Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File:                     L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier:          oC8rNFF+GY24d0KmPuDfIFnvuI9gV3mODjeX1OC2fc0=
Subject key identifier:   C6:88:60:4C:BD:A1:CE:19:DD:00:04:11:9A:A5:D1:32:8C:86:6C:01
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       01A17FD01A4DD22114254493EE66AC3C8F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number:          1B05
Signing time:             Wed 28 Oct 2026 00:01:46 +0000
Manifest this update:     Wed 28 Oct 2026 00:01:46 +0000
Manifest next update:     Thu 29 Oct 2026 00:01:46 +0000
Files and hashes:         1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
                          2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: debLwW0m5qsIZv4gBueI6pJm3v+FPTNbuTpQ/MBHrRw=)
                          3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
                          4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
                          5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:d0:1a:4d:d2:21:14:25:44:93:ee:66:ac:3c:8f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: Oct 28 00:01:46 2026 GMT
            Not After : Oct 29 00:01:46 2026 GMT
        Subject: CN=c688604cbda1ce19dd0004119aa5d1328c866c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:a9:db:49:05:49:ce:0d:1b:3d:e3:09:f6:
                    ef:4a:ca:73:ba:48:8a:67:4f:5a:c7:1c:bb:e3:13:
                    aa:33:53:d9:e0:ae:de:ce:27:32:a5:25:ec:cc:68:
                    77:84:c6:aa:c5:ed:1e:d3:54:1d:cb:17:03:4c:ee:
                    c9:6d:7f:8f:2d:25:7b:de:a6:02:42:6c:7e:62:5f:
                    26:d3:09:63:92:77:3e:25:4e:ee:0b:fc:d0:54:30:
                    04:e0:f0:46:a8:43:a9:e1:13:05:fb:e0:f8:66:0c:
                    07:ea:b1:7e:49:6e:56:1a:ca:01:b6:9d:04:c4:7e:
                    f1:30:4c:18:30:3f:2d:ee:eb:13:3d:af:fd:97:2b:
                    f5:a5:8b:8d:d3:c9:77:0d:14:95:9c:f5:84:b4:9e:
                    1c:a5:02:00:c1:5a:eb:f6:3f:7e:45:5a:09:d1:02:
                    b8:3c:f2:6e:52:50:80:48:ca:d4:3d:d0:54:5a:42:
                    9d:77:db:e5:6b:07:dd:2f:56:ff:96:40:d4:f7:7a:
                    27:cc:c7:ae:6d:cf:29:f9:cd:6b:c5:94:1c:39:48:
                    2a:47:05:c6:42:61:69:10:65:c5:b9:fb:b9:66:3c:
                    4e:6c:a0:eb:3c:ff:cd:a8:33:66:b1:8f:88:25:23:
                    ff:9f:55:11:07:c1:8c:23:6a:24:3d:35:4d:b0:cd:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:88:60:4C:BD:A1:CE:19:DD:00:04:11:9A:A5:D1:32:8C:86:6C:01
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:ef:0a:77:8a:45:75:24:c6:47:74:4b:fc:a5:30:cc:76:
         eb:d6:04:dc:fb:ee:4f:78:f2:35:d0:18:87:f4:cf:7d:75:be:
         aa:77:91:47:2c:bf:6e:fd:a3:38:12:da:0e:fd:bc:76:9d:cb:
         04:d1:13:75:91:8c:ed:b9:9b:43:81:6a:f9:6d:3c:bf:53:40:
         e4:46:05:d8:b8:5b:cf:24:77:54:9a:a1:07:e2:dd:ab:42:d2:
         1b:35:70:de:98:7c:e0:92:b0:c3:2c:b1:9f:dd:66:18:61:f3:
         37:58:a3:d8:4b:99:e0:7e:34:68:7d:cb:f1:62:60:a5:75:79:
         2c:a3:21:f5:a3:62:99:37:92:37:1d:ec:71:ad:0c:53:a0:ab:
         ff:67:bf:88:1a:a7:24:23:f4:84:f4:73:df:bc:2b:b7:f9:73:
         68:7b:19:aa:fb:f9:35:9e:5a:e8:93:39:e9:03:0c:12:49:f3:
         60:ff:c5:0d:0e:36:b9:6c:61:cd:c1:6a:b1:b6:2d:4a:c3:c6:
         a7:36:47:b7:91:51:61:cf:b2:fd:d2:d7:98:20:ca:d4:1b:ac:
         d4:7d:a8:44:98:18:ad:10:97:64:07:19:e5:36:65:0f:2f:89:
         88:42:bd:90:39:b4:7b:1a:1a:17:9b:c6:c9:fa:6d:eb:cd:db:
         eb:5a:89:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:04 2026 by rpki-client