Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File:                     2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier:          n7x5ni1Cb5+mwADqqiR9uasWL5qJUUHB5B/5jAB8CNM=
Subject key identifier:   0D:F4:0A:4E:C0:58:C8:14:97:77:B8:46:5F:21:E2:EF:4E:F9:73:B2
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer:       /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial:       01A0CB2276B5AD3710E3ADB2119465386234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number:          0E9B
Signing time:             Tue 22 Sep 2026 22:00:28 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:28 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:28 +0000
Files and hashes:         1: 1G4F8tXp79ck76MYvh4RlTMuH0c.roa (hash: mb1DMb5KSFZKad2RaZrc43nShfqVDrfZ7CG1uLPdIWU=)
                          2: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: XDqaJ1Z+vb2JqpaKCy3Zy6IKFiZmOLrP7T5cV2KgFSk=)
                          3: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (hash: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA=)
                          4: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (hash: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE=)
                          5: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (hash: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:76:b5:ad:37:10:e3:ad:b2:11:94:65:38:62:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
        Validity
            Not Before: Sep 22 22:00:28 2026 GMT
            Not After : Sep 23 22:00:28 2026 GMT
        Subject: CN=0df40a4ec058c8149777b8465f21e2ef4ef973b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:e2:e6:5f:fe:ac:56:8d:78:c2:7b:3e:76:
                    ce:b2:13:97:bf:93:ea:91:82:47:ff:df:d9:26:e0:
                    4b:0a:35:4c:28:c7:db:34:79:8d:8f:c9:a0:e7:cc:
                    82:c8:7a:98:48:5f:ed:cf:5b:7e:ba:eb:a9:17:00:
                    44:cc:95:e0:3b:4f:07:e5:16:26:12:db:b2:29:96:
                    49:18:d0:a3:2d:bb:a5:f4:81:d8:bb:dc:2d:0c:45:
                    82:bd:ae:68:89:ec:b2:96:d2:e0:01:07:7b:9a:2d:
                    01:93:18:56:21:ae:bc:54:93:d8:ec:44:e8:33:4a:
                    18:5b:19:e1:c4:01:c9:e2:c2:8b:7a:1c:51:e8:5d:
                    21:ec:a4:5e:03:25:8b:9c:70:5e:8c:db:7f:8a:82:
                    86:16:7f:ec:da:df:07:e4:44:ba:dd:0c:e6:36:35:
                    ae:70:a3:0b:7a:8c:58:a7:7a:27:c7:9e:d0:37:f2:
                    4d:39:c9:41:b7:a7:00:db:2f:99:6b:25:4b:9d:d4:
                    ef:e8:01:10:6b:d8:9f:df:42:c1:3c:b5:56:30:ee:
                    fa:90:aa:24:f9:2f:38:5c:e2:7f:50:87:74:00:4e:
                    c0:db:54:ec:ab:bf:e6:78:91:83:eb:99:1f:88:0c:
                    65:0e:2d:6b:19:d8:d6:e6:94:fc:7e:77:3d:e9:da:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F4:0A:4E:C0:58:C8:14:97:77:B8:46:5F:21:E2:EF:4E:F9:73:B2
            X509v3 Authority Key Identifier:
                keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:42:23:8b:e3:7f:25:08:3d:82:f7:fa:bd:00:93:a4:e0:c1:
         46:5d:26:c6:50:6a:5a:50:93:4c:a0:e7:00:8b:0d:66:10:1f:
         44:09:91:ea:1f:bf:90:0d:dd:06:2a:5d:c3:ba:8c:a1:fb:5b:
         ba:fd:14:d5:dd:77:3f:d6:cc:d9:3b:02:55:18:d6:19:8c:38:
         89:3a:e7:1e:29:f0:ac:6f:fa:7a:e7:11:d6:83:41:32:4d:1e:
         18:1d:77:11:59:c6:6e:24:4d:f7:5b:df:63:4a:fb:61:6d:54:
         1c:5d:7b:6f:89:96:ae:28:90:92:56:4e:48:81:83:3c:60:aa:
         f3:ec:fe:c5:61:8e:39:91:83:e6:e7:2e:67:ed:0b:a6:da:04:
         d9:0c:b6:97:e3:e6:b9:f1:eb:74:e0:7d:d1:8d:44:f0:44:76:
         5b:5a:00:96:d5:17:a9:a6:b5:ce:09:4c:59:03:e6:b0:f8:7e:
         39:f9:03:7c:c9:7b:87:0a:f0:99:e4:e3:52:02:61:bc:b5:38:
         b0:f7:5b:d7:fc:af:0a:cb:95:da:73:db:8b:90:cd:e4:3d:21:
         85:21:fd:c8:c5:6e:85:74:56:c8:d0:61:02:df:9d:23:4d:a2:
         b6:fd:5d:f3:1b:f7:fe:1a:23:fd:0f:81:b1:6e:6d:d5:6c:11:
         06:9b:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:04 2026 by rpki-client