Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File:                     kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier:          p6z8BsAuzRLNhSYNI8rF4GGTsgQGkZWyI1lycRs5ojY=
Subject key identifier:   5E:42:EA:C2:6D:81:2E:5C:AD:CD:85:C5:A6:CD:CE:D3:E2:79:AE:99
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer:       /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial:       019D984F979B00945C6D9352ECF0BD2279B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number:          079B
Signing time:             Thu 16 Apr 2026 22:00:46 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:46 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:46 +0000
Files and hashes:         1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: mirkn3KaKvNIfkqGWk28KhzuZLsMsGx9rhYpeym5hV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:97:9b:00:94:5c:6d:93:52:ec:f0:bd:22:79:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
        Validity
            Not Before: Apr 16 22:00:46 2026 GMT
            Not After : Apr 17 22:00:46 2026 GMT
        Subject: CN=5e42eac26d812e5cadcd85c5a6cdced3e279ae99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:c8:2b:75:df:0c:fe:34:7b:27:6d:99:b0:
                    91:54:79:15:19:2c:2f:8c:2b:cf:e2:0b:a4:5b:c8:
                    f6:40:d7:29:cf:f2:52:79:3b:45:95:ba:d4:87:0a:
                    af:fc:a7:b2:ac:c4:bf:02:db:77:00:d4:39:23:4e:
                    48:67:c8:27:d1:47:17:36:55:52:d0:ea:78:66:50:
                    68:99:db:0d:a0:46:9d:c5:55:43:8c:f6:a3:64:15:
                    e8:8a:c1:1f:18:88:e2:3b:29:e4:49:0b:e1:91:5b:
                    ec:82:5f:72:4c:34:82:9d:3c:b6:47:ce:1b:20:69:
                    87:71:0c:38:98:c0:70:69:2c:42:f5:59:d9:f3:e4:
                    2a:19:0a:43:fb:3d:e2:87:f3:ca:e8:5f:09:5e:1c:
                    df:19:05:57:6d:64:2f:f5:a8:38:18:83:db:03:63:
                    e2:bb:c3:9f:6a:72:23:0a:0f:5b:19:05:66:9b:ce:
                    9e:19:09:ba:91:ef:93:60:4d:3d:8e:27:44:a5:9b:
                    d9:04:34:32:a3:65:3d:ff:c5:f8:5c:08:f2:35:76:
                    d7:21:27:d3:e4:ff:78:fb:ce:43:76:44:73:78:ff:
                    da:27:89:d3:dd:ce:fe:b4:46:7c:55:14:d6:ee:ac:
                    7d:74:95:88:0d:e7:68:47:44:7e:71:4b:9e:36:c4:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:42:EA:C2:6D:81:2E:5C:AD:CD:85:C5:A6:CD:CE:D3:E2:79:AE:99
            X509v3 Authority Key Identifier:
                keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b0:32:93:cd:58:91:e1:17:31:0b:29:cf:34:2c:d1:75:27:
         95:0d:c1:7e:1e:50:58:ee:d3:4e:da:28:87:fb:da:71:73:0d:
         65:4f:8d:86:8c:ea:e8:59:1b:d8:15:33:b4:7f:f8:37:7c:c0:
         46:c6:45:e3:7d:32:68:46:69:b3:80:7d:62:12:3e:4f:32:03:
         43:85:1d:3e:7e:8c:78:02:bd:84:01:cf:c1:5e:87:9e:1a:7a:
         9a:b1:34:c9:9d:26:cb:b0:cb:fd:58:53:02:e0:d6:dc:43:5d:
         05:02:39:94:9b:0e:27:e9:8a:f8:96:60:8d:3a:ff:2d:b9:24:
         ae:b8:da:cc:32:b5:73:34:ee:9e:e4:a1:a9:a0:8e:52:b1:63:
         5a:44:57:e2:c9:87:b8:87:1a:57:27:46:0c:c3:dc:22:31:18:
         b8:fc:88:03:07:95:4d:de:f2:74:04:fa:f6:d4:11:88:a6:b5:
         ce:22:ed:2f:6a:65:4d:8e:27:8b:4c:52:4d:d8:a0:17:53:a0:
         73:a5:d2:f7:f1:f2:f2:20:35:09:0e:a3:19:c1:29:6a:29:ca:
         e8:91:d3:7e:b6:ee:00:35:2c:53:72:64:1c:ea:7a:57:e1:73:
         cc:58:f6:3a:37:fa:57:90:e8:37:6e:70:50:bd:8c:6a:36:f2:
         fc:8c:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:28 2026 by rpki-client