Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
File:                     28kgJa2zaMuVMgmJhgdwebAcFlU.mft (raw, json)
Hash identifier:          KCL3lKFla9bAss7Yb9ytqrnQSJ4MKIspdv9GohS+MSs=
Subject key identifier:   11:B0:60:82:88:D3:31:8E:4D:E5:49:0B:45:6C:DA:9D:F1:F5:A2:20
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Certificate issuer:       /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial:       01A0BE0BF98E28964504DD9723CAD8EC5D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
Manifest number:          0237
Signing time:             Sun 20 Sep 2026 09:00:50 +0000
Manifest this update:     Sun 20 Sep 2026 09:00:50 +0000
Manifest next update:     Mon 21 Sep 2026 09:00:50 +0000
Files and hashes:         1: 28kgJa2zaMuVMgmJhgdwebAcFlU.crl (hash: 3fA74oLuq700dsSq+/LwOZfht8Npq64qP4wpjcYsGKo=)
                          2: HcZu53ikNbm6E6nULbzZ5BaC4s8.asa (hash: aZUh5JSJtmadcsFgBZ/s+52L71m5F6dmNv0c812Q2Cc=)
                          3: UNeNooSVFPm5iZtAUwJFPNT3eCE.roa (hash: rYwIwy4zW2sUGidEjwd4jHr8jHUjbde9qMuvf9HTOnQ=)
                          4: YmpUQsKRqD4AX2JDKXONqEy4OUc.roa (hash: CUbgFiyC5v44xgVPVpw5zZbv2WHebTNf1FSrJBghQuE=)
                          5: atcPnoh5T8KOdOi3deCvWkqUy-k.asa (hash: LdBBxBTgr2OX/cP1E0OPxVrVAk6jJMcVk9Wps9UoWQw=)
                          6: rReuKYKAVqr3CoKH5UO-1aSW-mc.roa (hash: fGoH+yub0teNtoDmdJ6CIXMKMtZMJfMpSQSYdG/VkrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:0b:f9:8e:28:96:45:04:dd:97:23:ca:d8:ec:5d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
        Validity
            Not Before: Sep 20 09:00:50 2026 GMT
            Not After : Sep 21 09:00:50 2026 GMT
        Subject: CN=11b0608288d3318e4de5490b456cda9df1f5a220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:3d:50:e6:9a:bd:23:2a:3d:d0:b7:e4:b3:
                    60:eb:42:de:42:37:36:65:79:f8:42:f8:9e:7a:30:
                    00:a7:7f:8b:b7:e0:70:41:e8:3a:18:57:89:79:35:
                    7e:4e:bd:2d:d3:f9:34:2b:bb:da:eb:19:0b:59:2f:
                    09:d1:5d:f3:07:cd:40:f7:de:49:8c:ff:61:a9:aa:
                    fc:ff:3f:e9:7f:b4:6c:6f:c2:09:e9:58:03:c5:aa:
                    5a:7d:19:0d:de:98:c8:21:c1:1d:21:46:c2:b9:46:
                    bd:5a:99:74:52:30:77:84:42:71:8d:bb:03:1a:ff:
                    bd:dc:aa:f6:e3:92:20:19:29:6f:7c:52:da:5c:1d:
                    75:f2:ee:53:2f:52:f8:6e:7c:fa:d7:42:fd:45:49:
                    a5:15:36:f7:3c:ac:64:94:16:4d:15:58:0b:59:f1:
                    8c:6f:70:a9:01:fb:87:78:9c:4c:d6:5e:1e:f7:2d:
                    68:7e:d6:00:5a:f7:1f:4a:a5:57:7d:7c:5c:fa:ed:
                    61:a7:01:97:c5:b7:11:5f:eb:e3:76:af:84:dc:58:
                    56:7c:d9:9e:d1:49:bd:54:ad:de:52:d0:1f:3f:f0:
                    25:df:2b:5d:51:8b:c9:f2:76:9f:96:99:a3:0e:08:
                    f0:b4:d8:fb:9d:09:8c:ee:2a:71:56:e9:88:fa:c4:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B0:60:82:88:D3:31:8E:4D:E5:49:0B:45:6C:DA:9D:F1:F5:A2:20
            X509v3 Authority Key Identifier:
                keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:02:ca:4f:6b:4e:8b:80:c0:75:53:db:e0:d7:bd:95:d7:f2:
         0d:50:f0:54:94:7b:43:d6:0f:4b:ff:93:30:82:ea:26:61:ca:
         b9:7d:56:83:68:3f:69:7a:c2:2a:07:ec:68:8e:94:09:af:b5:
         13:84:6a:b8:6b:41:d8:fa:e3:b1:e6:df:a8:7c:34:7c:9b:28:
         36:78:d6:8b:f7:a3:6e:52:13:9f:a3:0f:c8:0e:88:47:4b:b1:
         88:0d:e4:29:71:c3:67:90:c6:0c:72:d4:8b:c3:a7:0d:3e:e8:
         22:09:04:5b:a9:98:c4:28:e3:43:19:1f:26:19:b9:f8:cd:0e:
         e9:4b:b3:00:a1:7d:41:81:cb:f4:12:74:89:3d:27:6e:7b:68:
         0f:59:a2:30:dc:a5:e9:13:71:59:9f:fc:5d:50:a8:e6:64:e8:
         cb:b3:bf:fe:89:67:f5:7a:16:14:cb:cc:02:a2:d5:d1:97:b9:
         8a:3d:06:88:90:41:85:b6:c3:59:3b:09:09:cf:5d:36:74:64:
         6d:26:2d:ab:1b:d6:5a:35:53:e3:39:24:d2:4a:dd:ea:54:d1:
         92:4e:e1:d9:e3:d9:fe:6d:65:fd:18:3e:22:87:93:ae:a4:3d:
         06:84:37:b7:9a:0f:6d:c9:09:e8:c3:d8:19:4b:14:73:28:be:
         7f:82:0b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:21:50 2026 by rpki-client