Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File:                     Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier:          1CQ6UqulPH6GswNx2f9uCrpAfOLSKfAetkknw2k4Q9Q=
Subject key identifier:   BC:77:27:78:C6:F2:C2:FA:6A:21:7D:5E:7B:2C:1E:5B:68:2F:1D:84
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer:       /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial:       01A0E174CEAF26B0619D9108D5C04F573574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number:          028C
Signing time:             Sun 27 Sep 2026 06:02:03 +0000
Manifest this update:     Sun 27 Sep 2026 06:02:03 +0000
Manifest next update:     Mon 28 Sep 2026 06:02:03 +0000
Files and hashes:         1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: c8y1wxZNRD6yMdWEZ+4avbXmJU4/w/aHiMcn9Lu3OW8=)
                          2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:74:ce:af:26:b0:61:9d:91:08:d5:c0:4f:57:35:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
        Validity
            Not Before: Sep 27 06:02:03 2026 GMT
            Not After : Sep 28 06:02:03 2026 GMT
        Subject: CN=bc772778c6f2c2fa6a217d5e7b2c1e5b682f1d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:4f:42:c8:2a:61:bf:ec:b1:7b:04:1e:a8:
                    44:a4:db:bc:27:8a:56:69:11:52:8a:f0:bb:be:1f:
                    db:0e:53:61:55:6d:03:77:a7:1d:d3:a9:b1:5f:12:
                    39:dc:30:a0:64:1b:52:08:38:05:c1:a5:4f:2f:1a:
                    ea:e9:e8:1e:be:d9:a8:e2:7e:0b:59:2f:1a:37:21:
                    75:e8:9c:f2:4c:7f:11:28:8a:51:ac:90:5c:a8:5f:
                    3d:cb:cc:1d:d3:af:d7:e8:87:4b:06:11:f0:b1:14:
                    9d:34:ce:30:6d:ae:eb:58:7e:85:ad:88:2e:29:ef:
                    c4:da:57:43:1f:55:7d:39:9d:f4:24:f3:08:bf:bc:
                    c1:4b:cf:fb:35:c7:a1:e6:73:f4:8f:b3:08:2d:e3:
                    4b:23:9f:d4:fc:9d:2d:68:cc:81:4c:03:9c:6c:8b:
                    b1:29:ee:a8:48:ed:f5:14:1f:2f:fb:70:4e:af:d6:
                    8d:26:16:44:4f:62:06:04:34:98:98:a2:51:7f:a4:
                    cc:87:06:74:db:f3:8e:2f:4f:53:79:fe:ce:03:53:
                    5d:d2:1a:a3:41:ea:34:b7:74:bf:08:47:6f:87:14:
                    c4:7b:2c:82:42:d6:e5:54:79:25:59:af:20:21:a7:
                    8d:d4:97:b5:ed:6d:46:6e:79:1f:4a:dd:3b:ee:9a:
                    53:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:77:27:78:C6:F2:C2:FA:6A:21:7D:5E:7B:2C:1E:5B:68:2F:1D:84
            X509v3 Authority Key Identifier:
                keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:16:f4:af:d6:85:f4:3b:cc:b4:af:85:f7:4f:23:65:33:43:
         a3:63:0e:15:16:79:ea:a1:07:45:f4:4b:8f:c3:d9:6e:e2:09:
         6c:33:b3:74:a5:55:4a:66:af:44:d7:47:0b:39:12:4e:64:44:
         d2:c7:b5:16:00:3f:a1:26:b8:15:f3:40:a6:6b:69:87:bb:77:
         f4:77:46:d3:bb:2a:60:ee:33:44:97:fd:82:2f:dd:06:95:d2:
         c0:37:4b:09:11:50:40:43:1a:a7:90:3d:b1:48:7a:9a:57:04:
         ae:d0:ac:58:91:be:73:4d:55:84:cc:8f:20:a4:00:bb:52:ec:
         e2:28:1d:77:64:15:c9:fb:4e:94:75:ae:50:07:2e:12:e4:03:
         25:59:3c:c8:95:21:3b:31:7d:27:63:4b:1e:be:27:ac:2a:10:
         ac:82:7e:01:d5:3a:1b:b5:c5:fa:4f:d9:c0:f2:30:9d:72:40:
         a8:48:f4:72:88:9b:6b:ed:e3:ff:72:02:42:83:d7:07:29:2c:
         08:3d:22:ff:d2:b2:40:ba:1a:c7:9a:44:7b:ca:80:80:67:4b:
         93:51:5b:b5:da:30:36:f3:67:9c:ab:fb:53:4d:13:c9:53:35:
         5b:97:f6:81:d8:ab:fe:ae:dd:07:e1:02:c6:56:2c:ce:97:61:
         4b:75:66:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdM6vJrBhnZEI1cBPVzV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjc3NjljMWEwMWUxMjUwZjFmMjhhNjA1YjVjOWQ5YjZk
MzQxOWEwHhcNMjYwOTI3MDYwMjAzWhcNMjYwOTI4MDYwMjAzWjAzMTEwLwYDVQQD
EyhiYzc3Mjc3OGM2ZjJjMmZhNmEyMTdkNWU3YjJjMWU1YjY4MmYxZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4JPQsgqYb/ssXsEHqhEpNu8J4pW
aRFSivC7vh/bDlNhVW0Dd6cd06mxXxI53DCgZBtSCDgFwaVPLxrq6egevtmo4n4L
WS8aNyF16JzyTH8RKIpRrJBcqF89y8wd06/X6IdLBhHwsRSdNM4wba7rWH6FrYgu
Ke/E2ldDH1V9OZ30JPMIv7zBS8/7Nceh5nP0j7MILeNLI5/U/J0taMyBTAOcbIux
Ke6oSO31FB8v+3BOr9aNJhZET2IGBDSYmKJRf6TMhwZ02/OOL09Tef7OA1Nd0hqj
Qeo0t3S/CEdvhxTEeyyCQtblVHklWa8gIaeN1Je17W1GbnkfSt077ppT0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLx3J3jG8sL6aiF9XnssHltoLx2EMB8GA1UdIwQY
MBaAFAMndpwaAeElDx8opgW1ydm200GaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kOTRlMjktYWQ5NC00YjBlLWFmYTIt
NjUzM2I3MmM2YTZiLzEvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kOTRlMjktYWQ5NC00YjBlLWFmYTItNjUzM2I3MmM2YTZi
LzEvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxb0r9aF
9DvMtK+F908jZTNDo2MOFRZ56qEHRfRLj8PZbuIJbDOzdKVVSmavRNdHCzkSTmRE
0se1FgA/oSa4FfNApmtph7t39HdG07sqYO4zRJf9gi/dBpXSwDdLCRFQQEMap5A9
sUh6mlcErtCsWJG+c01VhMyPIKQAu1Ls4igdd2QVyftOlHWuUAcuEuQDJVk8yJUh
OzF9J2NLHr4nrCoQrIJ+AdU6G7XF+k/ZwPIwnXJAqEj0coiba+3j/3ICQoPXByks
CD0i/9KyQLoax5pEe8qAgGdLk1FbtdowNvNnnKv7U00TyVM1W5f2gdir/q7dB+EC
xlYszpdhS3VmiQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:40:25 2026 by rpki-client