Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
File:                     L6e3lEVZi0Luy76CjdiU368d_Ko.mft (raw, json)
Hash identifier:          wbkT/RsBkUGlOON3ra19S2v+5Fuy6wZT833Z5W4KRvU=
Subject key identifier:   DA:CB:8D:21:E6:4C:3C:08:AF:54:B0:F0:EB:47:F5:9F:0E:9F:51:35
Authority key identifier: 2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
Certificate issuer:       /CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Certificate serial:       01A0EF2FD3A8FD206692BBF662981204DF29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
Manifest number:          020C
Signing time:             Tue 29 Sep 2026 22:01:24 +0000
Manifest this update:     Tue 29 Sep 2026 22:01:24 +0000
Manifest next update:     Wed 30 Sep 2026 22:01:24 +0000
Files and hashes:         1: L6e3lEVZi0Luy76CjdiU368d_Ko.crl (hash: 9x9uTMUKL3wadRGg1AK0rWzRsBDmaNdBRZFLtZDwg8Q=)
                          2: PfsRjm_sXc9yq02VYcPYmw928hA.roa (hash: odW6R3Z/rx456fN6DjaMaw5N9kyEi5y2b8WBZeHEYcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:2f:d3:a8:fd:20:66:92:bb:f6:62:98:12:04:df:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
        Validity
            Not Before: Sep 29 22:01:24 2026 GMT
            Not After : Sep 30 22:01:24 2026 GMT
        Subject: CN=dacb8d21e64c3c08af54b0f0eb47f59f0e9f5135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cb:92:dc:da:89:6e:3f:34:cb:b8:e1:2a:60:
                    2d:3f:da:17:f5:ed:f6:87:d5:0e:d9:85:3a:04:c6:
                    aa:03:03:02:e4:69:af:f4:e0:43:be:fd:72:22:55:
                    03:1e:1d:fe:aa:e1:1e:cf:64:2f:88:bc:c6:3b:0c:
                    7e:07:79:28:a0:6e:4f:a1:8e:1a:12:6a:74:9c:29:
                    66:c4:b6:64:04:cd:3b:99:de:88:ac:62:0e:07:cb:
                    45:62:3f:b0:c2:46:6a:0c:ef:d7:ef:09:31:f0:23:
                    19:44:b5:f7:e8:46:1f:81:8e:d4:52:49:54:14:f5:
                    90:7c:81:d2:a0:2f:99:28:ab:4a:ab:40:10:1c:24:
                    5d:10:99:f6:84:94:fb:7a:8c:58:e8:56:4d:c6:11:
                    48:8e:af:bc:28:d8:e8:39:ba:b7:6b:02:03:fc:b7:
                    ca:78:a8:8e:66:11:89:29:df:07:4b:e2:ca:c0:aa:
                    c7:83:78:5b:c7:a3:52:eb:72:bc:28:fa:fe:fb:ae:
                    35:ad:86:bd:f3:6f:4b:a7:b8:78:ee:fd:df:35:be:
                    96:b1:64:bd:1a:e2:9f:03:0d:b5:8e:97:4c:79:b6:
                    63:7f:65:97:8f:71:88:7b:40:e5:66:95:1e:d0:d5:
                    83:cf:a0:79:00:78:69:fd:84:31:b0:f4:50:a7:fe:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CB:8D:21:E6:4C:3C:08:AF:54:B0:F0:EB:47:F5:9F:0E:9F:51:35
            X509v3 Authority Key Identifier:
                keyid:2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:89:e2:f3:99:10:61:51:0d:56:da:50:7d:bc:cc:c4:91:
         6c:54:ed:e3:fd:47:a9:ff:93:b8:8a:d8:e1:81:80:e5:36:e9:
         89:5e:7c:00:fc:d8:e6:19:6a:f0:b0:05:cb:78:e2:b9:29:12:
         e4:51:a9:ec:28:08:0e:9b:4b:41:86:03:76:28:75:8d:88:45:
         ae:25:96:dd:95:c8:46:6d:85:9d:bb:ec:34:cb:f0:63:bb:d3:
         77:0e:d4:0d:65:05:23:ff:54:d6:61:ca:da:33:60:3e:a7:3b:
         ac:77:47:5a:3f:e9:6e:fc:1f:e0:61:59:dc:0f:69:d0:e6:e7:
         c0:b6:26:b0:cb:39:c0:1d:72:4b:b6:ad:72:70:54:61:64:23:
         86:6c:4e:4d:a4:12:d6:38:2c:4e:e1:0f:23:7d:0d:d7:4f:d5:
         b5:50:2c:a9:4e:32:f4:53:4e:21:e3:79:16:41:5a:df:09:cc:
         c2:dc:ce:e5:dd:01:dd:14:90:31:2d:68:ec:c3:43:68:72:cd:
         84:e1:63:67:18:7e:d1:88:7f:ce:94:a9:70:62:c9:72:06:bd:
         b7:aa:ba:d5:5b:c3:a0:83:32:19:79:98:54:00:c9:70:4a:0f:
         ce:c3:8d:3b:01:b2:29:d3:59:09:bf:3e:77:6b:7b:5e:88:ad:
         59:23:58:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDvL9Oo/SBmkrv2YpgSBN8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTdiNzk0NDU1OThiNDJlZWNiYmU4MjhkZDg5NGRmYWYx
ZGZjYWEwHhcNMjYwOTI5MjIwMTI0WhcNMjYwOTMwMjIwMTI0WjAzMTEwLwYDVQQD
EyhkYWNiOGQyMWU2NGMzYzA4YWY1NGIwZjBlYjQ3ZjU5ZjBlOWY1MTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cuS3NqJbj80y7jhKmAtP9oX9e32
h9UO2YU6BMaqAwMC5Gmv9OBDvv1yIlUDHh3+quEez2QviLzGOwx+B3kooG5PoY4a
Emp0nClmxLZkBM07md6IrGIOB8tFYj+wwkZqDO/X7wkx8CMZRLX36EYfgY7UUklU
FPWQfIHSoC+ZKKtKq0AQHCRdEJn2hJT7eoxY6FZNxhFIjq+8KNjoObq3awID/LfK
eKiOZhGJKd8HS+LKwKrHg3hbx6NS63K8KPr++641rYa9829Lp7h47v3fNb6WsWS9
GuKfAw21jpdMebZjf2WXj3GIe0DlZpUe0NWDz6B5AHhp/YQxsPRQp/59fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrLjSHmTDwIr1Sw8OtH9Z8On1E1MB8GA1UdIwQY
MBaAFC+nt5RFWYtC7su+go3YlN+vHfyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81Y2FlMjYtNDViNS00ZmQ4LTlkZTUt
NGI0NDA4M2Q2MTIyLzEvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81Y2FlMjYtNDViNS00ZmQ4LTlkZTUtNGI0NDA4M2Q2MTIy
LzEvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrSJ4vOZ
EGFRDVbaUH28zMSRbFTt4/1Hqf+TuIrY4YGA5TbpiV58APzY5hlq8LAFy3jiuSkS
5FGp7CgIDptLQYYDdih1jYhFriWW3ZXIRm2FnbvsNMvwY7vTdw7UDWUFI/9U1mHK
2jNgPqc7rHdHWj/pbvwf4GFZ3A9p0ObnwLYmsMs5wB1yS7atcnBUYWQjhmxOTaQS
1jgsTuEPI30N10/VtVAsqU4y9FNOIeN5FkFa3wnMwtzO5d0B3RSQMS1o7MNDaHLN
hOFjZxh+0Yh/zpSpcGLJcga9t6q61VvDoIMyGXmYVADJcEoPzsONOwGyKdNZCb8+
d2t7XoitWSNYXQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 10:37:23 2026 by rpki-client