Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft
File:                     _IyX0Rd0KPYd6quRynz7tVJinsA.mft (raw, json)
Hash identifier:          OqVB9uxOzjNMyOf5+JNJO/TFEZB7Qrqks2wmHVSvBoc=
Subject key identifier:   C2:AA:DF:78:08:E4:2C:79:6E:9B:AA:CA:D0:71:D8:FA:D2:25:DB:9C
Authority key identifier: FC:8C:97:D1:17:74:28:F6:1D:EA:AB:91:CA:7C:FB:B5:52:62:9E:C0
Certificate issuer:       /CN=fc8c97d1177428f61deaab91ca7cfbb552629ec0
Certificate serial:       01A0BE426E98FD70FF74F15296D63239893A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft
Manifest number:          2E
Signing time:             Sun 20 Sep 2026 10:00:19 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:19 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:19 +0000
Files and hashes:         1: 8Ap_012FHB3YIQ_qI3dHzapyZdM.roa (hash: v2JMYMqdVX4PC3s4OaU/PX8RTBvcYIkJXe98BzsKXXg=)
                          2: _IyX0Rd0KPYd6quRynz7tVJinsA.crl (hash: wqUWvII5kR/beUyFKt1AhbWx0tojv/QxAImmd0eqKyI=)
                          3: dYZsMYvx6UOC74SZFX9pIGO-8rI.roa (hash: AFzOlgk6h/FkVe+IxqK2pr/izYjgng/FXpPK4Sd4d9Q=)
                          4: usdtxp56d-H9jkwksTZGQH0gfR4.roa (hash: 6i2VJQPUU7UbH7idZGq7+7s2CxmCIeaq/Aw5vstNan8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:6e:98:fd:70:ff:74:f1:52:96:d6:32:39:89:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc8c97d1177428f61deaab91ca7cfbb552629ec0
        Validity
            Not Before: Sep 20 10:00:19 2026 GMT
            Not After : Sep 21 10:00:19 2026 GMT
        Subject: CN=c2aadf7808e42c796e9baacad071d8fad225db9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:d5:6f:44:4e:59:c3:7f:63:4c:84:2f:40:
                    68:ce:c3:38:f9:f6:34:d2:6f:ba:b9:03:f4:fb:c9:
                    df:28:f0:fb:8b:3b:f1:fe:99:6c:58:48:5b:e9:17:
                    94:8b:81:45:73:b2:6b:d5:b2:cc:4d:f3:45:47:aa:
                    dc:71:72:23:23:1e:7a:92:e6:71:c6:9b:77:01:a2:
                    91:20:94:4c:1d:fe:64:3c:1a:de:55:3d:8f:84:d0:
                    5e:55:7f:75:6f:32:3a:27:73:99:da:37:6d:11:1b:
                    f4:45:47:5a:bb:92:3a:04:9a:f3:65:67:77:73:b6:
                    39:3d:56:1b:c0:1e:57:00:60:a1:30:78:c5:69:10:
                    0b:6f:41:2d:96:a0:97:11:cc:12:ce:8d:76:ec:45:
                    bc:0b:de:e5:4d:0e:37:08:69:9e:8a:dc:04:85:9e:
                    83:18:63:71:70:47:83:64:3b:05:cc:8a:37:f2:c0:
                    29:63:02:57:c8:f5:30:52:35:7f:8d:7a:05:9f:7b:
                    14:a3:70:3f:16:f9:4e:91:99:29:fa:c4:96:f8:80:
                    1e:04:c4:c5:b6:d1:65:e9:97:ea:74:18:59:63:05:
                    06:3f:0f:77:78:56:34:b8:cf:cc:8b:f7:c2:9c:b2:
                    3b:e0:ab:ed:72:c8:24:46:a5:94:6d:83:fd:81:12:
                    db:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AA:DF:78:08:E4:2C:79:6E:9B:AA:CA:D0:71:D8:FA:D2:25:DB:9C
            X509v3 Authority Key Identifier:
                keyid:FC:8C:97:D1:17:74:28:F6:1D:EA:AB:91:CA:7C:FB:B5:52:62:9E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:22:f2:7e:4e:5d:3d:43:2e:0d:07:9e:ce:93:60:1c:c8:53:
         f2:b2:49:10:c4:71:c5:b3:0b:e9:f5:70:f8:60:59:66:e5:95:
         1a:2b:40:45:42:10:12:a1:85:64:49:79:c8:40:5f:c1:7a:a9:
         4e:70:85:c9:b4:aa:a0:ec:87:ec:6b:25:ec:5a:a6:19:13:41:
         fd:55:bb:e8:c4:ba:fd:f0:09:d1:6a:08:8a:db:34:03:94:66:
         eb:54:68:d1:bf:7c:2d:4f:e2:3f:ea:20:3f:f0:3e:4e:17:ed:
         9b:b6:bc:59:4c:49:1a:46:15:82:6d:9c:1d:43:cf:e4:40:95:
         55:4a:1d:24:95:4d:a9:19:5e:a7:dc:d7:cf:68:72:6e:3c:32:
         fa:27:d7:46:d3:bf:dd:30:f8:1b:78:1a:d7:c1:42:0b:02:c4:
         d5:6a:1b:f4:e0:6d:d4:12:7f:6d:17:a3:26:4d:07:36:53:5d:
         f1:b0:ba:a1:9d:0d:77:a8:22:c3:54:73:76:4d:22:5b:9f:72:
         42:46:db:b4:1a:74:3f:43:6a:4e:05:13:23:d6:74:9e:24:ce:
         7b:f4:d5:9d:f5:c6:d4:61:bd:8e:49:1b:57:85:37:33:4d:50:
         c9:65:88:9f:2e:4d:87:e6:68:20:8f:5b:ce:2a:8e:0a:fc:b5:
         ff:a9:b3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:18 2026 by rpki-client