Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
File:                     L6e3lEVZi0Luy76CjdiU368d_Ko.mft (raw, json)
Hash identifier:          2QVj64KU8gSKJYD3h+F32ZUy7RR8FMSPx7iUVZ9R/LQ=
Subject key identifier:   CD:6B:23:A3:F5:DF:25:BE:E6:EF:D2:E9:7B:9B:52:23:7C:A1:8F:92
Authority key identifier: 2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
Certificate issuer:       /CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Certificate serial:       019D28BB728880E2639AB2004845ABD71E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
Manifest number:          16
Signing time:             Thu 26 Mar 2026 06:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:06 +0000
Files and hashes:         1: L6e3lEVZi0Luy76CjdiU368d_Ko.crl (hash: cgCBhnBAX39XgZN0C7hTjQiBvqTXwI9Ahd89NGraOoo=)
                          2: y9EmBnlrUJ5TJDgeHtlan8Tczq4.roa (hash: 2erRWv6redCBPjuOhVB00JAgnjJTYsHMgDSbesnXn8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:72:88:80:e2:63:9a:b2:00:48:45:ab:d7:1e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
        Validity
            Not Before: Mar 26 06:01:06 2026 GMT
            Not After : Mar 27 06:01:06 2026 GMT
        Subject: CN=cd6b23a3f5df25bee6efd2e97b9b52237ca18f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:85:a6:4e:bf:f4:fa:c2:7e:92:70:6e:8b:5b:
                    1f:86:a1:da:cf:2b:c6:8d:ff:81:84:e5:29:74:75:
                    2f:cf:f0:0d:54:5d:b4:8d:9f:f8:35:24:5a:37:67:
                    a6:a1:9e:e8:71:a9:3b:6a:e2:32:76:99:ef:f3:e2:
                    6f:bd:04:c2:c2:31:6c:58:b1:51:fa:3b:6d:f5:39:
                    ee:40:fb:6a:48:61:8d:0b:20:ef:fa:6e:ae:c8:66:
                    34:ec:fa:0a:11:5b:ed:61:72:0e:f5:62:d4:45:e9:
                    9c:79:75:a9:bc:e4:72:13:c4:27:97:d6:5b:8e:f9:
                    ee:6f:b6:9e:30:4d:3e:49:64:d1:97:14:0c:38:f1:
                    71:c6:35:fd:64:b9:be:98:9a:4f:36:fe:e0:42:cf:
                    63:b4:47:61:eb:4c:ee:ce:8f:46:0e:b4:a4:39:11:
                    43:6b:dd:19:36:8a:61:f5:9c:5b:7d:11:c6:bc:60:
                    bd:6e:eb:ee:fa:37:0c:8c:81:18:cf:60:e4:18:cc:
                    76:f0:fb:78:41:c7:26:29:01:44:fe:13:90:3c:d8:
                    1e:a4:05:84:3f:08:8f:45:2f:28:01:82:28:18:7e:
                    05:b3:13:32:8b:a4:6c:f5:a0:27:da:0e:61:d1:0a:
                    a9:f0:6f:d1:5a:e0:94:6f:c5:5c:19:15:b3:da:b0:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6B:23:A3:F5:DF:25:BE:E6:EF:D2:E9:7B:9B:52:23:7C:A1:8F:92
            X509v3 Authority Key Identifier:
                keyid:2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c2:7a:5f:7b:9f:70:dc:20:f8:c3:94:bf:44:dd:1f:45:c2:
         b7:0f:84:f7:a2:6c:38:bd:37:31:13:db:5b:12:14:c9:7e:eb:
         f3:9a:7c:03:41:3f:e9:74:b2:48:6a:a2:71:0b:ec:97:55:2c:
         7c:88:a2:d8:5d:e1:96:38:f4:97:c9:c5:43:91:76:d7:b7:a8:
         32:27:cc:b9:5e:5c:85:79:da:e2:fe:60:75:00:69:f5:c2:54:
         b4:38:53:12:5e:9a:a1:cd:f0:ec:94:50:0b:99:e7:bb:7c:8c:
         d4:fc:22:aa:1d:f9:48:fa:4a:93:a4:b1:e8:86:62:9b:7b:cb:
         a4:a7:dc:16:f6:8a:e3:2b:da:60:67:7f:a6:2c:18:af:e3:2e:
         5d:fb:b0:97:0a:2f:d7:c9:b3:c9:e1:81:3e:24:cd:1c:17:5e:
         d7:b9:65:85:c9:ee:4f:0e:5c:39:f7:bf:a4:55:c2:62:c7:cb:
         b7:92:b2:0a:a1:74:c4:c9:ec:01:72:54:90:5a:10:47:8d:35:
         fa:87:b1:37:2a:d5:ab:64:a5:62:e7:86:90:f7:7a:53:ad:3b:
         5a:07:8b:9b:0a:47:12:e8:35:19:1e:81:ec:50:fc:71:41:b4:
         d0:90:da:f0:2e:e6:d9:14:b5:1d:54:ee:cf:0b:83:da:2f:73:
         f5:74:bd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:15:44 2026 by rpki-client