Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File:                     KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier:          JI+ZlLV1jkXjqTHrbPuhos4O1TzA78n6IdjC5V/eQkY=
Subject key identifier:   55:48:84:DC:D3:4B:D8:A4:45:2C:02:37:1B:EE:85:A4:36:27:03:D1
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer:       /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial:       01A10F958701E28E4A0251905EDE44896A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number:          1796
Signing time:             Tue 06 Oct 2026 05:00:19 +0000
Manifest this update:     Tue 06 Oct 2026 05:00:19 +0000
Manifest next update:     Wed 07 Oct 2026 05:00:19 +0000
Files and hashes:         1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: sypumWHe2VcyF7RfJb7XQG1geQvqWY/w13MO9IK9EgY=)
                          2: L7FFVZjn00bwAbkg_Lv5HyPXbUw.roa (hash: DToSgYumdmGKe2TLhpTAx0H6yxJQdXcD2z0JX5cGoUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:95:87:01:e2:8e:4a:02:51:90:5e:de:44:89:6a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
        Validity
            Not Before: Oct  6 05:00:19 2026 GMT
            Not After : Oct  7 05:00:19 2026 GMT
        Subject: CN=554884dcd34bd8a4452c02371bee85a4362703d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:ac:ee:26:85:08:7d:7b:dc:24:cf:11:62:
                    24:53:f9:bd:aa:70:7d:00:d8:24:1e:4d:0c:d3:3b:
                    e5:54:26:be:b1:3f:b8:78:15:bc:fc:bb:62:da:7e:
                    3a:c7:ab:ac:3f:89:77:bb:7f:ba:8f:54:50:7d:51:
                    24:b9:8e:ab:8a:eb:c2:73:87:ff:dc:4e:d4:13:83:
                    6d:37:f1:23:5c:14:44:7d:f2:3a:e4:a8:95:d9:be:
                    47:70:df:bd:81:8c:3a:f2:f3:cc:d7:53:78:45:42:
                    2a:ef:22:0e:e5:9f:fe:01:0e:3f:5d:c0:b5:d2:24:
                    d1:ab:e1:d2:46:12:55:5b:6a:e9:ff:6a:d7:40:bb:
                    84:ea:6f:39:63:78:6d:3b:0a:46:2c:35:88:b9:e1:
                    b2:9c:3a:f6:48:2e:af:c3:52:fc:43:bd:20:d9:ea:
                    30:02:85:5d:6c:4e:de:04:56:08:e4:81:74:d2:f9:
                    97:15:4f:65:9e:a1:96:db:e1:0b:f3:ab:82:6d:79:
                    6e:15:2c:fd:87:64:47:61:07:8c:61:49:00:fb:c5:
                    f4:4a:37:31:5d:26:ae:04:56:3c:9e:8d:47:f1:20:
                    05:4c:ab:a2:b6:2b:29:7c:3a:c4:a1:5b:0d:5c:f5:
                    9f:30:3a:a4:58:80:5b:0d:fa:e3:86:ff:38:d9:aa:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:48:84:DC:D3:4B:D8:A4:45:2C:02:37:1B:EE:85:A4:36:27:03:D1
            X509v3 Authority Key Identifier:
                keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b4:64:87:01:86:89:49:4a:f0:22:64:c8:76:0d:98:39:20:
         d5:c2:58:e7:63:25:c2:38:4d:bd:5c:ca:64:73:62:9f:1b:dd:
         18:2c:57:c6:55:65:04:c4:ba:88:16:03:29:0e:e3:33:99:33:
         6c:21:49:51:cd:cd:4c:dd:84:07:1e:8b:03:0d:da:67:85:f0:
         15:f8:ac:2f:87:1f:3e:7c:fd:2b:e2:66:2d:74:e4:72:5b:40:
         c3:e8:80:21:eb:a9:fa:d5:a3:4a:bf:ae:dd:53:58:fd:99:f1:
         64:47:2c:32:63:4a:cf:c8:76:22:7e:04:df:16:86:d7:c9:51:
         47:75:08:7e:86:1d:24:2a:16:65:d5:f5:50:1d:5e:85:05:5e:
         5b:c1:77:b9:9b:11:b8:f3:ca:dd:51:33:6b:cf:ec:ac:43:0d:
         a7:ae:88:35:21:da:72:ed:e7:c7:78:83:82:e7:a6:7b:29:f1:
         c9:77:b8:90:24:b4:b7:c0:9e:a4:48:91:ee:27:2a:ca:a6:be:
         c4:ab:56:82:fe:12:e3:1c:91:23:67:47:0f:1f:6e:d5:ce:8d:
         98:83:7c:6b:8b:0c:5e:80:4e:cc:d1:b2:f1:14:86:ad:c2:59:
         15:d4:f8:77:10:62:a1:41:9e:8a:76:6a:56:d3:b0:2e:b3:24:
         db:43:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:55:37 2026 by rpki-client