Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
File:                     2RTaVuGpNGSdoClkrBLro0xcuE8.mft (raw, json)
Hash identifier:          6orLBUdVIUQXkd8LMuBl3Ocrj59c0J0VaetqS9vwS3s=
Subject key identifier:   73:FA:94:8B:67:41:99:CD:EC:AB:B6:59:4D:DE:FE:32:59:4D:6B:1C
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Certificate issuer:       /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial:       01A0DCF26A249720C26F1BCFAF972BF1E7E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
Manifest number:          07CF
Signing time:             Sat 26 Sep 2026 09:01:09 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:09 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:09 +0000
Files and hashes:         1: 2RTaVuGpNGSdoClkrBLro0xcuE8.crl (hash: JizuGoZTKODVyG0isdLRjga2d1LPRNAEFn8N9sNaiIQ=)
                          2: 5hSNwWLNWCAUYLUKlFOgbC-vsKw.roa (hash: fkCkSIkOMr1NgMDTMDUskq39VJ7KZjaa4kYDj6t+Z0w=)
                          3: 7CXmH7ThrZok20WiAGjCXCBOzas.roa (hash: ML0vggVdekDweRUo8ISIsoQBBgpWCyTUPYs8nGYXR2s=)
                          4: 9-C51BQ9GR3x8sWko39QajrgzuQ.roa (hash: 1bZx3qAnqXddYhE0b5hAmr5qKot7DzAZND6Oe0URbRY=)
                          5: 92Ks2sFC0w0p0AIFF49f1gWqGCY.roa (hash: D1mBgUfkWtkbrrO6F1qZG97Uv8V0Ofc3+kHoQHbc2Zc=)
                          6: R9yQDUpo9qSNelx0KQxWO9fm9iA.roa (hash: RSvmXKJf5yDyS1EyQpjsuSAr6t0VEWEQu/Rk/10QmtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:6a:24:97:20:c2:6f:1b:cf:af:97:2b:f1:e7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
        Validity
            Not Before: Sep 26 09:01:09 2026 GMT
            Not After : Sep 27 09:01:09 2026 GMT
        Subject: CN=73fa948b674199cdecabb6594ddefe32594d6b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:24:ec:36:8a:8f:b8:42:73:02:61:c2:b2:15:
                    37:56:5f:01:95:89:b6:07:70:7b:aa:f4:7f:a3:e3:
                    7f:07:48:37:1b:c7:46:83:cf:be:24:44:b8:94:5a:
                    90:d3:42:49:8a:72:a8:56:f1:26:0a:21:85:27:c5:
                    7b:f8:2a:f0:91:40:07:93:04:08:e8:65:2b:c8:88:
                    42:4e:11:a5:4c:72:2d:ad:43:b7:64:ea:1c:10:8e:
                    51:5b:c6:e7:19:f8:67:05:be:bb:73:69:e2:89:b6:
                    fb:04:b7:ea:0a:3e:61:44:e0:d6:00:eb:73:75:9a:
                    e9:43:8e:0b:a9:ce:2d:fd:25:99:94:25:3f:11:a5:
                    63:8d:e4:a7:ab:68:ea:01:3b:ae:ce:cb:cf:ea:1e:
                    41:56:0f:ac:57:00:ac:fd:21:61:03:3a:eb:fc:7c:
                    01:b2:08:43:e6:70:6c:b1:84:f2:c6:66:48:90:c6:
                    bf:b3:cc:df:3d:e9:50:aa:35:93:9a:11:d1:93:af:
                    2c:6c:f7:eb:ac:6d:d0:5f:5c:23:76:4b:85:0a:af:
                    28:bf:a8:ef:bf:fd:53:bb:fa:6b:29:8e:6d:24:2b:
                    e2:11:db:8d:2e:b2:ad:0c:8d:e7:3a:ae:97:3c:a8:
                    45:0a:a4:57:70:7c:32:07:04:62:7d:11:6b:56:96:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FA:94:8B:67:41:99:CD:EC:AB:B6:59:4D:DE:FE:32:59:4D:6B:1C
            X509v3 Authority Key Identifier:
                keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:d2:9e:95:bf:de:a5:e4:12:e1:47:92:3f:f5:5c:a6:e1:
         d7:4f:97:7d:45:a2:13:5b:85:99:e5:23:e3:c0:b5:47:c1:51:
         41:e6:cc:e9:a5:e3:bf:58:2a:3d:ee:58:39:49:91:38:e2:ca:
         5f:39:62:a9:59:d6:e9:13:49:90:86:1e:f2:3c:2e:01:a2:fc:
         0a:e2:81:79:b9:f2:07:c1:a4:99:4f:29:9c:c0:fc:5f:44:b3:
         78:bf:26:cf:a7:d2:f5:88:9e:b5:49:a7:76:80:a7:74:c5:5d:
         0f:f2:7f:15:1c:a0:2e:6f:a8:82:fd:38:b3:a4:90:0c:bc:73:
         fa:8e:e0:63:a1:71:85:e6:27:14:30:ff:78:29:f0:87:8c:6c:
         ff:f1:31:79:32:c7:b2:56:5d:a0:64:64:34:0b:cb:29:fb:9b:
         ca:e5:5f:ef:a7:bc:e7:6e:8a:6e:76:47:e0:c5:85:39:ee:25:
         d7:b1:46:4c:69:f7:72:49:5e:a0:af:d1:34:a1:39:f4:b8:2e:
         a2:52:5e:1b:ea:c2:05:d8:df:31:21:39:9e:29:ea:96:2a:c7:
         ad:78:9a:a3:98:67:aa:16:4d:8b:a1:a4:85:f1:7b:75:44:58:
         da:33:8c:ef:fe:f9:e3:10:a8:fb:a7:f1:06:e9:7b:f4:29:1f:
         f4:c0:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:37:20 2026 by rpki-client