Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File:                     k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier:          t8Ruv1Nb3zFBpC9O5Fq2IJEYofDykjq6BCoRumW9IBo=
Subject key identifier:   9F:67:FC:EC:85:CF:A8:11:B9:7D:4D:90:63:A9:4A:60:24:46:65:BD
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer:       /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial:       01A17BF27419A17CD772021DCBF8DB7A2CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number:          152A
Signing time:             Tue 27 Oct 2026 06:00:49 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:49 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:49 +0000
Files and hashes:         1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
                          2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: FD/arHOC+KzXIL1Grvx/Si30f9oKjOxIDcVvYr6ztp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f2:74:19:a1:7c:d7:72:02:1d:cb:f8:db:7a:2c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
        Validity
            Not Before: Oct 27 06:00:49 2026 GMT
            Not After : Oct 28 06:00:49 2026 GMT
        Subject: CN=9f67fcec85cfa811b97d4d9063a94a60244665bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:28:55:67:33:3f:68:7b:1d:27:bb:42:0f:
                    7e:c0:7a:6a:72:a5:c6:95:4c:db:50:7b:50:1b:de:
                    be:c9:0c:d2:8a:65:3d:fe:23:14:91:56:7c:57:06:
                    32:d6:be:e9:1b:59:48:c9:24:cf:f6:0b:5c:39:60:
                    eb:90:c4:33:98:19:01:c6:7e:a3:48:7f:ff:5b:9f:
                    3c:85:61:35:4c:1a:79:f7:dd:91:84:5b:39:7d:2a:
                    4f:ac:07:fe:af:b6:8d:58:22:7a:31:3e:99:5b:2e:
                    6d:48:0d:3c:11:f6:22:a6:75:41:b6:c8:bc:7a:ce:
                    7c:78:d7:0b:f4:1c:6f:b4:5b:da:de:0c:09:9a:d2:
                    8d:bd:f4:86:4e:04:3c:59:32:82:c6:55:66:77:55:
                    d7:96:b9:72:d2:67:8b:17:d5:93:2b:ee:d7:3a:04:
                    13:ab:75:08:d2:2e:ad:63:e5:41:b5:2f:7f:c1:71:
                    01:d9:c8:a0:67:2f:5d:b4:51:17:b6:7b:1b:b4:43:
                    33:36:18:b3:71:fa:62:78:37:73:5a:ea:2e:21:bc:
                    31:c9:3f:d3:b9:ff:f7:0c:c7:b5:95:e0:b8:f1:c1:
                    b7:44:46:a0:65:0b:16:d8:a6:19:b9:6c:ac:54:95:
                    43:57:43:f9:c4:ca:05:2c:2b:2f:2d:bd:77:cb:ec:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:67:FC:EC:85:CF:A8:11:B9:7D:4D:90:63:A9:4A:60:24:46:65:BD
            X509v3 Authority Key Identifier:
                keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4f:8d:43:ea:5f:f1:af:e1:34:e5:72:f9:a3:43:30:e4:52:
         3e:8f:fe:8d:ea:4f:62:68:3a:7a:05:86:93:09:7f:2b:90:b6:
         73:8e:46:8c:30:c3:a0:95:9e:20:6d:14:81:26:82:e2:2e:f2:
         36:64:a2:df:20:fd:4b:81:ce:c8:99:c3:5b:f6:4f:45:dc:f0:
         a9:f5:c7:f5:8f:cb:ea:23:e1:9a:fa:58:89:71:9a:07:92:69:
         92:be:bc:c7:7c:50:7b:51:b3:db:1c:bb:11:23:55:ee:ae:88:
         f9:91:da:5f:e2:ae:66:82:7f:1f:b4:90:4b:5c:f5:bc:12:20:
         9d:a6:4f:84:98:1e:e3:1f:f1:77:33:5f:87:15:a1:0b:e1:c2:
         a3:58:8e:1f:71:82:a5:1a:13:4f:3c:61:ac:8f:9f:fd:31:d7:
         2f:81:ab:94:97:77:c5:08:7b:3a:be:2c:15:6a:9f:7b:9c:ab:
         60:29:85:4d:92:8d:3e:72:38:c7:5c:6c:ab:19:89:53:ea:91:
         93:5f:8b:e0:14:25:bc:dc:39:27:22:b5:54:6a:cd:3c:c0:a5:
         67:61:5b:05:63:94:27:87:42:7e:93:9b:e3:92:89:8b:1d:e6:
         31:89:54:3c:93:7a:91:ff:21:85:85:02:63:eb:0d:cc:e1:32:
         4f:37:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:29:21 2026 by rpki-client