Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File:                     kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier:          fKsZ7lawa+czjWwyOTUWmWqoZ9LT0A2fd4hYCpF5u2M=
Subject key identifier:   82:52:3D:21:B7:8D:0D:42:FF:A6:D4:E4:20:80:5D:BC:B2:84:9F:FD
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer:       /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial:       019D25BA2B0D8EA6ED79AC9498DECAB3AE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number:          1880
Signing time:             Wed 25 Mar 2026 16:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:50 +0000
Files and hashes:         1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: uLLCQ12eR1uk49JXaoP3eWvbSd7PF8aD+fiOzQsc8/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:2b:0d:8e:a6:ed:79:ac:94:98:de:ca:b3:ae:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
        Validity
            Not Before: Mar 25 16:00:50 2026 GMT
            Not After : Mar 26 16:00:50 2026 GMT
        Subject: CN=82523d21b78d0d42ffa6d4e420805dbcb2849ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:e7:38:41:69:a8:3a:eb:43:41:ea:9d:43:
                    f1:77:d6:4d:fc:97:cd:39:e9:81:9d:d2:32:37:e3:
                    5c:61:10:13:5e:fd:fa:8f:c8:e0:10:1e:17:ec:be:
                    af:6b:bc:ab:58:77:b6:76:00:e6:e7:e2:a2:19:2d:
                    ea:46:8f:df:31:2d:d7:5b:7c:b3:ef:3f:59:8f:3a:
                    5e:bf:66:1c:08:36:92:3d:f8:38:a7:73:81:a6:a5:
                    59:88:b6:da:f1:8a:86:bf:83:6e:05:cc:9d:ee:19:
                    38:d5:1c:5c:43:a9:cd:66:a8:3c:50:93:a3:65:26:
                    59:be:24:08:ad:8b:6b:2c:f7:b0:84:54:db:a7:b9:
                    57:29:76:07:1e:1e:68:84:c0:86:41:28:2f:18:6d:
                    82:1b:e1:4d:dd:b5:48:21:f0:4e:43:7e:bd:15:43:
                    4e:22:ec:6b:78:ec:35:3e:86:5e:8e:d1:f1:20:4c:
                    c0:a1:a5:13:b6:30:3b:e9:b8:5e:a2:6a:11:9b:e5:
                    b6:50:9b:fc:21:bb:e8:36:70:4b:b2:6b:7f:3a:d9:
                    45:f7:42:d0:54:68:a2:1f:a7:02:5d:94:b7:4d:6a:
                    c6:2c:38:0d:dc:32:8c:bb:f8:55:b7:91:ca:93:04:
                    bd:f6:65:5d:19:93:44:c0:38:10:3c:c3:e9:28:66:
                    ea:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:52:3D:21:B7:8D:0D:42:FF:A6:D4:E4:20:80:5D:BC:B2:84:9F:FD
            X509v3 Authority Key Identifier:
                keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:64:a8:42:53:ae:75:0d:69:90:eb:e0:5a:c1:86:c5:19:af:
         e1:62:73:f3:4d:71:3c:11:97:50:81:e9:7c:21:b9:b0:9f:d4:
         40:88:86:a8:ed:69:dd:62:72:c0:c1:09:96:c4:8e:10:46:ea:
         f9:a3:3e:2a:86:8e:ab:c4:ad:b0:81:a7:01:f8:f9:70:4c:c5:
         d2:a5:63:6e:13:35:28:c4:6b:4f:d0:b7:28:52:e3:0f:e2:3a:
         b5:06:21:69:65:39:63:e0:44:66:d3:21:ac:90:86:68:81:ef:
         fd:12:52:ba:44:67:2a:66:30:98:39:2b:15:6a:56:62:a9:a7:
         ab:64:26:c5:e4:be:6b:d5:f7:eb:af:25:51:3f:94:33:66:da:
         d8:41:d3:6f:aa:b3:11:da:85:5a:07:b6:5e:13:7b:13:57:6f:
         eb:c2:03:3b:0a:fc:f4:6f:79:cb:b7:53:bd:23:59:42:c5:d7:
         aa:11:fa:4d:1b:68:a9:f4:cf:ab:79:f3:f3:56:6a:ab:dd:b4:
         fd:53:ff:8c:a5:36:f7:12:bc:ba:54:8e:ca:76:11:cf:8c:d4:
         36:25:b2:d0:11:61:28:64:8f:f8:7f:90:e9:ae:6b:ae:b2:5d:
         b7:88:4f:29:ee:a0:2e:25:94:cb:6d:00:d9:c5:b3:91:64:47:
         41:1d:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:37 2026 by rpki-client