Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
File:                     2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft (raw, json)
Hash identifier:          WbcI6W2MH9tpuhbRsauDkGThWhIND0kcMt6yYcVv2sE=
Subject key identifier:   C2:33:37:4F:C4:AB:5A:26:ED:82:89:08:3E:2A:08:49:EC:77:5D:49
Authority key identifier: D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64
Certificate issuer:       /CN=d99becd088794b11daf34c7f54e59f6939fe9864
Certificate serial:       01A0C2FAEF3C5B10EE934BB99595D8616349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
Manifest number:          0782
Signing time:             Mon 21 Sep 2026 08:00:20 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:20 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:20 +0000
Files and hashes:         1: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl (hash: +EpkaXkNdjz3EettxC5l/mogBOZ1/KILAZBzPD3DPVs=)
                          2: S6JRzdPpGObhz0VldQpk2KnV2uI.roa (hash: lJGmLlkU+7M1+xw3eyjs66v6c+81KsPPae1DO4AI0OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fa:ef:3c:5b:10:ee:93:4b:b9:95:95:d8:61:63:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99becd088794b11daf34c7f54e59f6939fe9864
        Validity
            Not Before: Sep 21 08:00:20 2026 GMT
            Not After : Sep 22 08:00:20 2026 GMT
        Subject: CN=c233374fc4ab5a26ed8289083e2a0849ec775d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:a5:97:64:f7:99:6e:e1:bf:ec:1e:8c:b8:
                    db:2b:99:6c:af:87:ba:89:34:60:6a:b0:62:62:3f:
                    ee:ce:14:f1:b3:01:75:fb:ed:b1:0a:2d:a0:7b:8b:
                    fd:55:a3:d0:77:16:be:29:40:c2:64:fc:95:bb:3e:
                    79:9f:57:88:ba:0a:78:3f:46:33:bb:b0:e6:e9:a5:
                    2e:13:26:00:54:29:19:ff:15:26:f0:cc:58:a8:51:
                    4b:44:16:45:2c:f0:5d:90:04:77:d2:2e:d7:99:c5:
                    d2:74:0a:b6:52:e6:92:5f:77:8c:3c:1a:46:07:ef:
                    2e:c6:a0:35:99:1a:cc:c0:c8:67:f8:c8:1a:f8:12:
                    5a:34:49:5e:27:ab:0c:b6:03:b9:4d:b9:de:7f:2d:
                    62:8a:f4:06:73:47:f2:44:af:da:7d:4c:97:fb:6d:
                    69:79:7f:b3:a5:4e:da:ba:a2:bf:2c:88:92:6d:8c:
                    f3:33:af:a0:ac:89:c8:be:dc:14:31:65:48:1d:22:
                    e6:1b:62:b3:a1:b3:c9:8a:c5:67:50:e9:18:58:f4:
                    0c:89:c3:48:b6:2c:58:4a:1b:4d:be:8f:36:b3:83:
                    33:af:c6:01:86:09:0f:a1:1e:76:39:2b:e1:1a:18:
                    0f:d2:9e:07:fa:74:07:41:d9:e0:37:28:97:77:da:
                    89:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:33:37:4F:C4:AB:5A:26:ED:82:89:08:3E:2A:08:49:EC:77:5D:49
            X509v3 Authority Key Identifier:
                keyid:D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ff:f3:c8:c2:03:9f:e6:69:50:64:0f:0c:84:37:45:f8:c0:
         27:f7:cb:ba:62:d0:bc:d2:2a:32:04:65:05:a6:f9:00:08:d9:
         c8:3c:bb:eb:0d:09:0e:d5:81:81:6f:0f:59:d4:c0:cc:ab:b6:
         be:5d:83:d1:be:d0:c5:f8:7e:08:df:be:35:5b:b2:0d:ed:eb:
         6a:f3:5e:65:31:3e:80:13:09:a7:a2:3d:8f:2a:43:9a:bd:55:
         44:2e:0b:f7:1b:00:c8:0d:38:a5:73:96:d9:c4:d6:10:4b:68:
         ba:88:8a:0d:a2:b9:04:f8:cc:9c:93:53:44:e0:14:be:6a:2b:
         16:20:46:43:bd:01:d6:79:2d:e3:81:9a:63:99:92:08:0a:44:
         a0:bc:7a:8d:de:0a:ca:2e:8b:bc:68:d5:31:a6:72:5a:17:32:
         0f:4b:7b:95:e5:4a:b9:2f:77:5f:81:ff:db:1d:07:ae:61:b7:
         07:f5:80:d2:2f:5b:61:fd:c8:c5:b0:a5:2f:3b:71:63:26:36:
         2d:5e:73:f1:bb:c8:03:05:d4:82:b9:a3:cc:89:b6:3f:b1:4c:
         2c:79:1a:f1:35:70:3a:35:de:c9:db:ff:30:7f:e7:9f:dc:9f:
         ae:21:08:37:46:06:d0:51:f7:f7:47:01:c7:90:f0:5c:19:65:
         a0:32:b5:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+u88WxDuk0u5lZXYYWNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWJlY2QwODg3OTRiMTFkYWYzNGM3ZjU0ZTU5ZjY5Mzlm
ZTk4NjQwHhcNMjYwOTIxMDgwMDIwWhcNMjYwOTIyMDgwMDIwWjAzMTEwLwYDVQQD
EyhjMjMzMzc0ZmM0YWI1YTI2ZWQ4Mjg5MDgzZTJhMDg0OWVjNzc1ZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuOll2T3mW7hv+wejLjbK5lsr4e6
iTRgarBiYj/uzhTxswF1++2xCi2ge4v9VaPQdxa+KUDCZPyVuz55n1eIugp4P0Yz
u7Dm6aUuEyYAVCkZ/xUm8MxYqFFLRBZFLPBdkAR30i7XmcXSdAq2UuaSX3eMPBpG
B+8uxqA1mRrMwMhn+Mga+BJaNEleJ6sMtgO5Tbnefy1iivQGc0fyRK/afUyX+21p
eX+zpU7auqK/LIiSbYzzM6+grInIvtwUMWVIHSLmG2KzobPJisVnUOkYWPQMicNI
tixYShtNvo82s4Mzr8YBhgkPoR52OSvhGhgP0p4H+nQHQdngNyiXd9qJewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIzN0/Eq1om7YKJCD4qCEnsd11JMB8GA1UdIwQY
MBaAFNmb7NCIeUsR2vNMf1Tln2k5/phkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NGFhYjItYjQxZS00NjBlLTlmY2It
MjQyYjU4MTQwZTM3LzEvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85NGFhYjItYjQxZS00NjBlLTlmY2ItMjQyYjU4MTQwZTM3
LzEvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWP/zyMID
n+ZpUGQPDIQ3RfjAJ/fLumLQvNIqMgRlBab5AAjZyDy76w0JDtWBgW8PWdTAzKu2
vl2D0b7Qxfh+CN++NVuyDe3ravNeZTE+gBMJp6I9jypDmr1VRC4L9xsAyA04pXOW
2cTWEEtouoiKDaK5BPjMnJNTROAUvmorFiBGQ70B1nkt44GaY5mSCApEoLx6jd4K
yi6LvGjVMaZyWhcyD0t7leVKuS93X4H/2x0HrmG3B/WA0i9bYf3IxbClLztxYyY2
LV5z8bvIAwXUgrmjzIm2P7FMLHka8TVwOjXeydv/MH/nn9yfriEIN0YG0FH390cB
x5DwXBlloDK17g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:13 2026 by rpki-client