Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File:                     k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier:          Hu/2eUhPKkmjcCScRxh6Lorgb9I4IL1fAO6yOdfMztc=
Subject key identifier:   9B:C7:60:5D:6B:A3:1E:9F:28:1D:C2:4D:7F:43:D4:30:47:F8:62:D9
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer:       /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial:       019E1F47F18B096CB782A3E6F687601BDC8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number:          1756
Signing time:             Wed 13 May 2026 03:01:08 +0000
Manifest this update:     Wed 13 May 2026 03:01:08 +0000
Manifest next update:     Thu 14 May 2026 03:01:08 +0000
Files and hashes:         1: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: 6B3xHFfuHrrzDfZh0OAZkT3xJZJw0Z9uU+pKuuRUCSk=)
                          2: xrChCZKPpUH_V3yyUorXAC7-wuI.roa (hash: mu02wWY4fhbPfdL9W27X+rqqcQR4ghwCDLbVsERFcxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:f1:8b:09:6c:b7:82:a3:e6:f6:87:60:1b:dc:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
        Validity
            Not Before: May 13 03:01:08 2026 GMT
            Not After : May 14 03:01:08 2026 GMT
        Subject: CN=9bc7605d6ba31e9f281dc24d7f43d43047f862d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fd:7f:ae:0b:17:bb:2b:fc:9d:f4:61:14:a9:
                    fa:53:e0:ba:6d:a6:ae:3f:93:41:d2:2e:5e:c6:96:
                    5a:07:f8:f1:bb:ad:17:a1:ab:9b:ec:0c:8b:1b:95:
                    54:77:44:77:89:96:4b:72:88:e7:15:84:d4:5b:4f:
                    c9:ef:6d:4e:f0:57:18:be:b0:52:54:9f:b7:e1:b5:
                    ed:34:a6:90:0d:7c:18:e6:1e:38:23:18:07:bf:98:
                    e9:e8:2f:7d:b8:ee:93:3e:90:2c:42:d9:64:59:42:
                    a5:96:a1:45:22:a5:c6:70:7b:8a:60:9e:d3:10:1f:
                    d2:74:1d:dc:72:54:df:f6:b8:9b:c8:b6:1b:a5:c0:
                    1c:da:2c:e9:46:cc:3d:f5:d7:79:17:1f:a0:ba:5c:
                    52:ff:83:c2:aa:f9:c8:5e:cc:c2:02:76:c6:ea:26:
                    55:d5:f2:16:1c:21:24:e4:4e:77:f3:71:28:4c:08:
                    a0:48:6b:91:df:74:c7:b5:40:8d:b1:5c:62:7b:db:
                    53:fd:f8:85:d0:45:12:22:32:13:20:e0:45:42:ef:
                    6d:f3:3f:54:c6:97:80:82:74:21:cb:65:cb:2b:2d:
                    af:af:5f:af:97:38:56:c1:75:31:27:b0:19:b6:26:
                    b5:ae:22:09:04:de:71:3b:23:21:a8:bf:98:0e:6a:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:60:5D:6B:A3:1E:9F:28:1D:C2:4D:7F:43:D4:30:47:F8:62:D9
            X509v3 Authority Key Identifier:
                keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:77:2a:5b:d6:d4:b0:ab:f7:9b:6c:c5:9a:35:80:34:a3:64:
         4f:a0:47:cc:66:6b:80:3c:9e:86:ac:a3:32:a2:9e:6b:0d:f8:
         86:94:c5:65:1a:95:e6:e0:48:05:85:0c:f0:c8:9d:f5:b5:86:
         34:f6:ff:e6:2f:64:0f:fc:91:af:61:40:2e:77:a9:98:fd:21:
         10:16:90:5d:8c:5a:f0:1c:8d:e6:2b:41:67:32:8e:67:7c:24:
         68:c8:2a:69:85:87:4b:d0:53:63:8b:a5:89:8e:6e:bf:8a:e0:
         86:e1:c6:b9:93:0d:9c:ae:ab:06:b5:d7:f0:0e:00:6c:33:c7:
         da:8f:c0:64:2b:c5:aa:fd:93:7f:4e:6a:53:cd:ac:38:d6:3a:
         28:9a:18:1b:0e:f2:39:8b:1b:f1:ec:57:d1:bb:78:e4:af:0e:
         09:8e:07:38:d9:19:84:28:43:89:70:20:9d:cb:ae:13:9b:dd:
         b4:38:7b:ba:54:02:95:b3:26:78:51:93:70:85:e9:ef:f1:6f:
         d2:cd:13:68:bd:59:dd:da:19:59:38:a1:fe:f6:97:23:81:60:
         00:79:52:f6:71:b8:ab:59:ac:f9:13:37:14:28:35:3c:bb:23:
         fc:fd:6e:f3:58:aa:f4:34:85:d3:0d:6e:41:34:1e:2c:9d:27:
         a9:c2:7f:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR/GLCWy3gqPm9odgG9yMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZjI1YjcyNzU4ZGE1OGYwZjNlYzBmMDcyNzM1M2ViZDJi
NDQ3NzQwHhcNMjYwNTEzMDMwMTA4WhcNMjYwNTE0MDMwMTA4WjAzMTEwLwYDVQQD
Eyg5YmM3NjA1ZDZiYTMxZTlmMjgxZGMyNGQ3ZjQzZDQzMDQ3Zjg2MmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f1/rgsXuyv8nfRhFKn6U+C6baau
P5NB0i5expZaB/jxu60Xoaub7AyLG5VUd0R3iZZLcojnFYTUW0/J721O8FcYvrBS
VJ+34bXtNKaQDXwY5h44IxgHv5jp6C99uO6TPpAsQtlkWUKllqFFIqXGcHuKYJ7T
EB/SdB3cclTf9ribyLYbpcAc2izpRsw99dd5Fx+gulxS/4PCqvnIXszCAnbG6iZV
1fIWHCEk5E5383EoTAigSGuR33THtUCNsVxie9tT/fiF0EUSIjITIOBFQu9t8z9U
xpeAgnQhy2XLKy2vr1+vlzhWwXUxJ7AZtia1riIJBN5xOyMhqL+YDmosKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvHYF1rox6fKB3CTX9D1DBH+GLZMB8GA1UdIwQY
MBaAFJPyW3J1jaWPDz7A8HJzU+vStEd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQt
ODJhMzExMmY0OWM3LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQtODJhMzExMmY0OWM3
LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3cqW9bU
sKv3m2zFmjWANKNkT6BHzGZrgDyehqyjMqKeaw34hpTFZRqV5uBIBYUM8Mid9bWG
NPb/5i9kD/yRr2FALnepmP0hEBaQXYxa8ByN5itBZzKOZ3wkaMgqaYWHS9BTY4ul
iY5uv4rghuHGuZMNnK6rBrXX8A4AbDPH2o/AZCvFqv2Tf05qU82sONY6KJoYGw7y
OYsb8exX0bt45K8OCY4HONkZhChDiXAgncuuE5vdtDh7ulQClbMmeFGTcIXp7/Fv
0s0TaL1Z3doZWTih/vaXI4FgAHlS9nG4q1ms+RM3FCg1PLsj/P1u81iq9DSF0w1u
QTQeLJ0nqcJ/kA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:13:26 2026 by rpki-client