Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
File:                     L-KdbJy8NTcKAaomhNP3cxr5TJw.mft (raw, json)
Hash identifier:          5F4LajNfOzJuSYLjL+vTBDqhQ+qbZQW47SveXYcRH40=
Subject key identifier:   F1:B1:6D:6B:30:24:5D:8F:79:1E:27:86:99:9B:EA:03:B3:CA:BB:5D
Authority key identifier: 2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
Certificate issuer:       /CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Certificate serial:       01A0035D4B3595135FFA3DE46898C33CB556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:00:40 +0000
Manifest this update:     Sat 15 Aug 2026 03:00:40 +0000
Manifest next update:     Sun 16 Aug 2026 03:00:40 +0000
Files and hashes:         1: L-KdbJy8NTcKAaomhNP3cxr5TJw.crl (hash: vREHcpeyrQhIJP9ZlAtcFS3LcZk/x3TNPsxfo88yQE8=)
                          2: ftKjys4SL9XyBKoRHiV1H8O6q-4.roa (hash: goOri5FlwgHp48z3jZwt3R81i0ZWwE5V3bBzvpwMo7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:4b:35:95:13:5f:fa:3d:e4:68:98:c3:3c:b5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
        Validity
            Not Before: Aug 15 03:00:40 2026 GMT
            Not After : Aug 16 03:00:40 2026 GMT
        Subject: CN=f1b16d6b30245d8f791e2786999bea03b3cabb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:de:38:5f:c9:8a:ce:7f:6f:03:c0:d3:74:
                    0e:30:db:4c:e0:d9:39:70:0f:19:54:7d:e7:4f:17:
                    73:bd:83:cc:b5:ec:f4:3e:67:82:10:75:61:ce:38:
                    6d:09:3a:42:55:71:61:f7:d9:09:50:fe:b0:fb:4a:
                    eb:34:96:b0:2b:49:4f:4b:67:76:72:be:fb:09:0a:
                    5b:42:13:ee:ed:29:d8:51:5a:01:fb:1e:38:b1:08:
                    5d:a4:ab:b1:5d:19:a0:28:95:2e:9c:3e:df:2d:95:
                    f6:27:bf:56:5f:31:a4:32:58:fb:cd:19:d5:89:c1:
                    fa:97:88:5b:5a:95:3c:f6:22:6b:9d:3e:ab:70:66:
                    ba:d9:97:de:e2:d9:28:d0:20:48:01:34:42:9d:88:
                    5e:81:42:88:ff:76:f2:ca:5e:1e:a8:ce:1f:f2:ad:
                    bf:c8:32:12:54:e2:8c:5f:bb:23:35:91:25:a0:48:
                    38:1e:39:28:28:ef:46:26:10:7c:0a:4e:22:21:ad:
                    59:5b:46:ac:33:82:74:99:cb:28:bd:54:3d:db:e4:
                    e2:5b:53:33:e4:1d:11:cb:dd:6a:9b:21:a3:68:f4:
                    7b:c5:6f:1a:64:1b:b2:12:ce:b5:17:84:59:6f:fe:
                    a7:14:10:ca:f3:35:7f:39:d1:72:05:49:33:0f:d1:
                    13:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:6D:6B:30:24:5D:8F:79:1E:27:86:99:9B:EA:03:B3:CA:BB:5D
            X509v3 Authority Key Identifier:
                keyid:2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:46:c5:61:2b:4b:17:32:3a:f9:13:aa:35:dd:65:64:a3:63:
         6d:b5:5d:16:bf:35:a7:17:9e:51:20:ea:59:e1:80:a5:f5:a3:
         d0:32:26:52:26:cb:b1:4b:f2:76:4f:4b:58:89:b3:e6:83:16:
         9f:63:76:b3:3f:c7:f8:3e:84:1d:5a:3b:19:aa:d5:fe:ed:39:
         aa:65:65:95:ad:bd:ef:f7:8b:f5:a8:69:74:88:a5:33:aa:31:
         eb:c1:bf:f7:d9:d2:91:c0:1d:c5:b6:2a:13:d2:53:b9:64:9b:
         db:bc:1f:e5:81:29:2e:ec:59:40:00:dc:80:53:5d:05:c8:24:
         14:5b:18:c0:90:d3:e9:f9:f0:fb:34:c1:d8:a2:da:d5:a5:e6:
         fa:df:b5:17:0b:b4:51:00:ed:a8:90:8f:fa:ec:f0:d3:d4:e2:
         ba:69:bc:74:fe:2b:06:e1:79:70:3b:36:36:5c:eb:8e:35:c9:
         69:74:cf:00:54:09:e4:09:3e:32:41:2f:55:75:e4:ae:0f:65:
         19:aa:e7:b3:ee:37:25:38:92:ed:16:6f:4b:d5:a5:ec:4a:f0:
         93:c8:d1:50:16:14:e6:be:0c:5b:f2:bc:06:f6:11:9f:7a:47:
         2c:1c:6c:01:0f:a3:2b:4f:2e:01:d6:a9:d3:62:e7:13:6e:2f:
         67:6b:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:53:37 2026 by rpki-client