Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File:                     R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier:          TUolYxUJRIczOA/S/pXTc8d/iHigjB6XlCZAq/Me4BI=
Subject key identifier:   48:1C:B5:C9:EB:9B:F1:B6:97:01:52:7B:41:B2:CC:B2:FF:98:67:19
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer:       /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial:       019E1DFE7DADF17365A38A39635E86CD829A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 21:01:18 +0000
Manifest this update:     Tue 12 May 2026 21:01:18 +0000
Manifest next update:     Wed 13 May 2026 21:01:18 +0000
Files and hashes:         1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: wZ0tASixLoT2UaRZozdYs1hJGAVFfpXKJnXrXiRjogM=)
                          2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:7d:ad:f1:73:65:a3:8a:39:63:5e:86:cd:82:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
        Validity
            Not Before: May 12 21:01:18 2026 GMT
            Not After : May 13 21:01:18 2026 GMT
        Subject: CN=481cb5c9eb9bf1b69701527b41b2ccb2ff986719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:ef:2a:1a:cd:4f:41:52:e1:c5:0e:8a:c1:
                    1b:6c:61:53:1b:38:a2:9c:6a:34:fe:40:6f:f4:e5:
                    2a:09:c1:99:94:72:ed:18:76:0d:94:44:d1:cc:7b:
                    42:94:c1:8b:0a:30:33:f5:36:48:2a:32:9a:ad:24:
                    8b:03:32:75:97:46:4d:c5:ff:a8:ca:44:4a:58:6e:
                    4f:ba:e6:39:d4:03:54:1a:c9:b2:3a:61:8b:69:31:
                    3a:ed:d1:08:d5:7a:d4:03:36:71:e6:f7:d1:28:e1:
                    bc:ab:21:92:4a:43:26:b6:72:7c:67:f7:bd:79:00:
                    5b:96:01:19:67:2d:b7:a1:cb:43:06:ae:e9:f9:b2:
                    38:f6:b0:19:2b:ca:36:ff:c2:db:45:10:5c:85:77:
                    0a:42:ab:fe:d5:9f:a5:f1:55:8c:fc:1c:84:94:a7:
                    0e:6d:a6:5e:64:f3:b4:71:fe:e0:a2:8f:58:7d:e5:
                    2a:b2:27:7c:57:11:d9:04:9c:8a:e7:ca:da:14:85:
                    5b:30:66:60:46:c4:28:38:c9:9c:a9:2c:47:bb:b0:
                    0a:3c:13:1c:87:2c:11:49:27:52:e3:67:35:d1:35:
                    99:30:7c:77:29:2e:f4:c6:7e:e1:d8:22:6d:87:a0:
                    77:b4:c6:f1:24:9a:b4:60:ce:4b:15:97:50:4b:7e:
                    46:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:B5:C9:EB:9B:F1:B6:97:01:52:7B:41:B2:CC:B2:FF:98:67:19
            X509v3 Authority Key Identifier:
                keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f9:6c:8e:eb:ec:9d:ea:a6:ac:6d:95:0b:07:0d:d7:f2:64:
         9f:28:f8:62:2d:1d:c3:6b:24:63:f4:86:10:c3:4d:52:00:61:
         59:b9:0c:0f:aa:9b:6d:d4:18:93:d2:fe:9e:2c:84:0f:2e:18:
         01:43:9f:36:2f:2f:ac:96:9a:12:9a:ea:1b:c2:b6:c5:93:40:
         c0:e7:9c:a3:fc:3d:29:a7:8b:bc:b3:1c:75:82:1c:91:9d:62:
         d1:44:a3:15:4a:9d:d9:1b:6b:f4:38:e2:ad:7b:58:2a:34:9a:
         14:8d:6c:8b:24:f6:3a:07:b8:7b:f7:53:e8:bc:1a:05:5b:f2:
         b5:d6:8e:f9:73:32:54:0f:76:6a:92:86:79:bd:b9:0c:93:71:
         4d:cb:24:1d:c4:ff:a0:b0:2a:bc:73:a7:77:a2:dc:27:ff:c7:
         f1:34:5c:c5:c2:89:57:1a:4b:f9:a9:01:ee:70:f6:09:be:51:
         27:61:58:ad:0a:bf:0c:72:ac:a1:26:3d:19:19:a2:85:ab:64:
         c7:41:10:b2:49:e4:5a:cc:6d:25:4b:05:c2:a3:6e:c6:97:8e:
         91:f4:85:c6:61:7e:5e:6b:f9:9a:44:8a:8d:76:a9:8e:50:cf:
         81:1c:45:e9:35:67:9e:97:41:ed:6c:9b:ef:c7:e8:91:d6:d0:
         19:be:78:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/n2t8XNlo4o5Y16GzYKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZjI5ZDJiZDE1ZTAyNGJiOTdlNzJiMjEyNDJiNTIzZGM5
MTUxODEwHhcNMjYwNTEyMjEwMTE4WhcNMjYwNTEzMjEwMTE4WjAzMTEwLwYDVQQD
Eyg0ODFjYjVjOWViOWJmMWI2OTcwMTUyN2I0MWIyY2NiMmZmOTg2NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogHvKhrNT0FS4cUOisEbbGFTGzii
nGo0/kBv9OUqCcGZlHLtGHYNlETRzHtClMGLCjAz9TZIKjKarSSLAzJ1l0ZNxf+o
ykRKWG5PuuY51ANUGsmyOmGLaTE67dEI1XrUAzZx5vfRKOG8qyGSSkMmtnJ8Z/e9
eQBblgEZZy23octDBq7p+bI49rAZK8o2/8LbRRBchXcKQqv+1Z+l8VWM/ByElKcO
baZeZPO0cf7goo9YfeUqsid8VxHZBJyK58raFIVbMGZgRsQoOMmcqSxHu7AKPBMc
hywRSSdS42c10TWZMHx3KS70xn7h2CJth6B3tMbxJJq0YM5LFZdQS35GywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgctcnrm/G2lwFSe0GyzLL/mGcZMB8GA1UdIwQY
MBaAFEfynSvRXgJLuX5yshJCtSPckVGBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEt
MDE2NjUzMmRhYzU2LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEtMDE2NjUzMmRhYzU2
LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbflsjuvs
neqmrG2VCwcN1/Jknyj4Yi0dw2skY/SGEMNNUgBhWbkMD6qbbdQYk9L+niyEDy4Y
AUOfNi8vrJaaEprqG8K2xZNAwOeco/w9KaeLvLMcdYIckZ1i0USjFUqd2Rtr9Dji
rXtYKjSaFI1siyT2Oge4e/dT6LwaBVvytdaO+XMyVA92apKGeb25DJNxTcskHcT/
oLAqvHOnd6LcJ//H8TRcxcKJVxpL+akB7nD2Cb5RJ2FYrQq/DHKsoSY9GRmihatk
x0EQsknkWsxtJUsFwqNuxpeOkfSFxmF+Xmv5mkSKjXapjlDPgRxF6TVnnpdB7Wyb
78fokdbQGb54qw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:19:54 2026 by rpki-client