Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          3C70SgD0XV9zC7Q0dhm5IsBHGnyd6mQGUCRlRK9HmsA=
Subject key identifier:   4B:77:7B:2D:4C:E7:F6:04:5E:04:D6:48:A6:7D:19:C4:9D:64:A5:19
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       019E1EA30F91E717F561901F23157BE0BBA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          088F
Signing time:             Wed 13 May 2026 00:01:03 +0000
Manifest this update:     Wed 13 May 2026 00:01:03 +0000
Manifest next update:     Thu 14 May 2026 00:01:03 +0000
Files and hashes:         1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: sLukDkZ0LuaTRTCxd/8mr0rtw2ZSbeHCYf+okMki3N4=)
                          2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:0f:91:e7:17:f5:61:90:1f:23:15:7b:e0:bb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: May 13 00:01:03 2026 GMT
            Not After : May 14 00:01:03 2026 GMT
        Subject: CN=4b777b2d4ce7f6045e04d648a67d19c49d64a519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:9a:1d:0c:0f:61:e2:32:ca:36:c0:f9:7a:
                    02:e2:d8:a8:b8:eb:b6:22:6b:3c:6f:af:94:44:a4:
                    68:97:5c:e3:5e:9e:6b:41:36:66:4b:7d:0a:c9:29:
                    2e:41:a7:37:06:37:be:d5:32:38:b8:d7:f7:c4:4c:
                    0b:96:f1:44:62:e9:e3:ed:c9:55:80:a2:ea:2d:02:
                    81:86:d5:ec:15:31:08:ed:d6:a0:42:66:db:17:f2:
                    bf:fb:2e:2e:2a:15:c8:cb:86:e1:6d:99:c2:ec:2b:
                    6e:ca:57:c8:4a:ec:df:46:9b:fc:d3:3f:0a:5a:dd:
                    3f:32:70:8c:1a:7e:84:2a:5b:13:8e:97:6e:78:21:
                    16:02:6b:ab:b1:48:d2:80:6a:87:62:7f:93:ef:4b:
                    78:9c:bf:f6:ba:a2:d9:e4:ba:36:fd:91:a4:dd:22:
                    3c:48:4b:43:26:7d:92:82:c4:f3:f4:b5:4a:5c:a2:
                    82:6e:10:82:e5:b5:22:61:b3:44:ef:fe:5e:b0:b5:
                    62:67:85:e7:b7:e6:83:ba:97:58:6c:65:71:40:3d:
                    ba:e6:d7:99:c3:af:6b:ee:ea:c7:bb:c8:05:d6:ee:
                    5a:a8:91:c3:f0:91:4b:c4:a4:d8:f4:82:d8:03:60:
                    38:33:d7:76:0e:3d:85:c1:e3:5c:68:a9:05:97:1f:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:77:7B:2D:4C:E7:F6:04:5E:04:D6:48:A6:7D:19:C4:9D:64:A5:19
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:7d:1c:d8:9e:08:dc:1d:61:30:46:84:43:4c:f4:bc:01:
         9d:00:78:65:0f:71:17:ed:f8:d5:d9:6d:07:52:4c:fc:51:76:
         bd:ba:90:0b:45:27:b8:a8:13:56:73:4c:fb:1f:8d:03:57:5e:
         3c:22:48:39:f3:81:1c:31:21:d1:4f:a9:6a:14:63:79:ef:ac:
         a6:05:eb:b0:7d:c1:c2:46:3b:21:fd:5d:0a:d2:8b:b2:6f:ca:
         0b:05:fc:a4:69:15:d0:90:d5:16:9f:64:75:7c:ab:c6:19:1a:
         a7:70:0f:06:17:da:f1:01:b0:fb:03:e9:55:7f:88:be:cf:00:
         ce:aa:c3:03:22:19:f8:98:21:3a:8f:41:69:b2:67:c4:d4:e1:
         8a:e1:08:e4:60:e4:b6:ac:6d:2c:7c:9d:68:5f:ca:8d:b9:ab:
         f6:c6:b4:95:a2:6c:03:7f:6e:49:be:e4:3c:3c:ca:ef:56:f8:
         ea:f9:70:06:0a:00:04:e0:92:0a:60:89:bf:b5:78:cc:f7:39:
         c8:a6:84:17:ab:5a:9b:13:0d:ec:50:24:96:3d:01:51:c0:c0:
         c8:8f:cb:14:1b:39:5e:04:be:fb:33:f4:15:9e:42:3a:06:c4:
         07:d2:ab:50:cd:78:96:bc:60:8f:d7:27:9d:5c:c8:52:ad:21:
         9c:d8:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:40:39 2026 by rpki-client