Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
File:                     2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft (raw, json)
Hash identifier:          iC4FSzXTlspgn3rchqTncN45nnO8JoATEyjOGNViCQk=
Subject key identifier:   A2:57:4E:6D:26:46:D9:57:76:71:81:C0:7D:44:7D:3D:B6:8F:99:E7
Authority key identifier: DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
Certificate issuer:       /CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Certificate serial:       01A0BF54E8C44FCC1B838ACD2E31A4A700C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
Manifest number:          0136
Signing time:             Sun 20 Sep 2026 15:00:07 +0000
Manifest this update:     Sun 20 Sep 2026 15:00:07 +0000
Manifest next update:     Mon 21 Sep 2026 15:00:07 +0000
Files and hashes:         1: 2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl (hash: YnxinzbL9g+vG/x0Rc9OPZ1v+UGSBZUTl4VAeovk0rE=)
                          2: 4gw6ivUlx5RhKF01WchRSIyjw6k.roa (hash: yvGXQJHvCvBUZwEB+2AUU7LQeWkM7iGBhAxvrY3Xm9M=)
                          3: D9_btYwl0fQhOMvvEzfg91IZ8P0.roa (hash: WuI7JG/DTFeMuDLWYMfuwcvhxvoBD8M0//z426pEYRE=)
                          4: PDgj4Wl1YZudxOMnm6iJcOVDohw.roa (hash: a78RSsZm6nyQiDBrqehTSBxMPpTBDq/oFvqHEIehalg=)
                          5: cjj-j23xq1RyQ_bUrNGmu-cXcwc.roa (hash: HfAl0A5AiNIVARTp9kRpB/+bCfiAhWqWqe+w3HwHAKM=)
                          6: gKLAibmeyTSp0b81TE3SOvnf55s.roa (hash: m7hkN2gXNToHsdJ6LUtn1bIpxlleCfQZ6vbkrSxeCIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:54:e8:c4:4f:cc:1b:83:8a:cd:2e:31:a4:a7:00:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
        Validity
            Not Before: Sep 20 15:00:07 2026 GMT
            Not After : Sep 21 15:00:07 2026 GMT
        Subject: CN=a2574e6d2646d957767181c07d447d3db68f99e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:1f:70:4c:9a:d2:ae:21:24:e6:0b:9d:dc:
                    c4:41:a2:e2:fa:e4:8d:7a:eb:e0:0c:1f:fb:94:68:
                    33:77:86:fd:df:8e:66:0e:b0:50:0e:5e:b8:e4:ec:
                    ff:00:37:87:c1:e2:0a:68:24:42:74:0d:2d:f6:01:
                    f7:d8:15:f5:7e:73:08:6a:e4:5e:ac:e4:93:7a:dc:
                    b4:e7:0a:35:35:00:5e:ed:bd:d4:00:f6:ca:99:09:
                    2c:a9:61:94:29:33:09:65:7d:09:b7:e3:e2:2a:73:
                    37:00:17:40:c3:57:87:31:99:9d:eb:4b:79:74:15:
                    66:d0:32:f2:8b:b4:5a:ed:e4:46:7a:0b:d3:07:6b:
                    87:ee:95:85:6a:00:67:2c:8a:c5:88:17:4b:59:df:
                    8e:f1:26:99:9d:2d:38:2a:d8:b1:44:16:46:4c:d8:
                    ec:25:57:43:75:a6:84:20:1e:d7:bf:ac:44:25:47:
                    9b:71:f5:9b:68:a7:b8:b4:6c:24:13:de:b3:a8:77:
                    03:71:d8:3b:9f:ed:d5:3d:f3:4a:08:9c:ee:d2:8b:
                    58:a4:02:4c:9c:aa:6e:3b:64:f1:f8:7e:7a:1d:ff:
                    7a:40:7b:a4:50:f8:c1:22:59:1a:a5:d7:05:2f:46:
                    a9:d5:a5:53:05:77:4f:af:41:45:61:4a:2d:bd:17:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:57:4E:6D:26:46:D9:57:76:71:81:C0:7D:44:7D:3D:B6:8F:99:E7
            X509v3 Authority Key Identifier:
                keyid:DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:44:45:96:45:99:8e:23:3f:72:70:5b:80:47:96:43:e4:
         2d:26:02:9d:2c:c9:4f:da:fa:aa:6b:92:19:1a:0a:bc:38:87:
         ef:79:47:94:f7:6b:0e:03:b0:47:5a:0f:90:0d:22:da:e8:5f:
         29:83:1e:df:ce:33:d4:1c:ff:7d:c3:ee:ab:c9:ac:a7:c9:62:
         ec:0c:59:8f:68:a7:94:e7:64:a7:08:38:ee:1d:44:01:ec:b4:
         1d:2a:d0:64:63:27:30:f6:9b:d0:7d:fe:03:ae:8a:41:f9:64:
         a5:23:d7:33:20:fe:69:b2:7a:ef:54:a8:e6:82:39:56:55:99:
         77:4e:b5:28:14:0d:64:af:72:73:a5:3d:99:6a:d8:0e:45:8c:
         49:b1:16:cb:b2:8f:14:c5:62:85:20:d6:57:b9:99:53:cb:64:
         44:7c:05:e5:e0:c7:f6:20:db:77:44:39:d4:e4:a0:61:80:91:
         90:50:f4:17:6c:bb:57:a8:67:63:71:54:04:76:90:8e:0b:6d:
         ce:87:9e:a6:e2:6f:fe:9d:63:99:4b:5c:97:50:03:43:b3:81:
         ca:5b:40:a5:75:68:ad:ab:60:df:22:26:bb:07:db:ed:f1:69:
         b6:54:46:02:3c:ac:de:41:32:50:b3:92:45:be:17:87:48:87:
         f9:8f:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:35:01 2026 by rpki-client