Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          bR1OxWu9lSSKg8S6WTMUMKiPWfHl1lZZHLwQ8rhDUUs=
Subject key identifier:   98:39:E9:C7:9F:AD:58:CD:3D:85:3C:7D:B4:2C:09:E0:E9:18:91:60
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       01A0DBA9DAAF079A0BCBE97C9AA17ED03429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          09FA
Signing time:             Sat 26 Sep 2026 03:02:16 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:16 +0000
Manifest next update:     Sun 27 Sep 2026 03:02:16 +0000
Files and hashes:         1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: HqnwRspuSab0I8LN2ztlM1/Pu6jVD6KfvVU7lxKv0bQ=)
                          2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:da:af:07:9a:0b:cb:e9:7c:9a:a1:7e:d0:34:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: Sep 26 03:02:16 2026 GMT
            Not After : Sep 27 03:02:16 2026 GMT
        Subject: CN=9839e9c79fad58cd3d853c7db42c09e0e9189160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:1b:5c:1c:67:91:31:da:9c:0f:a5:3e:d7:
                    a5:83:f1:2d:48:16:b8:f7:bb:c2:7f:25:2a:a5:42:
                    d1:74:05:db:c2:13:9a:17:ca:2a:ad:30:4d:0a:63:
                    b5:01:f6:19:9a:52:55:f1:1e:03:6e:2e:c5:c4:5e:
                    c5:68:e5:b7:f9:22:d2:4b:4d:73:d1:04:61:d4:6d:
                    b4:7f:2b:88:b8:c0:1f:79:4c:63:9b:e1:c8:45:2c:
                    36:67:60:64:f8:10:0f:0f:11:44:1d:6c:c8:ca:e6:
                    97:d9:10:05:bc:ee:ba:07:8d:ca:e4:30:38:0a:57:
                    fa:06:34:83:14:a5:d7:c3:be:de:ae:35:25:bb:d2:
                    19:64:90:5d:7f:ed:58:d2:df:6f:d9:31:7b:6d:90:
                    72:ea:15:52:71:8e:4e:38:77:09:d5:20:8a:48:2c:
                    22:eb:e8:bf:b9:ad:22:e5:1c:15:d5:fd:07:f5:fb:
                    c4:69:92:f5:47:13:6c:a8:1a:b6:28:f4:77:d5:68:
                    8f:5d:6a:f7:34:f1:a8:e7:07:4b:90:ed:cd:88:d7:
                    a9:42:6f:39:ea:54:01:d5:5d:18:ab:5e:df:0c:5d:
                    50:c5:85:cd:d2:40:64:8a:01:ff:dc:c7:30:40:c7:
                    d7:bb:5a:5f:20:77:87:dc:da:4b:c5:ad:04:db:e5:
                    4c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:39:E9:C7:9F:AD:58:CD:3D:85:3C:7D:B4:2C:09:E0:E9:18:91:60
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:88:d9:f6:26:de:78:ea:2c:d2:56:a2:66:72:1d:8a:8b:bb:
         50:6e:72:ee:7d:52:4b:90:19:3b:58:c8:ff:8e:e3:c9:64:ac:
         3e:09:55:0b:51:bb:c0:ac:5e:ae:ba:b2:bd:cf:ec:17:08:87:
         93:3c:7e:cd:95:fe:58:2d:96:96:61:85:ce:96:b1:f6:e5:77:
         39:55:8f:44:10:5c:8e:e8:e8:fb:7f:23:ba:a6:a6:a8:76:c0:
         eb:82:49:12:ef:7b:4d:75:36:2d:45:fa:38:21:88:91:ef:17:
         f8:ae:e6:6c:2d:77:c0:0b:8c:9c:0e:50:5d:df:a2:45:d9:e2:
         c7:64:5b:eb:05:77:cc:a6:4d:df:ce:67:9e:57:c1:c0:51:e9:
         94:ba:36:ef:f2:71:54:e9:cf:a8:ce:3c:c8:3c:45:9c:02:42:
         20:d6:76:f8:d9:7c:52:7b:ae:09:f3:64:85:25:6a:ab:41:b2:
         68:0d:5a:e3:d2:79:88:cd:7b:95:93:bc:d6:11:f7:e6:cf:f4:
         ce:d6:8e:34:91:ab:25:46:aa:3f:82:ba:57:ac:bc:78:7f:d6:
         54:67:10:67:e9:52:f3:57:9b:05:f2:41:3a:5d:08:56:28:56:
         04:5a:a3:d1:53:5a:21:55:32:b4:ce:c4:4c:a1:6e:ec:1a:83:
         e2:4d:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:36:31 2026 by rpki-client