Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File:                     K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier:          K7xNj3xBLhp+h5G4ksw76fAFuJ2ItTmcq4NeosyLLKo=
Subject key identifier:   B0:72:44:EE:DA:56:BA:AC:0B:A0:0F:49:A6:C9:C7:B4:CA:40:95:33
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       01A137B673F5D6B26754D48122157DEFCF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number:          084F
Signing time:             Wed 14 Oct 2026 00:01:06 +0000
Manifest this update:     Wed 14 Oct 2026 00:01:06 +0000
Manifest next update:     Thu 15 Oct 2026 00:01:06 +0000
Files and hashes:         1: Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (hash: A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=)
                          2: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: cby2rabi4S96YX30qyij81z7LrcmXtNTK69C8IvDUuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:b6:73:f5:d6:b2:67:54:d4:81:22:15:7d:ef:cf:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: Oct 14 00:01:06 2026 GMT
            Not After : Oct 15 00:01:06 2026 GMT
        Subject: CN=b07244eeda56baac0ba00f49a6c9c7b4ca409533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:3f:88:a4:df:eb:f5:98:52:f3:36:62:74:
                    06:17:94:36:32:82:49:64:5f:0d:43:29:c4:08:45:
                    2a:3a:df:19:f3:64:27:9b:00:0c:42:22:ae:66:10:
                    d7:9f:33:e4:27:d7:18:46:0a:0d:ea:26:c9:24:5a:
                    ba:5b:0b:bb:33:57:3f:3a:91:66:63:55:72:07:57:
                    49:0d:6c:2c:3a:49:0e:32:be:01:fe:ae:2b:00:39:
                    3a:3a:cc:19:ea:a3:84:01:98:c3:79:e6:29:d5:97:
                    55:ae:6f:f4:34:f1:77:80:e5:f3:9e:92:8d:18:4b:
                    2d:59:ab:53:49:ae:e0:3c:66:ca:ae:f8:45:2c:69:
                    58:68:69:13:eb:55:2a:25:3a:28:7e:48:12:83:23:
                    01:8c:07:89:a3:61:48:97:90:19:a7:86:b9:79:2d:
                    7f:8e:00:28:ef:a6:5a:68:91:9a:af:85:db:66:1b:
                    06:55:aa:19:21:6b:de:a8:81:ad:62:d4:00:72:ff:
                    fe:c1:76:f5:b8:cb:cb:cd:b6:cb:4f:1e:6f:98:73:
                    24:96:c1:df:7f:7a:b8:c3:eb:7a:e8:53:3e:f3:cf:
                    ba:71:0e:22:a4:4e:d9:42:79:91:43:75:73:92:e7:
                    03:7e:ab:98:ca:8f:1f:8b:66:75:ad:a9:9f:0a:f3:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:72:44:EE:DA:56:BA:AC:0B:A0:0F:49:A6:C9:C7:B4:CA:40:95:33
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:61:26:4e:0b:e3:b7:24:58:7b:94:9b:0d:26:25:b7:ec:09:
         36:6f:a6:cc:87:63:3a:57:98:10:9b:74:86:dd:87:46:37:27:
         84:17:36:95:41:c9:16:38:66:e3:fd:dc:ea:d1:b3:52:58:02:
         ee:5e:8b:97:73:6a:dd:09:dc:b9:6c:46:bb:98:21:98:e1:2f:
         60:ed:34:0b:bc:30:fd:0f:95:00:bc:22:89:55:13:14:df:41:
         8c:3f:77:23:d2:3d:26:bd:94:39:19:99:24:e2:51:e2:ab:2e:
         4b:21:a0:a8:0c:24:b5:41:3a:df:d5:bd:e4:9a:67:70:83:f4:
         42:ac:92:b9:95:ac:fd:d2:c5:9e:12:9b:df:5a:bc:f1:ed:67:
         c9:fb:f6:31:9e:a9:ca:e0:dc:9d:86:d6:05:ea:cd:26:a8:56:
         67:6b:0c:40:34:92:3c:52:cd:47:5c:10:2a:88:06:d8:ea:03:
         cd:72:03:ba:28:fa:93:7c:03:ee:2e:65:f7:e8:50:12:fc:a0:
         9a:5d:67:4b:3a:74:37:2b:7e:2e:e5:b7:67:b9:d7:9b:70:0c:
         d5:da:25:62:3b:fc:de:15:5a:0f:d2:ba:85:38:7d:34:fe:70:
         a2:bb:7c:9b:0d:f6:7d:43:31:8d:f5:a2:5e:a3:91:93:e5:97:
         37:57:ae:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:07:17 2026 by rpki-client