Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          OiOusPUPWzEQMYsXqgvpbNeE9+qQGYuNqEk88YWGU7w=
Subject key identifier:   1A:EA:31:42:5D:1D:B7:46:53:07:42:31:BF:18:F6:51:1C:8B:56:C3
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       01A0D2001C92AC92C334C421703C55185D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          09F5
Signing time:             Thu 24 Sep 2026 06:00:17 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:17 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:17 +0000
Files and hashes:         1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: h0ccYGPEwq25Uq7k858Rl9YNm1udeTW0NDpESrrfCg8=)
                          2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:1c:92:ac:92:c3:34:c4:21:70:3c:55:18:5d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: Sep 24 06:00:17 2026 GMT
            Not After : Sep 25 06:00:17 2026 GMT
        Subject: CN=1aea31425d1db74653074231bf18f6511c8b56c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:76:b5:81:40:b3:f0:e8:b4:30:14:67:2e:
                    f4:7f:bc:d7:54:6d:24:41:3a:52:37:ac:ff:94:c0:
                    a9:7c:7f:58:62:26:aa:75:34:f4:18:db:f9:bd:79:
                    d6:58:44:ef:50:32:fc:b3:35:2f:f1:3a:ec:57:97:
                    e8:e9:06:bb:b5:81:de:4d:4c:44:9b:c9:73:10:04:
                    ac:78:7e:26:1c:97:c4:b2:f7:4e:c2:21:37:66:42:
                    e4:e9:de:18:5f:e2:de:24:8c:b8:2d:76:ac:27:f9:
                    a9:be:65:0b:d9:cc:f2:a6:b0:f6:bf:f5:c2:cb:f6:
                    5a:ca:b4:90:cb:df:41:00:ea:72:e8:cc:c1:31:fa:
                    63:f2:03:fe:73:b8:f8:9b:a9:b3:21:21:76:96:38:
                    b2:22:cf:3e:86:f8:06:20:eb:32:9d:44:e0:95:4f:
                    63:9b:b6:67:94:0b:67:73:3a:b2:22:48:1c:af:4c:
                    8a:76:73:b4:9b:98:6c:9b:89:03:fd:a3:da:39:90:
                    4b:10:bc:7e:43:7f:40:ad:1d:f4:82:ff:2a:30:40:
                    88:1f:dc:f5:3f:3b:ac:95:0b:0f:52:c0:d5:14:ba:
                    e0:38:5a:d6:b8:31:7a:4d:de:6f:ac:e4:86:71:b7:
                    aa:c4:af:1e:35:51:83:6c:44:eb:2b:b7:24:86:ff:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:31:42:5D:1D:B7:46:53:07:42:31:BF:18:F6:51:1C:8B:56:C3
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:16:80:b8:c9:ad:8a:dd:8a:03:0a:f6:b5:2c:d2:f1:db:cc:
         ea:5a:99:6c:6e:be:84:d7:68:3f:5c:27:6d:e1:f6:0e:05:f5:
         f7:82:51:73:99:97:f0:37:57:da:7f:8f:48:f6:cd:d3:d1:d7:
         0f:73:25:8a:38:0c:6d:85:dc:d1:0a:8f:93:b0:ff:52:23:06:
         59:c2:04:6e:8b:4e:ee:bc:90:53:71:d4:3c:b9:17:3d:a6:4f:
         ec:f2:5a:64:ae:f3:e3:a9:e1:0f:70:2d:26:d7:2f:b6:4d:5b:
         ce:76:4c:94:46:07:ea:40:13:3e:ad:6d:24:d5:91:19:59:63:
         dc:98:c8:04:20:ad:e4:4d:13:79:1f:20:2c:0f:e9:12:97:29:
         60:50:e5:63:fe:83:19:cb:0f:5e:a7:fe:d9:cf:44:b6:b7:93:
         db:4c:f5:fe:ac:4f:b6:c8:e5:82:9c:f1:17:15:3a:cb:22:01:
         b2:2e:89:9d:ca:57:b2:f3:dd:e9:49:96:ab:8f:20:f3:cb:a1:
         c1:3f:86:53:0b:8f:67:50:a7:02:98:5c:53:c1:60:16:2a:06:
         c8:55:1b:6e:76:a1:98:43:4a:52:de:7f:70:90:3e:de:51:ee:
         55:dd:9c:cf:c1:c7:8c:db:0c:f8:86:1b:e7:8d:7a:4d:48:40:
         d1:a7:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:13:44 2026 by rpki-client