Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File:                     2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier:          6EihifCelDCv5k8ITDNJKXd74bFgeeW/8a6pFNKT/3Q=
Subject key identifier:   26:9B:4B:DC:F2:37:25:49:53:13:0C:41:AE:B1:F9:AB:CA:55:92:E6
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer:       /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial:       01A0C444FAC96487BDB1BC2D8E3372259B20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number:          1542
Signing time:             Mon 21 Sep 2026 14:00:49 +0000
Manifest this update:     Mon 21 Sep 2026 14:00:49 +0000
Manifest next update:     Tue 22 Sep 2026 14:00:49 +0000
Files and hashes:         1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: bOUkESQ0Vb1q4opLEkkhSFhoObCa6h96IO/tukiK8YA=)
                          2: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (hash: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:44:fa:c9:64:87:bd:b1:bc:2d:8e:33:72:25:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
        Validity
            Not Before: Sep 21 14:00:49 2026 GMT
            Not After : Sep 22 14:00:49 2026 GMT
        Subject: CN=269b4bdcf237254953130c41aeb1f9abca5592e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c4:df:31:40:d1:ab:aa:9e:4a:f2:06:66:a2:
                    f8:85:a4:3c:2e:15:84:ae:fd:48:38:67:2c:19:c5:
                    96:c5:5d:ad:bb:24:45:0b:12:95:82:85:53:2d:30:
                    7d:60:36:b9:d1:05:c7:ea:ba:a9:cb:c8:32:9c:dd:
                    f4:7b:f2:70:07:d2:22:8f:79:96:6c:13:23:92:e3:
                    8f:d8:a0:84:3a:68:43:93:d8:c3:5d:86:7d:ed:ac:
                    6f:62:98:50:ed:69:dd:b3:bc:e0:36:8e:2e:80:8e:
                    7a:32:aa:1e:9c:52:b4:8b:48:1b:23:c9:27:35:1e:
                    24:6c:04:74:f0:bd:78:11:a5:90:3b:7c:a2:64:66:
                    13:12:4a:d6:cc:5b:01:c2:bc:f0:c6:c6:98:06:42:
                    9d:1f:1e:b5:49:8b:cc:4b:a2:00:e2:a6:dc:6a:21:
                    6c:4c:f3:b3:49:f7:c9:94:e1:54:a7:24:47:b2:f8:
                    58:cb:fe:0f:52:da:dd:5c:6e:74:c8:e3:0b:47:39:
                    fd:1d:59:83:c4:3b:b8:92:94:d8:7d:a7:88:5f:af:
                    0e:7d:6a:9c:e5:bc:e6:ee:36:09:4e:16:de:61:bc:
                    f2:22:55:1a:5b:70:72:c9:8c:1e:68:9c:6a:f3:09:
                    7c:51:43:eb:cb:f5:79:30:db:c7:10:b6:00:d2:61:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:4B:DC:F2:37:25:49:53:13:0C:41:AE:B1:F9:AB:CA:55:92:E6
            X509v3 Authority Key Identifier:
                keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:ac:1e:a0:aa:c7:0d:00:72:fb:62:0d:4e:a2:a9:03:5a:
         18:b0:46:0d:d4:6a:1a:8a:2e:a2:fe:e1:ef:69:85:14:c8:64:
         59:d8:fa:c8:ee:93:c7:b2:c7:e3:cd:50:9e:6c:6f:a0:f2:31:
         d3:f5:02:90:e8:83:e6:02:eb:98:64:bb:e9:af:34:af:18:2a:
         c8:c1:53:2a:87:f1:5a:ed:bf:51:6c:2d:1c:6e:85:17:f3:c5:
         72:15:03:18:26:7e:0d:1e:99:55:29:a3:1d:bb:fd:22:db:d2:
         ae:9e:f1:a4:60:ee:cd:08:85:e1:ba:8f:64:10:f5:76:53:09:
         67:62:a7:92:0f:f8:43:8c:38:27:11:bc:6f:63:c0:ca:15:4f:
         51:d5:a6:4f:27:66:b1:c7:c1:1c:10:6b:75:f8:ff:09:e8:e9:
         3d:9d:ea:7d:67:ae:04:67:1e:3d:ca:be:a7:9b:6b:df:bd:df:
         da:d6:06:8b:bc:b5:98:76:ef:ee:81:b6:40:27:ec:3c:80:6b:
         45:32:4c:2d:83:5c:7a:af:d1:0c:f6:a5:65:68:61:6d:4b:64:
         5f:3b:66:a8:7c:cc:4d:15:b6:e5:c4:67:d1:10:1a:53:8a:5f:
         4f:d2:cb:eb:a5:5e:fe:0a:66:2d:64:0c:96:f7:5b:48:c9:a8:
         46:cf:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:28:50 2026 by rpki-client