Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File:                     L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier:          LoEwkm0dUKmiTheLPFMJ3R0o+5EVTMFuabkYQ73hZjY=
Subject key identifier:   2B:09:FC:5C:BF:A3:FE:01:BF:D4:01:E1:EE:94:84:FA:5F:BC:12:F9
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer:       /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial:       019D27E07129D645F557EC71136EF6BF120D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number:          17EF
Signing time:             Thu 26 Mar 2026 02:01:53 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:53 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:53 +0000
Files and hashes:         1: 3Td8_KpnCVMIwy0JMauQgrbBuQQ.roa (hash: ABEQh5NopDc0Mx4tEJaetYGzLjPCdMdfeYzfxLmWlSg=)
                          2: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: dR2zh6esqb2aHqXiEnnRMK5Dawn6RDx2QbVyy181DK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:71:29:d6:45:f5:57:ec:71:13:6e:f6:bf:12:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
        Validity
            Not Before: Mar 26 02:01:53 2026 GMT
            Not After : Mar 27 02:01:53 2026 GMT
        Subject: CN=2b09fc5cbfa3fe01bfd401e1ee9484fa5fbc12f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:05:71:2c:db:a0:f2:e0:03:06:24:69:2a:
                    29:72:7e:cb:85:84:a2:e9:2a:6c:ec:6d:2e:14:4b:
                    20:8c:c7:30:d8:ed:ca:bb:39:c8:7c:6f:27:01:c9:
                    51:2b:aa:3e:23:14:94:96:02:b1:ce:ce:54:54:05:
                    89:f2:b0:1e:45:e6:2a:e1:c2:d2:77:f9:4e:44:21:
                    69:4c:fd:42:21:87:8d:5e:db:dd:3f:2c:06:e8:06:
                    0b:d9:b4:c3:15:77:4c:73:fd:3e:49:d6:7a:14:3e:
                    49:ef:ee:ae:9f:a7:fb:27:87:5d:53:fa:8d:be:ac:
                    47:67:58:2f:a4:fb:06:48:b3:1a:f8:42:53:51:e9:
                    0e:96:b2:dc:ef:ec:1b:c5:16:db:c2:b9:a2:79:24:
                    8e:d4:d4:03:f9:cd:c9:82:7d:39:c0:13:ad:2f:ab:
                    5d:47:b6:95:44:65:38:ec:ad:5e:b6:ff:92:f9:99:
                    a2:f7:89:26:e9:9c:c2:39:df:0c:ab:88:78:4f:fb:
                    66:f3:75:0d:82:90:2e:aa:13:2e:77:bc:7d:b7:30:
                    da:64:a7:63:74:cf:0b:34:c5:42:86:a9:24:bb:2f:
                    0a:50:1d:3e:08:52:a7:68:d6:2b:00:ff:c7:cb:27:
                    7c:fb:e1:bd:e3:41:ae:57:97:2d:ea:05:90:9d:ce:
                    8c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:09:FC:5C:BF:A3:FE:01:BF:D4:01:E1:EE:94:84:FA:5F:BC:12:F9
            X509v3 Authority Key Identifier:
                keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8c:7f:83:f4:2e:c2:6e:93:0f:29:5d:1e:77:c1:65:2a:90:
         e6:e5:be:f6:86:23:f1:08:b6:47:d4:36:df:85:42:97:3b:df:
         dc:c8:92:cc:9a:1e:b2:59:87:a6:67:f9:5d:c0:4c:19:15:80:
         9c:a2:f8:f6:8a:79:51:96:dd:88:df:fc:82:53:b5:e0:bd:f2:
         1f:71:93:25:e6:67:da:60:d8:03:e5:79:8d:50:fb:50:e5:bf:
         f9:be:68:6b:16:d5:da:31:e7:df:30:78:d6:35:bc:f6:1a:be:
         55:33:7c:6f:8b:81:bd:67:2b:a3:d7:36:66:54:60:0c:c4:14:
         34:a1:80:28:c6:e2:fe:a4:71:49:f1:10:03:3c:88:80:cc:01:
         36:ab:bc:6f:81:3f:ad:bc:cd:14:b9:b1:42:eb:49:1e:e5:7e:
         c4:b2:c4:cb:51:ae:6b:61:18:ad:7a:b0:0f:2d:82:14:92:0d:
         d1:db:7b:e7:4d:81:d0:d2:98:eb:ff:e5:2b:b7:9a:0b:54:7a:
         62:7d:13:df:d2:ce:0e:ff:57:1a:2e:57:f6:d8:e4:f4:12:04:
         67:27:99:18:53:c4:10:04:d5:17:20:c2:49:2b:dd:49:a4:71:
         cd:e3:91:d6:3d:e5:fe:7c:83:6b:fe:60:57:a3:20:97:10:7f:
         1f:4c:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:27:57 2026 by rpki-client