Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
File:                     L6e3lEVZi0Luy76CjdiU368d_Ko.mft (raw, json)
Hash identifier:          GaKr0R25ae1pHsxzW8bA/aJUTb96bNPLXspt0F+HzLU=
Subject key identifier:   80:EE:7D:9E:E0:F8:38:BC:C5:F4:01:39:A0:F9:CF:AD:D5:53:AC:88
Authority key identifier: 2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
Certificate issuer:       /CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Certificate serial:       01A0E964569ECEBB16D518A32A9044181247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
Manifest number:          0209
Signing time:             Mon 28 Sep 2026 19:01:02 +0000
Manifest this update:     Mon 28 Sep 2026 19:01:02 +0000
Manifest next update:     Tue 29 Sep 2026 19:01:02 +0000
Files and hashes:         1: L6e3lEVZi0Luy76CjdiU368d_Ko.crl (hash: 58iuTDvOAt1Xvu0gfxvyCwd36JN3W7XwbQ9N7qujanU=)
                          2: PfsRjm_sXc9yq02VYcPYmw928hA.roa (hash: odW6R3Z/rx456fN6DjaMaw5N9kyEi5y2b8WBZeHEYcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:64:56:9e:ce:bb:16:d5:18:a3:2a:90:44:18:12:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
        Validity
            Not Before: Sep 28 19:01:02 2026 GMT
            Not After : Sep 29 19:01:02 2026 GMT
        Subject: CN=80ee7d9ee0f838bcc5f40139a0f9cfadd553ac88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:4b:16:f1:bb:d8:bb:98:71:3b:0e:39:df:
                    8b:ef:c4:67:98:23:44:41:c1:74:6c:9a:2a:4a:d2:
                    6c:91:cd:59:59:27:14:fa:1b:2f:a9:a3:ad:a7:d8:
                    fb:ef:9e:54:62:49:04:21:2e:0e:86:95:47:3b:e1:
                    a9:57:24:f9:16:03:d6:aa:86:64:6a:58:4e:86:f1:
                    50:41:f0:88:ac:fd:d6:67:c3:8f:99:64:0a:cd:1c:
                    6d:25:c0:7d:b2:cc:68:f3:01:45:99:0f:3c:8a:ad:
                    9e:0f:29:de:3d:35:74:41:2c:32:f8:ce:43:fc:16:
                    d7:72:cd:79:0b:5d:ef:e8:86:5c:4d:16:a9:c7:53:
                    63:4e:f7:dc:41:52:c9:f5:ac:91:16:96:eb:95:44:
                    dc:a4:48:29:dd:45:84:24:81:ec:67:42:04:35:ad:
                    05:fb:b0:21:b8:88:1a:ad:61:5f:80:61:24:24:a6:
                    a3:03:eb:8b:ea:d4:04:41:df:22:66:86:ef:89:24:
                    14:85:72:94:ff:a7:fd:e0:e3:93:f6:e1:6a:c1:a0:
                    90:d7:c2:38:ee:48:80:52:66:80:80:90:c1:c3:cc:
                    d8:e3:bc:ae:db:db:79:e9:bb:0c:1c:c9:9f:62:0c:
                    e2:8c:1e:a2:d0:b1:b8:2b:19:d7:80:be:5a:18:39:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EE:7D:9E:E0:F8:38:BC:C5:F4:01:39:A0:F9:CF:AD:D5:53:AC:88
            X509v3 Authority Key Identifier:
                keyid:2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7a:1b:95:79:7f:52:52:68:2a:aa:a2:30:5e:96:1a:d6:26:
         22:0c:22:fb:fd:75:de:97:32:35:cd:31:95:2f:86:9f:0c:fe:
         b5:6e:71:61:95:46:17:50:6a:8f:8a:6b:8a:ee:6e:eb:98:54:
         ae:c6:2d:94:55:d5:64:bb:fe:45:77:29:d9:7a:c1:b0:a2:22:
         0a:aa:07:e4:e6:de:ba:52:1c:cd:82:ea:d7:87:5c:76:e9:2b:
         8c:79:d6:6c:1b:10:80:33:05:08:0b:a9:7d:79:7a:7c:e3:6f:
         e2:5f:b1:db:d0:c2:e8:b0:63:05:76:c6:ad:4d:43:97:cb:75:
         d7:05:d8:0a:da:e1:1d:70:51:bd:8d:16:70:92:f6:d7:34:2b:
         9e:5c:33:74:28:13:b1:42:1b:a2:b7:16:9b:8d:07:43:b8:d9:
         5a:3a:16:82:97:60:cc:88:ac:31:13:36:8e:35:49:21:47:22:
         ad:91:a0:3a:32:d7:da:53:4b:89:98:3f:78:f5:26:62:9a:00:
         11:29:81:02:77:c2:fd:f7:ca:ec:6b:ce:2b:71:ff:7e:7c:0d:
         92:7e:da:7b:e7:69:f0:0a:57:7a:ae:ea:f6:51:f0:f3:58:f9:
         8e:08:b8:18:05:1c:16:33:4c:ce:e8:10:77:42:89:29:fc:fb:
         b7:8c:04:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpZFaezrsW1RijKpBEGBJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTdiNzk0NDU1OThiNDJlZWNiYmU4MjhkZDg5NGRmYWYx
ZGZjYWEwHhcNMjYwOTI4MTkwMTAyWhcNMjYwOTI5MTkwMTAyWjAzMTEwLwYDVQQD
Eyg4MGVlN2Q5ZWUwZjgzOGJjYzVmNDAxMzlhMGY5Y2ZhZGQ1NTNhYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJhLFvG72LuYcTsOOd+L78RnmCNE
QcF0bJoqStJskc1ZWScU+hsvqaOtp9j7755UYkkEIS4OhpVHO+GpVyT5FgPWqoZk
alhOhvFQQfCIrP3WZ8OPmWQKzRxtJcB9ssxo8wFFmQ88iq2eDynePTV0QSwy+M5D
/BbXcs15C13v6IZcTRapx1NjTvfcQVLJ9ayRFpbrlUTcpEgp3UWEJIHsZ0IENa0F
+7AhuIgarWFfgGEkJKajA+uL6tQEQd8iZobviSQUhXKU/6f94OOT9uFqwaCQ18I4
7kiAUmaAgJDBw8zY47yu29t56bsMHMmfYgzijB6i0LG4KxnXgL5aGDlXZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDufZ7g+Di8xfQBOaD5z63VU6yIMB8GA1UdIwQY
MBaAFC+nt5RFWYtC7su+go3YlN+vHfyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81Y2FlMjYtNDViNS00ZmQ4LTlkZTUt
NGI0NDA4M2Q2MTIyLzEvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81Y2FlMjYtNDViNS00ZmQ4LTlkZTUtNGI0NDA4M2Q2MTIy
LzEvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinoblXl/
UlJoKqqiMF6WGtYmIgwi+/113pcyNc0xlS+Gnwz+tW5xYZVGF1Bqj4priu5u65hU
rsYtlFXVZLv+RXcp2XrBsKIiCqoH5ObeulIczYLq14dcdukrjHnWbBsQgDMFCAup
fXl6fONv4l+x29DC6LBjBXbGrU1Dl8t11wXYCtrhHXBRvY0WcJL21zQrnlwzdCgT
sUIborcWm40HQ7jZWjoWgpdgzIisMRM2jjVJIUcirZGgOjLX2lNLiZg/ePUmYpoA
ESmBAnfC/ffK7GvOK3H/fnwNkn7ae+dp8ApXeq7q9lHw81j5jgi4GAUcFjNMzugQ
d0KJKfz7t4wEYQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:45:58 2026 by rpki-client