Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File:                     K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier:          lSXCquJzA9Ulc9CICQyrAg75e0+uUaGRCzaObkFX/R8=
Subject key identifier:   A8:CE:14:62:03:41:30:A4:8B:1D:90:FA:58:A9:BC:04:CF:AE:A8:04
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer:       /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial:       019D37F712A57A292D70A05490B18F755AC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number:          106E
Signing time:             Sun 29 Mar 2026 05:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:32 +0000
Files and hashes:         1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: dFUkDwGARZ2svauHP2mzwnbDy1HuotT+Zuyln5i4YFU=)
                          2: dbilkSZsjUibJ1NutZ76qJvy820.roa (hash: /oJpuqHaWi4ouiqRZTNCC/b0oRgbkGtlYtRLMPSUMXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:12:a5:7a:29:2d:70:a0:54:90:b1:8f:75:5a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
        Validity
            Not Before: Mar 29 05:00:32 2026 GMT
            Not After : Mar 30 05:00:32 2026 GMT
        Subject: CN=a8ce1462034130a48b1d90fa58a9bc04cfaea804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:f9:7a:56:c5:e9:15:70:0f:e8:22:80:54:
                    48:ee:8a:bb:78:4b:19:65:cc:6b:2d:1a:24:d7:28:
                    1d:eb:7b:1c:de:32:21:c4:8c:04:69:72:10:3d:00:
                    29:ca:52:67:6a:5c:78:e6:53:49:f3:2d:75:a4:0a:
                    db:11:6e:d3:f4:9f:f4:d4:14:f3:f3:da:ae:a6:e8:
                    5e:b6:8e:f6:f5:c9:13:bc:98:70:ce:7f:b6:49:04:
                    38:3e:95:6f:6f:d9:34:b3:9c:cb:cf:13:4d:2d:db:
                    bb:8c:ac:d0:8d:5f:44:50:16:21:f4:c4:93:10:a5:
                    fa:d9:63:02:cb:0a:39:23:1f:26:8e:5f:f4:39:57:
                    7b:11:58:a4:37:4c:30:59:26:9e:45:72:cc:8d:65:
                    35:77:b1:85:6e:b0:8d:06:70:f3:bf:f9:36:fb:f3:
                    46:0b:d8:58:f3:be:36:82:76:fb:b2:98:c2:dc:03:
                    16:b0:95:21:1e:77:d5:2e:32:62:ea:d9:cd:69:a9:
                    d8:08:04:b9:ef:ea:8e:4a:ed:f2:1f:bd:e9:19:42:
                    61:a1:b1:83:4f:f6:e6:c0:4d:51:6f:3a:1f:f1:10:
                    84:e3:c1:c6:80:88:ad:39:08:6d:af:ee:94:c9:cd:
                    c1:5c:1f:6f:4a:1c:8a:08:d8:71:81:f7:23:a8:1b:
                    72:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CE:14:62:03:41:30:A4:8B:1D:90:FA:58:A9:BC:04:CF:AE:A8:04
            X509v3 Authority Key Identifier:
                keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:17:af:47:97:61:77:b3:82:79:67:e9:a6:67:a8:d0:87:a0:
         a8:bd:52:be:38:d9:44:b5:8e:4f:52:8e:49:ed:26:da:88:b3:
         84:ca:d1:12:af:cd:f9:06:a5:bd:58:d4:69:aa:41:88:0e:3c:
         d5:57:3b:b6:72:94:0f:8d:c2:b4:c8:e8:8f:6a:ec:57:bd:2a:
         c5:05:5b:b2:95:68:bd:0c:da:28:0b:77:80:03:f6:a8:0a:44:
         06:b8:36:2b:b1:87:12:57:80:4f:d8:83:28:26:89:a3:e7:6a:
         8a:a9:cc:24:5d:6c:c7:dc:e8:4e:33:16:a7:9d:24:86:67:89:
         37:bd:eb:38:6d:1e:9a:ae:77:3f:1e:14:7c:63:0b:e2:01:8c:
         e9:9b:c5:dc:dc:b7:3b:9c:4a:60:00:bb:35:58:0f:16:26:78:
         30:aa:c7:75:42:a9:a9:62:80:bc:1a:51:46:74:6b:7c:aa:7d:
         ce:27:95:6b:c4:87:3a:f8:41:2a:8a:65:4f:b6:61:8e:1d:4b:
         5c:6f:3c:eb:4d:09:25:1e:57:1a:c6:f4:b2:78:d6:d5:5b:24:
         27:95:c6:17:98:8f:39:f3:b7:78:2b:0f:f2:80:bc:fa:38:aa:
         11:84:2b:2a:91:6f:0f:44:26:e2:a0:f9:c2:d5:4f:0d:92:ae:
         ba:2d:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:11 2026 by rpki-client