Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File:                     2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier:          Nnh0GJMxMaWxxwJQW+K9mbOPWYTn6Czk3t+tNTYimXc=
Subject key identifier:   ED:F1:AA:4D:B6:EE:06:D0:CD:C6:BA:67:C1:8F:E7:A4:F1:9E:C4:99
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer:       /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial:       01A0D42686BD111C5BAA63142C470514013F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number:          1A81
Signing time:             Thu 24 Sep 2026 16:01:29 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:29 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:29 +0000
Files and hashes:         1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
                          2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: cUwPAerCwnHNEUFym0XPI0OqkHsot9SBVHQUv6FgnLY=)
                          3: 2foRBLMeo0d1JGgfWn6nIOFs-vc.roa (hash: VDRdt1fomluk1BQlPv1n2Ev8FVx7Mrgitk7YePdq/Qc=)
                          4: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
                          5: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
                          6: 6-RO6lEKyV8p6BduvZDc_r5dKqU.roa (hash: 5BfN3RVMV58Wdxlxlajwm60etXfqDYmsQCcNJxtegF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:86:bd:11:1c:5b:aa:63:14:2c:47:05:14:01:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
        Validity
            Not Before: Sep 24 16:01:29 2026 GMT
            Not After : Sep 25 16:01:29 2026 GMT
        Subject: CN=edf1aa4db6ee06d0cdc6ba67c18fe7a4f19ec499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b0:8a:8c:08:c3:e6:ec:be:f8:f0:9e:8c:ca:
                    49:d4:49:74:73:2f:7c:ed:d3:6e:70:9e:89:46:59:
                    77:05:e1:38:fd:d3:f9:87:43:a1:18:29:d2:13:85:
                    a0:e5:12:80:5f:34:f6:7c:c4:59:a2:61:7b:cc:39:
                    53:32:c0:9b:89:65:96:d9:21:a7:8e:e2:45:61:ca:
                    75:b8:f1:42:8f:cd:56:0b:67:17:00:e1:03:08:4d:
                    0a:84:fb:51:db:fb:87:8d:b4:a8:78:30:6a:48:0c:
                    fb:e8:3c:3c:78:29:0b:89:9c:9b:72:c4:1e:27:88:
                    fa:af:35:da:65:c2:a7:18:ab:a7:0c:78:d6:80:65:
                    e6:22:25:ef:ea:36:68:b5:f7:b6:c4:f9:66:81:19:
                    a8:44:37:4d:76:f9:06:68:e2:7e:73:11:dd:1e:6b:
                    ef:ec:b3:a4:ae:2c:46:c5:60:2f:23:99:29:66:59:
                    6a:c4:d1:82:2b:a7:e8:be:87:9e:4f:4a:51:62:34:
                    4e:d5:e8:6d:ec:cf:cd:e1:18:a7:8f:c2:19:d2:45:
                    f7:7c:aa:63:8f:26:c6:6a:b5:98:06:68:bf:49:48:
                    8c:f4:3e:56:c4:d5:9b:66:e0:a4:fd:50:ca:83:8b:
                    7e:d5:41:1e:9e:07:f4:6c:98:13:e5:18:ee:ba:c2:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F1:AA:4D:B6:EE:06:D0:CD:C6:BA:67:C1:8F:E7:A4:F1:9E:C4:99
            X509v3 Authority Key Identifier:
                keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a6:3f:3e:38:dd:5e:58:d3:5f:a9:64:64:6b:f1:f0:ea:54:
         4e:0a:c7:b9:dd:2b:c6:83:db:59:3e:5c:af:8d:9c:ad:e6:12:
         cd:8c:3b:fa:b0:f5:a6:41:ac:10:65:f3:5b:28:63:99:9a:2f:
         8f:b2:11:80:01:0a:3f:7c:30:3d:2f:91:e5:f1:c1:60:40:20:
         30:db:c8:f3:af:4f:78:b7:fb:82:57:02:9a:3d:26:bd:32:4c:
         b4:77:6b:64:68:64:bf:6d:95:5f:14:7b:b5:cb:1b:0c:d8:07:
         58:73:8a:cd:8f:87:c5:36:2c:20:17:a9:94:9d:af:67:6e:8f:
         93:6c:df:e7:59:29:48:61:c2:1d:cd:9b:15:f1:e0:e6:21:83:
         cf:c6:7c:6e:5c:86:3b:66:fa:05:79:bf:5b:9d:7d:91:75:c3:
         61:d8:b1:9a:2e:50:31:9f:c4:00:b0:9a:ea:a5:15:1d:2c:8b:
         f2:34:4c:76:dd:23:03:eb:cc:b3:df:df:11:35:57:75:04:70:
         12:7b:95:7b:0b:00:36:85:03:f1:73:18:f0:21:de:a3:82:f3:
         e0:88:73:1f:80:53:a8:ef:d4:f9:df:4a:ff:5d:66:92:65:5e:
         57:f3:ef:c4:2b:1a:ba:09:f4:6e:73:c0:f9:98:bb:d0:fd:9d:
         47:fc:14:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJoa9ERxbqmMULEcFFAE/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Mjg0ZjE4Y2Q0NDYwNGJkZDZkMDhmNGQ4NzhkYzYxNDU2
YzQwZmQwHhcNMjYwOTI0MTYwMTI5WhcNMjYwOTI1MTYwMTI5WjAzMTEwLwYDVQQD
EyhlZGYxYWE0ZGI2ZWUwNmQwY2RjNmJhNjdjMThmZTdhNGYxOWVjNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLCKjAjD5uy++PCejMpJ1El0cy98
7dNucJ6JRll3BeE4/dP5h0OhGCnSE4Wg5RKAXzT2fMRZomF7zDlTMsCbiWWW2SGn
juJFYcp1uPFCj81WC2cXAOEDCE0KhPtR2/uHjbSoeDBqSAz76Dw8eCkLiZybcsQe
J4j6rzXaZcKnGKunDHjWgGXmIiXv6jZotfe2xPlmgRmoRDdNdvkGaOJ+cxHdHmvv
7LOkrixGxWAvI5kpZllqxNGCK6fovoeeT0pRYjRO1eht7M/N4Rinj8IZ0kX3fKpj
jybGarWYBmi/SUiM9D5WxNWbZuCk/VDKg4t+1UEengf0bJgT5RjuusI8awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3xqk227gbQzca6Z8GP56TxnsSZMB8GA1UdIwQY
MBaAFNgoTxjNRGBL3W0I9Nh43GFFbED9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0Zjgt
Yzc4NjkxMjg1ODJjLzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0ZjgtYzc4NjkxMjg1ODJj
LzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6Y/Pjjd
XljTX6lkZGvx8OpUTgrHud0rxoPbWT5cr42creYSzYw7+rD1pkGsEGXzWyhjmZov
j7IRgAEKP3wwPS+R5fHBYEAgMNvI869PeLf7glcCmj0mvTJMtHdrZGhkv22VXxR7
tcsbDNgHWHOKzY+HxTYsIBeplJ2vZ26Pk2zf51kpSGHCHc2bFfHg5iGDz8Z8blyG
O2b6BXm/W519kXXDYdixmi5QMZ/EALCa6qUVHSyL8jRMdt0jA+vMs9/fETVXdQRw
EnuVewsANoUD8XMY8CHeo4Lz4IhzH4BTqO/U+d9K/11mkmVeV/PvxCsaugn0bnPA
+Zi70P2dR/wU5w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:28:08 2026 by rpki-client