Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File:                     C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier:          GCeYTWb6QT9JlCpTHhBHAfwJiK/REsaKOpEH0+7LgZQ=
Subject key identifier:   33:84:8C:07:A6:19:0E:9D:FB:4C:50:CC:97:5B:0C:68:83:35:75:5E
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer:       /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial:       01A0C09F097608F67A22D89DC76749A02F0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number:          0E4F
Signing time:             Sun 20 Sep 2026 21:00:43 +0000
Manifest this update:     Sun 20 Sep 2026 21:00:43 +0000
Manifest next update:     Mon 21 Sep 2026 21:00:43 +0000
Files and hashes:         1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: NzUBK+VwHzkie0LA+o+JP9kTUyiFEruvnQkM8DR2nSw=)
                          2: pwE_SfXTpr9tglpARupCJ6k_dPs.roa (hash: MJdvGBgQiMUrOWyGd3oHbenSc8E/Lbv1F5XgS63yo/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9f:09:76:08:f6:7a:22:d8:9d:c7:67:49:a0:2f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
        Validity
            Not Before: Sep 20 21:00:43 2026 GMT
            Not After : Sep 21 21:00:43 2026 GMT
        Subject: CN=33848c07a6190e9dfb4c50cc975b0c688335755e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:9f:de:84:6d:78:ed:26:0f:4d:07:4a:4e:
                    07:62:95:62:ba:8d:3d:25:7d:37:c3:44:a3:b7:e4:
                    9b:1b:01:9d:7d:df:2d:39:95:29:2a:25:d9:8d:ae:
                    df:59:88:d1:05:6d:14:ce:d5:e4:67:49:25:6d:a9:
                    fc:70:b3:53:aa:f8:58:a3:70:2a:cd:18:8e:56:3f:
                    3d:68:4d:eb:30:05:29:43:ca:64:e8:7f:59:84:ff:
                    ac:9c:b9:aa:ca:eb:fd:3b:2d:71:fc:49:b5:c0:dd:
                    02:7b:fe:7d:e0:d0:41:c5:62:de:ea:79:7e:15:de:
                    e8:a9:eb:68:ed:ca:bc:57:2f:90:53:93:b9:f8:f2:
                    81:e2:e7:f4:98:92:14:ba:67:09:e9:96:3c:3f:81:
                    5f:87:3f:de:f7:24:da:3e:b9:ef:85:6b:36:29:bc:
                    70:7f:0a:3e:36:70:4c:f1:81:c4:a8:97:a5:02:a9:
                    34:c6:ec:f7:97:a9:ef:61:04:07:85:18:b3:2a:71:
                    de:50:1e:e7:88:2c:ce:02:45:85:9a:84:60:14:d7:
                    2d:d3:cf:40:f1:79:7b:59:e4:70:42:5b:12:a6:bd:
                    15:e3:3c:fe:89:4c:ef:5d:7d:71:2f:5a:c0:21:4f:
                    1b:dd:2f:89:3e:fa:52:6f:b3:c8:24:da:21:2f:55:
                    5f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:84:8C:07:A6:19:0E:9D:FB:4C:50:CC:97:5B:0C:68:83:35:75:5E
            X509v3 Authority Key Identifier:
                keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:76:19:03:de:bf:57:62:28:fc:b5:d0:db:5a:09:44:27:43:
         7c:77:7d:37:29:39:be:cb:04:6e:a2:f9:c1:ec:bb:e5:83:3d:
         06:30:92:bc:7f:f3:d1:88:55:9c:b5:4a:34:f8:9a:b7:a3:51:
         9f:97:8c:a7:ea:7b:a2:37:db:c6:c1:f2:0b:50:c4:38:31:9c:
         ae:1b:80:31:7b:13:40:c6:42:54:6d:94:97:bd:ba:0c:91:01:
         ac:e0:9b:2f:a7:ae:4e:ad:5f:92:51:55:fe:5d:2b:dd:c3:5f:
         27:3a:19:8d:b1:63:98:86:6b:60:d1:d2:b7:72:a4:78:0e:69:
         f9:72:cc:a5:e5:24:ef:b2:ba:97:b3:c3:e9:c3:4d:45:74:72:
         6b:64:e6:8a:80:cb:91:75:a5:34:62:15:8d:04:e5:43:c0:01:
         3d:36:43:d8:a1:9b:05:d0:f0:71:9b:33:bb:d7:82:ed:c9:c7:
         d4:fa:42:b6:2d:4b:b9:7d:62:d1:c3:53:6b:4e:99:3c:c7:7e:
         5a:87:05:a5:03:8a:5e:99:0c:ef:73:e7:8c:33:94:46:01:a6:
         d1:5f:cb:54:64:15:85:f0:71:8d:46:00:38:3c:c7:ad:6f:51:
         92:4d:fe:c9:89:d5:38:62:64:22:e4:fd:9c:71:30:d3:7d:de:
         64:09:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:22:59 2026 by rpki-client