13:06:d2:87:a9:79:ef:7e:83:58:f1:2a:ae:70:9f:
         fe:7e:97:e6:8a:ae:15:75:36:1e:f9:96:b4:ee:eb:44:52:2d:
         fe:2b:0a:8c:ae:2b:3a:b9:c7:f6:d9:3e:54:f2:57:13:98:02:
         d2:7c:17:b0:8c:e9:47:0b:27:06:45:6e:ef:03:68:39:44:e8:
         9a:95:e5:04:75:b5:06:c5:52:d9:44:64:9c:16:c8:3e:c8:01:
         8a:3a:75:bc:fe:35:ce:fc:2c:83:ea:53:85:bd:0d:51:a5:9c:
         7c:f7:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:35 2026 by rpki-client