Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File:                     Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier:          mTv7je8njgLLHdOE0VDN/V7u/T40wB3HMC+/F4o7GBw=
Subject key identifier:   18:61:C5:D7:D7:6B:69:78:80:9E:52:67:A6:06:8D:F5:28:C0:3B:CB
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer:       /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial:       01A0E3632CF97B327C31894F3BF34110011B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number:          028D
Signing time:             Sun 27 Sep 2026 15:02:02 +0000
Manifest this update:     Sun 27 Sep 2026 15:02:02 +0000
Manifest next update:     Mon 28 Sep 2026 15:02:02 +0000
Files and hashes:         1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: Rn8ZWN/A6Kny3BV1hD47YEZq3AcswSC2IxIu6/0VMi4=)
                          2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:63:2c:f9:7b:32:7c:31:89:4f:3b:f3:41:10:01:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
        Validity
            Not Before: Sep 27 15:02:02 2026 GMT
            Not After : Sep 28 15:02:02 2026 GMT
        Subject: CN=1861c5d7d76b6978809e5267a6068df528c03bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:32:a5:9f:a3:8d:88:f1:30:af:40:06:93:
                    27:fd:8b:d2:74:c3:8a:90:70:d3:06:69:e0:d5:5c:
                    6b:20:5a:9b:db:10:d3:33:18:01:f1:09:86:5c:be:
                    6d:b6:29:b7:9d:fa:90:63:86:4f:ba:38:49:57:50:
                    1c:e4:98:42:56:05:d2:fd:07:60:1e:42:ac:98:d6:
                    fb:5f:db:5f:1c:aa:a3:46:70:3e:b7:f0:ea:72:a6:
                    ea:1c:60:bd:7d:71:df:55:d7:03:90:91:cd:86:2d:
                    7d:df:53:54:5c:73:fb:71:49:d8:25:8f:4d:b0:44:
                    02:56:d9:36:11:6c:dc:00:14:53:69:b0:98:e2:37:
                    eb:1f:8e:0c:cd:84:47:59:5b:6e:4f:c8:8a:54:5c:
                    f7:18:97:6e:ca:aa:07:ad:10:7f:34:75:e0:2f:87:
                    92:a0:79:53:8d:bd:17:ea:88:51:31:c4:5e:16:1e:
                    52:ac:b9:d9:56:45:ca:38:27:6e:43:94:59:4e:a3:
                    11:a0:5c:db:77:ab:81:2d:a4:5e:01:35:df:91:e4:
                    fa:32:ac:90:93:43:60:8a:62:c6:ef:11:6e:91:61:
                    0e:90:2a:4c:00:73:c5:95:70:bd:f0:be:1e:d1:5c:
                    6b:ac:31:99:b5:a0:7d:24:a7:db:f7:94:1a:c7:78:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:61:C5:D7:D7:6B:69:78:80:9E:52:67:A6:06:8D:F5:28:C0:3B:CB
            X509v3 Authority Key Identifier:
                keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:42:d2:35:ad:1e:b7:13:5a:de:bb:6a:2a:8a:ce:37:4e:
         1a:ac:04:a4:2e:2f:f9:d3:2d:ff:14:5a:27:9e:b6:22:78:98:
         ea:84:29:88:b2:8f:a4:28:ba:d5:45:4c:f5:a8:d3:3c:e9:c2:
         78:05:2c:5d:83:4b:6d:a3:ad:e0:06:ed:99:f2:a7:97:b3:0d:
         f9:0f:0b:c7:e9:61:5d:07:79:a3:4b:c6:a1:14:8a:5f:b6:61:
         6a:9c:5b:0e:66:6f:28:4a:16:b5:a8:48:9b:1b:ba:78:24:cf:
         bc:b4:0c:be:74:49:e7:9f:47:f7:b5:d5:3e:71:1f:6a:5d:69:
         65:0a:93:d7:a1:ea:40:63:18:42:be:24:e0:eb:3c:e6:15:07:
         2d:c9:a1:fb:82:d7:a2:41:4e:89:8c:f4:5a:5a:56:a0:a0:87:
         bd:ea:00:4a:e1:a4:b8:c3:fd:90:af:e4:af:14:7e:26:f2:e1:
         5c:d3:ec:09:92:14:46:a1:59:10:29:30:04:4e:78:b9:95:ca:
         63:ec:89:39:ef:e8:f2:4d:ec:cb:c2:87:16:1f:c2:f6:9f:61:
         68:55:fc:c5:68:70:01:dd:ef:50:ca:f9:e6:18:3c:3a:52:05:
         12:1f:42:83:04:53:62:9d:e4:a8:60:9b:40:80:80:83:cc:a4:
         68:68:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:16:26 2026 by rpki-client