Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          a++zgNuZHQveqMng7MFk6r3SvNrqaW2clNX9SPus9j4=
Subject key identifier:   5C:C0:55:67:C1:61:6B:5E:17:C4:46:51:EA:85:B2:72:C9:CC:29:60
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       01A17FD0568F64701E36829C6CD2B315D9C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          0A4F
Signing time:             Wed 28 Oct 2026 00:02:02 +0000
Manifest this update:     Wed 28 Oct 2026 00:02:02 +0000
Manifest next update:     Thu 29 Oct 2026 00:02:02 +0000
Files and hashes:         1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: oHtlqo88VNwGvRSNNSRvR958ruE2+/9aWacBz2NK/44=)
                          2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:d0:56:8f:64:70:1e:36:82:9c:6c:d2:b3:15:d9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: Oct 28 00:02:02 2026 GMT
            Not After : Oct 29 00:02:02 2026 GMT
        Subject: CN=5cc05567c1616b5e17c44651ea85b272c9cc2960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:98:ac:d5:a7:44:04:5a:6c:6b:40:32:18:
                    77:cd:f6:bb:de:64:f3:80:8c:6c:c2:e5:d1:53:15:
                    c0:80:9d:60:02:5a:f7:c1:c2:b1:54:38:59:b5:2c:
                    c3:69:8e:14:2d:21:1c:e0:0b:cc:43:bb:3c:54:f4:
                    bc:7e:44:b0:1b:51:79:7c:e7:66:0f:6f:25:0a:6c:
                    53:f6:0f:9e:9a:f3:21:f1:9a:a1:d7:ba:aa:2e:af:
                    fb:06:d3:70:b3:a6:85:ad:64:34:06:c7:bd:53:a9:
                    3d:cb:91:91:cf:d5:51:20:1f:33:7a:2e:ad:2a:b9:
                    db:40:27:ef:06:76:88:b0:13:18:b7:c6:ac:b8:46:
                    a1:45:84:5d:b9:84:b1:4f:8d:51:32:2c:5a:1f:7f:
                    0d:f4:7f:08:9c:8a:40:1d:e4:f3:7d:84:6d:8d:4a:
                    fc:d9:f5:e5:1d:c4:1a:f6:4e:0d:84:0a:e3:9c:87:
                    b4:0c:ec:9d:fb:1a:d2:95:e2:d4:b1:e2:cb:2d:3f:
                    36:63:f1:2a:87:df:1a:5b:50:76:ff:07:8d:a5:61:
                    f1:57:68:47:6e:cc:3d:9d:48:4e:7c:a5:85:ea:36:
                    09:ac:d2:08:47:c9:32:2b:87:46:9f:08:0a:e3:84:
                    fc:8c:ed:2b:10:2f:e7:e1:38:e8:9a:36:fc:12:73:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C0:55:67:C1:61:6B:5E:17:C4:46:51:EA:85:B2:72:C9:CC:29:60
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:09:69:c8:b5:a2:fc:aa:ee:c7:eb:e6:5f:30:4a:b8:5f:04:
         f8:70:f4:c1:42:02:f1:52:1e:6f:72:3a:a6:50:78:c6:fa:41:
         8f:59:a2:21:dd:7d:72:0e:bb:bc:8d:f8:01:2c:ee:0a:d7:ea:
         41:e9:4c:30:01:d0:b0:d6:53:9e:8f:3a:ab:48:80:1c:bc:c1:
         88:97:50:8f:61:77:29:7c:a2:db:9f:30:16:28:44:e3:98:65:
         1b:f5:24:0c:d3:e7:da:06:b3:da:bd:2a:94:87:e7:a8:cf:0b:
         fb:7e:bd:34:1a:2a:63:0c:0c:63:7a:ed:1f:ce:29:eb:eb:6b:
         45:0f:4e:d0:d1:ab:10:99:df:2d:c7:0b:eb:ec:4a:67:42:97:
         18:1d:33:39:c6:5b:2c:2c:5d:9e:76:21:ed:71:8a:e4:7e:fa:
         9b:6d:f1:4b:cd:35:e7:ef:f9:e9:2f:1b:3c:82:3a:f6:bc:fb:
         26:cc:07:a8:c7:0b:b8:63:b6:a3:24:49:84:e2:01:8b:0c:eb:
         c1:9d:d4:02:d8:5a:d0:88:ca:94:69:4b:a3:8c:a0:ed:9e:b3:
         29:36:26:46:8b:af:ce:06:2e:95:87:a4:77:dd:8c:d7:bd:88:
         94:1e:8e:01:96:1b:89:db:a6:7d:6d:b6:ca:a8:3f:94:26:a2:
         8f:11:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:52 2026 by rpki-client