Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          bZSdDSp/K02QMsTZ5m4T91g1JcuWU+fjTP0mFqjFf7g=
Subject key identifier:   23:94:58:29:85:1B:12:8F:F5:63:74:64:FD:9F:D2:B1:8A:E3:80:4C
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       019D38D3C83C6E780A8CDEB23D94E9E6BDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          0818
Signing time:             Sun 29 Mar 2026 09:01:36 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:36 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:36 +0000
Files and hashes:         1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: ED5wnVjjPtQac/sgVZG7130bf+j/JflZyDocmFsKWqY=)
                          2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:c8:3c:6e:78:0a:8c:de:b2:3d:94:e9:e6:bd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: Mar 29 09:01:36 2026 GMT
            Not After : Mar 30 09:01:36 2026 GMT
        Subject: CN=23945829851b128ff5637464fd9fd2b18ae3804c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:ae:a0:09:f8:49:8e:44:e5:80:a3:13:f7:
                    ea:c8:8e:0d:c6:67:e6:21:f4:bf:6c:e4:c1:9c:75:
                    62:cc:8c:28:41:4c:de:ab:56:32:fa:75:54:34:f6:
                    35:8b:51:d0:2f:b7:ca:1a:31:85:e4:68:3d:aa:14:
                    92:ea:91:fe:ed:02:0f:23:1b:b5:f0:a6:17:83:e0:
                    af:25:5e:b8:71:4b:d4:0a:d4:9b:73:5a:20:49:46:
                    84:13:62:ab:4c:9b:e2:fc:7e:9f:b9:22:b0:86:80:
                    45:b0:16:08:59:a0:39:d1:d6:f3:06:57:45:53:6a:
                    84:89:f8:1a:2b:f8:cd:87:6d:bb:0d:47:51:80:06:
                    d7:a8:b7:62:ba:be:7c:6b:6e:8a:c9:3b:80:c0:4a:
                    07:25:57:7d:29:5b:42:3e:e8:be:7f:6e:e0:46:4d:
                    6e:b3:b7:11:c1:28:a0:13:3b:65:fa:19:57:db:a6:
                    c0:1e:00:23:2b:be:42:b1:97:60:2a:38:3c:f7:72:
                    30:b5:cc:c6:10:91:26:21:58:16:ab:d9:df:a1:43:
                    5b:b7:0d:da:6b:5c:f8:2d:94:53:41:d4:3c:20:e7:
                    ee:f3:e3:6f:0f:10:c1:fa:aa:1b:06:7e:c6:ab:6b:
                    8f:ca:4e:4f:a0:87:40:9b:7a:68:71:94:cc:b6:03:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:94:58:29:85:1B:12:8F:F5:63:74:64:FD:9F:D2:B1:8A:E3:80:4C
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9c:2f:6d:ac:5a:73:6a:60:a2:4b:0a:02:89:f7:31:d4:d4:
         4c:6d:65:61:5c:88:de:37:a3:fe:b6:ce:70:38:ca:1a:5d:ea:
         40:c7:db:6f:7d:ea:5c:e8:49:61:1b:61:75:78:d3:0c:cc:72:
         99:b1:b1:11:cf:5c:88:7e:69:53:fc:69:b5:07:82:13:24:e4:
         36:7e:87:7c:22:06:6e:29:bd:34:97:ad:9f:b3:b0:18:24:95:
         ea:d4:10:8d:51:9e:26:4f:b0:a3:bf:fc:04:39:8d:5f:d3:1c:
         bb:20:d7:f5:8d:19:a5:89:b6:4c:82:c3:d3:be:0e:7a:2d:c2:
         fb:cd:7b:f1:14:e8:10:d8:00:60:6c:3f:08:f3:5b:46:40:88:
         eb:7b:57:8e:45:6e:78:2b:30:96:55:f7:ca:4b:23:a3:91:ed:
         67:86:90:3e:f1:47:3b:61:de:c3:10:3a:31:25:41:c4:45:74:
         f9:06:d7:b3:34:7a:c0:c4:b8:fe:1d:30:43:f8:52:8c:8a:a7:
         e5:4d:e1:a5:98:cf:7e:5c:bb:a8:33:83:fd:4f:9a:19:f2:0a:
         5c:01:ad:6e:3d:4e:7a:5e:a5:38:c3:71:e6:ed:3f:39:80:16:
         c0:f8:ad:c4:ed:3f:eb:bc:4d:1a:e0:f2:40:85:13:8f:28:a2:
         d7:31:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:18 2026 by rpki-client