Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File:                     KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier:          KlkpUDF9aK23MEveDZ9tYTU6VogWiz8QOPhdcL0v6vs=
Subject key identifier:   B4:5E:16:6F:3C:8C:4C:7D:B7:03:66:43:A0:4E:FE:70:88:3D:51:BB
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer:       /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial:       01A0D15C3294166806E58BA61C005C3926D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 03:01:15 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:15 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:15 +0000
Files and hashes:         1: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: 0U03s3z+Lx+cpfivT8htWRXg27Ug0qqfWCRkYgPU41o=)
                          2: REbjg5M_8wpI3i_HlGLahpeL73s.roa (hash: Wg9GMppGq5pv2FgNgfdIsx4UTmxfeIHOeiAi7ZSNSIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:32:94:16:68:06:e5:8b:a6:1c:00:5c:39:26:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
        Validity
            Not Before: Sep 24 03:01:15 2026 GMT
            Not After : Sep 25 03:01:15 2026 GMT
        Subject: CN=b45e166f3c8c4c7db7036643a04efe70883d51bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:3e:7a:c1:0e:ab:f4:e3:80:59:8d:93:45:
                    a6:8e:ae:0d:88:92:59:40:fb:55:23:d0:c0:a7:51:
                    29:ac:64:66:34:ae:94:40:6b:c7:df:1a:68:4f:42:
                    30:af:59:1b:d1:04:dc:2c:05:43:07:15:9e:18:bf:
                    39:e3:c0:8a:6f:50:22:4d:36:12:59:2d:00:6d:72:
                    c0:e3:68:8e:d8:d8:c1:e2:e2:62:1e:34:4e:f4:5d:
                    df:2f:a8:ab:44:4b:d4:4c:43:44:f0:47:ce:1b:0f:
                    23:f4:a6:20:40:d7:42:5a:da:95:80:cf:39:a9:fd:
                    42:86:ba:5a:66:1d:b2:32:19:4c:31:5e:13:a9:53:
                    9f:a1:68:9f:c8:44:66:05:2d:7f:a3:5c:8f:86:a3:
                    32:1f:03:c1:b9:42:f8:56:d6:84:97:55:cb:ca:00:
                    dd:4d:86:c8:7c:08:fa:65:47:09:3c:17:31:26:3e:
                    bb:5f:31:fb:b3:87:3c:4e:65:db:f0:4b:a4:87:37:
                    c7:c5:20:fe:40:fd:16:47:33:1c:43:88:f4:a7:ac:
                    0d:0a:20:d1:ab:47:9d:a9:44:a0:52:5d:fd:c0:76:
                    84:2c:d5:03:0b:b5:e9:db:08:32:d4:a8:ff:c2:43:
                    e3:2e:8b:6d:80:b3:f3:2f:15:c5:d5:4e:c1:e2:05:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5E:16:6F:3C:8C:4C:7D:B7:03:66:43:A0:4E:FE:70:88:3D:51:BB
            X509v3 Authority Key Identifier:
                keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:67:8b:d3:48:b2:0a:02:9e:e8:25:aa:27:ba:38:27:5f:79:
         c8:1c:19:e5:e9:f9:7f:86:9d:49:c5:05:02:63:a9:4e:e2:ca:
         17:48:94:c2:b5:86:e9:0b:2d:ec:3a:74:72:f6:c8:56:42:47:
         9b:22:30:77:dd:49:86:28:74:e7:6f:ce:dc:ac:01:3a:e7:61:
         5a:69:f0:e7:74:f2:49:4d:ec:15:dd:d8:e1:01:22:2b:f8:dd:
         04:8f:44:05:e6:3f:20:a2:92:5a:67:f4:39:b6:4f:f8:1a:e8:
         f2:69:60:93:ec:74:d9:9c:e5:fb:8b:45:9f:d2:8a:39:39:23:
         f5:ba:75:16:90:ad:ec:b4:81:bc:d5:58:8f:9c:4b:d7:0e:60:
         e0:1d:16:73:bc:e0:67:13:0b:14:cd:f8:c0:7c:cd:c3:56:9c:
         9d:e0:21:15:34:ed:32:8a:84:2d:21:ae:af:41:3a:71:4b:14:
         25:ee:15:d5:45:ac:b9:ae:1e:f7:7f:44:8a:bd:c8:50:eb:64:
         1a:63:46:1a:29:e8:83:5c:3f:8c:86:45:ea:8e:61:02:2d:94:
         ad:00:30:a2:2b:4d:8d:b3:51:2c:37:01:e2:6f:42:6b:2b:8b:
         b2:52:98:5c:c5:49:49:fa:ec:04:4d:d7:e6:9b:15:e6:4d:10:
         78:62:92:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:05:25 2026 by rpki-client