Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          6yaF5ERtgKOyCQz0KY5X6QwDhFt3TIWNKXXDm+J/ZNw=
Subject key identifier:   FB:96:72:AA:24:F7:35:C3:6A:83:33:02:99:0B:1C:DF:12:00:F8:0C
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       01A1DCEFD0E1053B9ABA6D503D6456D5D31C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          1858
Signing time:             Sun 15 Nov 2026 02:01:06 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:06 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:06 +0000
Files and hashes:         1: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (hash: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM=)
                          2: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (hash: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo=)
                          3: DSzDYKP0Eliter60MSyPBC3uoBo.roa (hash: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY=)
                          4: K7pjnPK8S24idyOMea3NYin5SO8.roa (hash: YckTf9iIpdd+XsvzzovN9f+k8o5y12iUYrJM+OVIcPk=)
                          5: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: x9hf1xDGxetLAu1s7ODbT8yG+9dw0vclvRx7H/p3Omk=)
                          6: o-d6O05K7BPSIDagH_dA7QNFluU.roa (hash: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:ef:d0:e1:05:3b:9a:ba:6d:50:3d:64:56:d5:d3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Nov 15 02:01:06 2026 GMT
            Not After : Nov 16 02:01:06 2026 GMT
        Subject: CN=fb9672aa24f735c36a833302990b1cdf1200f80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:c7:60:74:b5:57:51:3f:3f:ac:7a:0e:46:
                    16:eb:db:07:72:22:8b:5b:17:85:1c:3c:5f:f8:32:
                    32:1a:6b:25:72:48:60:3f:04:b2:1f:d3:a4:7e:a9:
                    77:19:f9:14:34:89:46:1b:44:99:91:13:e7:80:c1:
                    05:6d:cc:66:9b:34:7b:ad:a9:bd:ec:4e:6a:2e:cd:
                    ba:b4:33:96:74:97:63:3e:fb:30:1c:d9:bb:2f:14:
                    44:31:21:de:a1:f1:46:3a:05:40:13:c8:25:01:28:
                    4e:34:fd:69:5c:5e:c1:71:87:38:97:86:f1:22:f0:
                    50:7d:82:74:02:86:74:bc:b1:72:51:56:d1:c4:48:
                    7f:ce:f1:89:0d:a0:05:43:65:6b:56:6d:82:db:08:
                    d6:36:d9:49:00:cc:d9:03:1b:35:59:ed:b6:97:76:
                    7a:da:7a:9e:2d:aa:ab:82:de:d7:0d:a5:aa:da:54:
                    64:44:51:e1:ac:e2:f8:a2:5c:bc:56:ac:30:4e:fd:
                    6b:c1:74:d7:84:db:f7:33:e2:da:b3:a4:b9:4c:bd:
                    a7:e2:b9:7c:69:9e:de:08:a7:4e:6d:f4:a5:2a:79:
                    4d:b9:0f:0d:91:26:fe:7d:3b:ac:7b:6c:5a:16:77:
                    0a:63:05:41:e1:2c:c4:e4:78:69:ab:3d:2f:9e:58:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:96:72:AA:24:F7:35:C3:6A:83:33:02:99:0B:1C:DF:12:00:F8:0C
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:6e:09:49:5c:a8:6d:b7:50:71:e9:95:fe:19:54:9d:eb:bc:
         5d:9a:bc:e5:5e:71:f6:21:70:fb:1c:77:3e:a0:aa:56:14:1b:
         6b:71:56:23:ed:b6:a9:4e:4c:0e:ae:48:f3:a2:c6:c9:09:4e:
         0f:03:f2:9c:13:5e:ea:5c:6b:d7:86:70:92:ba:65:bc:c8:8f:
         14:04:58:ae:15:4c:8b:16:96:2c:a5:5b:b7:56:65:ce:e8:e1:
         3c:dd:d8:8f:d4:b6:03:b5:7c:97:6d:15:c4:d3:fe:90:4f:70:
         da:58:9d:ea:75:18:1d:ac:7e:6f:90:82:67:e4:c6:b4:28:df:
         b7:57:7d:cf:55:6f:ff:7c:b9:6e:25:5a:cf:c6:2a:e8:d6:7c:
         09:a9:26:93:13:af:3c:3c:d0:43:92:58:05:4d:a5:3d:6e:cb:
         a2:28:fd:ae:f6:77:e8:8f:4e:e3:c3:f1:23:e2:7f:cf:2c:74:
         21:94:2c:44:82:d8:ef:80:e7:41:4a:5a:89:96:d4:1e:d1:75:
         41:c1:c5:b0:da:25:73:80:ad:f6:58:e2:97:7c:24:75:f2:e9:
         fd:7f:08:56:dc:d4:73:87:96:b0:e4:ff:06:5b:9f:08:2f:24:
         7f:81:5f:41:b7:16:8a:71:a4:5b:65:e2:bd:01:6a:3a:37:52:
         d1:2e:cf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:13:53 2026 by rpki-client