Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File:                     kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier:          V/8CnsPrwkbDM4LOMFpZJNzpSdLqJvzgqcaOxSrd+c0=
Subject key identifier:   05:91:F5:F6:69:0C:A7:53:5C:84:63:F3:14:7B:1E:0D:E3:8C:D0:FD
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer:       /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial:       019D27A8D78384F7F6690FB93AF037AB0B86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number:          074B
Signing time:             Thu 26 Mar 2026 01:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:09 +0000
Files and hashes:         1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: ABbBllzlfN5qPw/xcbSWQiMXJbMlxM9wRt80YMT/XFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:d7:83:84:f7:f6:69:0f:b9:3a:f0:37:ab:0b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
        Validity
            Not Before: Mar 26 01:01:09 2026 GMT
            Not After : Mar 27 01:01:09 2026 GMT
        Subject: CN=0591f5f6690ca7535c8463f3147b1e0de38cd0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:0b:73:f4:5e:47:27:41:00:40:3c:a0:6b:
                    2b:e8:52:6a:3c:1b:94:c4:fd:70:7f:cf:99:c6:1b:
                    d8:44:2c:65:06:0f:6e:c5:50:c5:4a:19:01:bf:94:
                    db:47:0c:30:fd:37:c2:30:ed:71:f3:be:d0:40:12:
                    33:cb:bf:d4:bf:ab:3c:07:8e:3b:fc:62:bb:17:b8:
                    bd:46:f8:a9:a6:40:94:ae:44:e2:f1:ec:6e:c9:12:
                    ca:ff:03:dd:36:b3:9e:44:8b:44:b8:0a:bd:91:c4:
                    e5:ca:1a:04:75:c6:84:2d:37:2d:a4:de:b6:4b:1b:
                    92:0d:1c:e5:95:29:c3:64:0a:3c:a6:09:67:88:ed:
                    88:f7:26:ce:7a:15:16:d8:64:1f:0f:00:80:d1:dc:
                    7a:12:41:39:4f:ba:b4:74:6e:f3:87:19:1c:17:bd:
                    b1:70:73:a2:5e:55:ad:e8:3d:31:0c:11:ae:3c:eb:
                    c6:72:fc:e6:77:31:e2:0f:f1:79:23:a6:80:b7:a8:
                    d7:ad:da:b8:9c:ba:7d:a8:98:2b:c7:74:b1:67:1e:
                    7d:5d:d1:e4:36:46:bf:38:0f:32:e8:4f:6f:0b:25:
                    ff:90:a5:1c:b6:dd:bf:68:f9:19:b9:6e:f0:7e:bc:
                    d2:6d:4b:18:0a:fc:f3:68:d8:cf:32:53:6d:0f:4a:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:91:F5:F6:69:0C:A7:53:5C:84:63:F3:14:7B:1E:0D:E3:8C:D0:FD
            X509v3 Authority Key Identifier:
                keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a1:d2:45:2b:0a:c2:38:4c:d1:5b:e2:f9:50:90:95:cb:99:
         c2:8b:f0:01:3b:ec:27:2b:b2:c7:b2:0a:6b:82:ca:b4:fb:53:
         e4:b2:f6:d1:32:4b:49:90:fc:f4:c2:81:0c:c7:d3:07:db:e9:
         e2:06:dd:8d:57:08:45:65:9c:0a:39:b5:dd:d4:29:9d:da:92:
         02:27:60:6b:91:7a:73:9a:e1:a0:2c:00:fb:d3:84:06:f7:47:
         7c:ef:9a:37:4b:15:4d:06:a9:e1:ae:7b:92:5e:2c:23:3e:48:
         5d:ce:af:4e:d8:35:fd:cf:7d:f0:1a:9d:62:a7:e2:73:fd:2b:
         bc:f9:7b:0d:c5:fa:ce:27:27:73:1d:e1:68:2c:3f:b3:a0:5e:
         05:a7:43:63:d9:64:47:94:19:e6:16:8b:77:ce:8f:32:b0:4b:
         49:ae:67:9e:dc:c4:5c:d2:9b:77:ea:da:a0:c1:ca:76:1a:98:
         6c:90:7d:c0:1b:bf:c5:8b:74:2d:f4:51:c8:ec:f5:af:34:0d:
         3b:9e:ae:b9:0a:86:43:52:91:55:54:77:a7:61:1a:15:ca:a6:
         21:f5:2d:70:82:01:b2:1e:98:a6:82:11:cb:0b:21:6c:36:a9:
         18:98:71:51:22:aa:23:6b:72:c4:d5:cb:c5:7c:32:c5:af:32:
         c8:8e:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:45:48 2026 by rpki-client