Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File:                     2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier:          tfn/iBggWmDD8z2eIE7r2dsCMmAwUMRZ0kyejSUL8eM=
Subject key identifier:   05:15:A4:2C:EB:FB:52:D6:A6:77:4E:F7:F4:49:38:3F:4B:49:06:5F
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer:       /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial:       01A0E7E41A6A5C4C2E7AC030F3A280BD1029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number:          1966
Signing time:             Mon 28 Sep 2026 12:01:20 +0000
Manifest this update:     Mon 28 Sep 2026 12:01:20 +0000
Manifest next update:     Tue 29 Sep 2026 12:01:20 +0000
Files and hashes:         1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: IluPBQSYgDE9bUUltv3IrizqMXpvJAfa9fo2Z5ktzOI=)
                          2: NkvybtyieeqcXDjHG9gHl_XAsMQ.roa (hash: 00Ye2JJrLJ1zMVpdd8DivfPeXqrw+enAIn41E191EYk=)
                          3: WYvB7z2E3X738_d9cgopMgPJk5I.roa (hash: u5beh3Tb2byL/rGs3HaRRLRbrFXqSXUDof4rFMurirU=)
                          4: gLFfimILtrvNmLCqHHnLyf5HeDQ.roa (hash: Au61gdy9n9KoeOHWn+nWGKr6a14kosDrZi3ajbtwzn8=)
                          5: zNk-M0VG943BmxksL9suzBVm4vQ.roa (hash: UUWX1bpaoMZzwXQx5EXEi0bI53+v8tYUcjIfVRmZCYY=)
                          6: znK95_JFl0pNvLfj6OXmewYJypk.roa (hash: KuT2Fb0+p87DW0EC5Dzu5qZfHaXjG7VpnPReGDVhA8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 12:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:e4:1a:6a:5c:4c:2e:7a:c0:30:f3:a2:80:bd:10:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
        Validity
            Not Before: Sep 28 12:01:20 2026 GMT
            Not After : Sep 29 12:01:20 2026 GMT
        Subject: CN=0515a42cebfb52d6a6774ef7f449383f4b49065f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:e3:c7:b1:29:78:8f:31:1b:dc:6a:40:44:
                    06:d9:e0:0f:a8:20:9e:54:cb:29:5f:58:9c:d4:4c:
                    8b:0c:c8:41:8e:be:6d:a5:2c:54:b6:50:86:c8:1f:
                    61:8b:46:91:45:24:91:c9:12:ce:74:72:32:d9:63:
                    1b:d9:a2:8f:a9:6d:1c:87:42:a6:e1:e2:0a:66:56:
                    4b:1a:07:5d:03:b2:e1:fd:f6:e0:6a:b9:7e:23:0b:
                    7d:18:3f:b0:02:b3:cd:be:56:a6:5a:8a:9c:91:9b:
                    b2:4c:24:bc:37:bb:72:87:25:2f:da:8d:3b:1c:30:
                    06:9e:ce:30:8b:41:a4:05:7e:d1:ea:b2:2c:2e:bc:
                    8b:25:eb:ed:2a:e5:1c:3b:a0:c7:63:ca:04:f7:05:
                    5d:d6:95:e7:80:dc:1a:72:93:98:c1:bc:87:f3:d7:
                    ed:f3:c7:25:45:7e:f7:92:d4:21:b4:0d:7e:94:ef:
                    dc:88:22:6b:f7:16:06:6a:7f:b1:e6:81:a1:b9:24:
                    87:16:91:66:5c:c3:ea:a8:1c:48:a4:fd:43:23:8f:
                    f3:35:3a:5b:05:0a:a8:07:f1:47:9d:f0:f0:c0:ce:
                    8f:0c:f1:38:7f:e7:2d:7c:ef:f7:4a:80:08:c0:86:
                    65:b1:e0:ea:5f:60:ce:46:f3:95:96:87:02:fc:d8:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:15:A4:2C:EB:FB:52:D6:A6:77:4E:F7:F4:49:38:3F:4B:49:06:5F
            X509v3 Authority Key Identifier:
                keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:cf:ae:16:48:05:42:77:50:18:fb:02:2b:85:59:a8:c6:80:
         e7:3e:02:86:19:c6:2b:f7:ab:7d:9a:7c:33:e8:79:ad:65:2e:
         26:85:77:d2:c4:c8:dc:b1:90:ff:51:5d:5f:a8:35:b7:01:53:
         6b:39:b7:ec:05:e6:e2:ef:ef:a0:13:2e:5b:c9:01:01:bf:9a:
         9b:e1:61:1b:03:18:e3:67:14:d0:30:e0:60:1a:c8:52:4c:7d:
         56:b9:e4:eb:24:53:c8:2b:3f:66:bc:0d:e7:49:5a:cd:80:f9:
         4f:8e:18:a0:2e:f6:9c:62:97:33:8e:ec:f7:48:fd:08:12:a1:
         87:66:ad:55:39:5b:45:aa:1d:76:08:28:59:ca:50:fe:80:f1:
         7d:3e:56:67:e9:fa:13:8a:9b:29:7c:ef:ee:f6:bc:34:cf:47:
         81:82:b9:73:b4:2f:89:51:2d:57:69:20:76:72:99:2f:4e:a4:
         38:19:ea:f2:e6:36:2e:2f:7e:ee:f7:a5:b8:6e:41:fe:a2:0b:
         5b:d3:c9:04:55:3b:22:6b:94:5d:56:2a:83:3a:99:a2:3d:14:
         41:7c:72:25:34:93:e5:12:dc:6b:0d:e2:bf:60:77:75:37:69:
         e6:ee:0e:31:f9:f5:fc:b9:0b:4c:6f:48:23:6e:b5:12:4f:53:
         81:86:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:43:10 2026 by rpki-client