Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File:                     K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier:          LvH77oN4zDDq/zTHIl2FPyCEg2DgDo8oQDWnCNGq79o=
Subject key identifier:   6F:55:75:0E:3B:B5:AA:9C:27:50:C1:80:D2:4A:3B:20:8D:96:BB:58
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer:       /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial:       019DA48B262487C8E40C65F54CE7BC922DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number:          03CD
Signing time:             Sun 19 Apr 2026 07:01:15 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:15 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:15 +0000
Files and hashes:         1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: gpbPisQ6emOv2O9LBOEF5Q4NmGDHfnKVzNG/FrDamKc=)
                          2: a4tcSb4rS0ZTyQ0HQWUrw9ZU1WI.roa (hash: 6y7B5mYALV8RuAK+rFKCQl3TCy8ZRF7yNkPXxeMdXfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:26:24:87:c8:e4:0c:65:f5:4c:e7:bc:92:2d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
        Validity
            Not Before: Apr 19 07:01:15 2026 GMT
            Not After : Apr 20 07:01:15 2026 GMT
        Subject: CN=6f55750e3bb5aa9c2750c180d24a3b208d96bb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:f2:b0:79:31:52:75:9f:f4:a8:05:a4:d6:
                    c8:69:7f:12:1a:a9:2c:4e:fc:7b:2f:02:7b:30:2f:
                    09:12:0b:d7:7b:aa:47:d9:2a:ab:b3:36:9f:46:78:
                    77:d4:56:20:7d:2e:18:44:0d:aa:a7:96:01:f4:33:
                    be:80:6f:85:4c:82:2f:e5:1d:48:2b:0c:c9:14:7e:
                    58:fc:54:06:76:16:2d:af:aa:ab:0f:5b:cb:bc:97:
                    9b:a5:70:58:11:56:94:a6:06:5d:80:47:3e:ed:18:
                    90:12:ed:67:d5:72:66:02:fb:a1:ea:4c:35:26:6d:
                    7f:d3:17:65:7c:ed:e0:09:56:1a:23:a2:87:ff:de:
                    f7:c7:5c:cf:81:5f:34:27:1f:25:f3:89:76:2f:e4:
                    d6:90:50:78:a5:0c:fd:0c:04:3d:5f:21:b0:73:a2:
                    0b:36:2f:4e:2f:fb:25:fe:cf:80:f5:e9:fc:ba:95:
                    ae:14:42:6e:90:f7:07:56:67:34:37:e7:d2:9d:4e:
                    ce:eb:08:2d:14:ca:13:2f:59:eb:34:c0:68:65:42:
                    cc:2a:65:da:41:f4:92:6b:18:e6:9f:fc:9a:f0:f7:
                    5e:d6:72:4f:92:2a:7c:9a:7f:af:dd:0d:ab:31:2e:
                    1f:74:a6:49:dc:cf:ad:b0:c4:d2:37:b2:46:4a:4e:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:55:75:0E:3B:B5:AA:9C:27:50:C1:80:D2:4A:3B:20:8D:96:BB:58
            X509v3 Authority Key Identifier:
                keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f9:9a:4a:9f:34:05:44:a4:4c:85:83:db:33:63:15:cf:14:
         ec:7d:2b:5f:7e:5c:81:b6:a2:15:bc:de:c3:3e:96:5d:5a:80:
         9e:ca:59:6b:75:79:4a:68:f7:8a:26:14:05:df:94:5d:ea:9c:
         1b:37:21:8e:e5:c8:00:89:a6:76:d0:15:d2:5c:b8:55:a5:f3:
         07:85:b0:e8:a3:1b:2e:ed:2e:da:19:59:f7:0b:eb:89:05:82:
         58:54:8d:df:61:49:20:e3:78:b9:5e:f3:81:87:20:fa:44:7e:
         18:b1:83:58:d7:8a:f7:84:9d:49:55:c4:a5:b0:21:45:bc:53:
         a8:f1:78:22:c9:ad:e8:0c:75:10:e1:c4:7b:1d:80:08:80:fe:
         0f:ef:13:4f:0d:06:06:26:d1:19:04:95:d5:0c:30:ad:1d:5c:
         bc:2e:7e:f6:7b:0a:64:a9:cb:d3:1a:2d:ce:b0:fb:21:9d:2a:
         78:32:25:1d:34:2e:38:11:8c:3c:d7:e5:dc:99:92:3e:4a:8d:
         f8:d0:0d:eb:40:dd:ef:4b:06:eb:7f:f8:ff:6f:48:4d:f4:68:
         18:15:d4:44:a0:6a:17:65:f1:39:5f:6f:7a:ab:b1:09:93:74:
         fb:f9:4a:25:ac:ed:6d:b0:84:da:33:b6:03:49:80:0b:13:1d:
         fe:b7:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:22:53 2026 by rpki-client