Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File:                     2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier:          /nc+DpwF2LE3/I7S9b2Wce/jsz3cf0oFlqQGgxWgryg=
Subject key identifier:   1A:30:1B:DF:75:52:C4:24:1D:A3:90:60:13:AD:27:E9:DD:DF:89:66
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer:       /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial:       01A0C256459EBF2361988C1DD2795B5D34C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number:          09C3
Signing time:             Mon 21 Sep 2026 05:00:28 +0000
Manifest this update:     Mon 21 Sep 2026 05:00:28 +0000
Manifest next update:     Tue 22 Sep 2026 05:00:28 +0000
Files and hashes:         1: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: 2MFAYlyzIkZpphBaExtgKmMJJzDb7ePP+TtU4xkt3B4=)
                          2: 5_M5mOxDjDkgwkAca1tXv2jpthQ.roa (hash: xBboSwWLCofMIytfTnyu9mKMvX+dSAJG4UOMJtzKnkA=)
                          3: JvCqnDgnG_NMUFGCTVJgzecfD7c.roa (hash: AcWZWGCS7jwVQ2QXY4DUEvQhQzrEr9Bgn3uL02QHLvA=)
                          4: q2cwbHgodll5mTiws3YOiqyA-i8.roa (hash: p3hYIacztdEjHfwDJyx/+pczxs7JhRz6S+sXnyC782Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:56:45:9e:bf:23:61:98:8c:1d:d2:79:5b:5d:34:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
        Validity
            Not Before: Sep 21 05:00:28 2026 GMT
            Not After : Sep 22 05:00:28 2026 GMT
        Subject: CN=1a301bdf7552c4241da3906013ad27e9dddf8966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:dc:01:1b:fd:bd:2f:ea:b6:72:06:ed:cd:
                    38:e4:51:87:9a:f6:99:f1:2a:4e:5e:d2:94:c7:b4:
                    75:cd:6e:d4:ce:41:8d:6b:a2:4d:c6:91:89:40:66:
                    32:92:4b:34:1c:fc:2d:f0:c6:88:9d:e9:7f:b5:98:
                    ff:78:f2:77:39:1e:48:a2:ef:f0:66:96:4e:29:60:
                    40:92:85:db:0f:ee:33:7f:9d:85:35:04:4d:e3:7f:
                    23:c6:d4:4d:c6:79:96:88:94:00:f5:fa:79:ac:28:
                    92:9a:41:72:b8:c0:95:e3:51:95:a9:38:5a:fa:d3:
                    3f:4d:c1:0e:a7:4c:70:42:f8:54:77:bc:4d:2a:09:
                    c3:b5:59:f5:dc:e8:1b:20:c0:4f:a3:e5:5b:fe:c8:
                    ac:86:87:ac:b0:0c:96:6d:87:99:46:17:a5:85:5d:
                    a1:3e:67:a7:0a:ce:95:58:90:ce:5c:1d:e2:25:fb:
                    6d:9c:13:9a:04:ab:8c:7a:0f:14:e2:32:55:be:95:
                    8c:18:99:33:f9:a3:76:2f:b7:4c:b3:8b:14:f0:c7:
                    5c:49:32:45:1a:97:04:bf:f1:60:41:79:35:40:24:
                    79:b6:e3:5c:54:0e:4d:02:c3:3b:b8:79:53:04:b8:
                    9e:d9:02:4f:d4:27:79:f3:cc:94:9c:77:7e:de:40:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:30:1B:DF:75:52:C4:24:1D:A3:90:60:13:AD:27:E9:DD:DF:89:66
            X509v3 Authority Key Identifier:
                keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:05:d4:e6:00:2c:f0:9a:0c:8d:24:df:2e:3b:21:6f:40:35:
         c5:22:07:a4:b4:d5:a5:bc:96:7a:83:38:52:bd:b0:94:a2:da:
         9f:1f:31:dd:37:f9:39:e8:29:d8:76:9f:15:fb:19:86:fa:21:
         b7:0d:d0:79:c3:f5:a8:d9:dd:91:f0:a6:74:f4:f8:d6:ab:a9:
         30:b5:03:0b:85:11:d6:cd:92:11:be:d5:a9:79:1f:0f:74:75:
         be:40:81:e6:88:73:7c:76:cc:89:e3:ef:95:40:c5:00:99:26:
         d9:ad:48:a2:78:ac:e3:74:6d:43:2b:75:17:b4:90:e2:64:01:
         de:35:da:2b:92:8b:16:b8:22:60:90:18:2e:78:f1:5c:7e:fd:
         82:c5:52:c6:9f:7b:6c:7b:f7:69:bd:04:08:c4:39:d6:44:e4:
         8e:fb:4f:e2:20:3e:b8:0f:89:2f:37:90:0c:a1:3d:9a:0f:79:
         2b:b0:79:67:e5:de:a4:3e:a1:23:a5:01:d7:1b:cf:44:c4:6d:
         df:41:32:dc:b4:d2:81:59:78:a3:97:c7:d5:57:b8:1d:6f:c3:
         1e:c8:78:df:e5:cb:12:ea:64:09:a7:51:11:1c:41:50:ed:f4:
         97:c4:e8:89:93:41:05:5a:09:19:c5:f5:27:a4:13:af:b0:9b:
         4f:2c:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:42 2026 by rpki-client