Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
File:                     P2TX2Py26n88U-wAJA2Owcl3Zqc.mft (raw, json)
Hash identifier:          x7M2s4eNOiNPR04qStXFBEc4QweMA2IEF6h1RrQK54Y=
Subject key identifier:   FD:0E:36:72:56:68:92:22:47:BF:C3:1A:32:EA:C5:63:4A:55:A9:45
Authority key identifier: 3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7
Certificate issuer:       /CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
Certificate serial:       01A0D1C90500DA5607E423A69CD7BE413FA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
Manifest number:          0234
Signing time:             Thu 24 Sep 2026 05:00:07 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:07 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:07 +0000
Files and hashes:         1: P2TX2Py26n88U-wAJA2Owcl3Zqc.crl (hash: fkrHzrnFXZt4R+1egCKhpIQI7uIKEdrzVC4MI8FNjkQ=)
                          2: sSJSF0Ef5iNGBXgop50-6zZdD2k.asa (hash: 2H0jdgMOud4+cQqq8gHUDsGfxxUMnvX/NXbs1EyPhbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:05:00:da:56:07:e4:23:a6:9c:d7:be:41:3f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
        Validity
            Not Before: Sep 24 05:00:07 2026 GMT
            Not After : Sep 25 05:00:07 2026 GMT
        Subject: CN=fd0e36725668922247bfc31a32eac5634a55a945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:b0:43:a4:f9:1a:38:88:a0:d4:22:f7:cd:
                    af:66:dc:18:ae:8f:a3:3b:9b:c6:ce:d4:ce:f4:9c:
                    ad:48:e8:45:6e:e7:1f:4e:4e:d3:b1:6c:bc:3e:c0:
                    a7:de:5a:fa:9e:18:b1:2d:8b:58:52:d8:81:0f:d4:
                    73:9f:6c:b8:62:20:9d:dd:5f:88:0a:e9:b7:82:d5:
                    3a:d4:5e:74:17:06:59:1c:d9:dc:75:a3:ee:de:d2:
                    d0:8a:38:ce:a7:be:5f:f3:69:5e:b8:85:73:90:db:
                    bd:8d:27:52:ab:ab:a8:a8:fe:6e:ea:78:42:f5:5f:
                    b1:87:f9:08:c5:60:4e:d8:e8:aa:15:a1:6e:5d:d3:
                    ec:b3:8d:ef:31:1a:92:d6:fb:ec:22:24:79:b7:fa:
                    a3:95:ed:67:e3:51:27:48:3f:52:6e:54:83:f9:b7:
                    df:50:18:66:8d:90:5f:16:27:19:89:cb:dd:0a:1c:
                    ce:3f:dc:5c:fb:75:43:c3:d6:f0:78:8b:f7:eb:ab:
                    82:df:73:f8:24:92:90:87:76:0f:3b:56:9b:c5:00:
                    ec:8b:d6:76:59:92:60:e2:0c:93:5c:d1:f5:a8:42:
                    e4:a8:ba:58:c4:d9:b3:93:b1:ba:b1:41:ea:7d:4b:
                    f3:8c:6c:8d:91:b7:25:a8:a8:5b:e6:3f:43:62:f6:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0E:36:72:56:68:92:22:47:BF:C3:1A:32:EA:C5:63:4A:55:A9:45
            X509v3 Authority Key Identifier:
                keyid:3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:f2:1f:f2:17:07:9f:8a:5f:82:cc:92:0c:e9:8d:33:25:
         0a:a4:98:41:00:ac:4d:be:68:ba:39:b0:34:1f:d2:f3:df:94:
         88:49:b6:7b:46:fd:a2:6d:2e:71:f9:42:fe:d3:05:87:a2:e4:
         ac:51:b6:f7:f7:ff:32:62:82:37:59:a8:8a:67:75:6a:ae:cd:
         5f:62:55:a5:74:00:7a:bf:39:04:db:60:3c:95:8b:47:47:1e:
         a2:6e:bb:7b:4d:8a:37:59:53:61:88:12:bb:1b:d3:9b:9f:6c:
         c8:7d:61:81:13:47:36:13:fe:82:42:45:10:28:61:73:b7:3b:
         a8:e9:50:91:3f:e5:03:0c:01:32:67:80:da:7b:76:7f:62:36:
         ea:a7:41:9d:87:97:d0:9b:57:02:67:1d:6c:d1:59:a2:c2:b6:
         53:66:0a:36:0d:44:5d:41:d4:6c:fe:db:6c:79:2f:2a:eb:5c:
         c3:95:f1:d9:6c:49:e4:df:bf:1d:0e:d9:b6:5b:26:19:34:d5:
         71:19:05:f6:93:b9:ce:47:a5:7c:51:57:09:1c:56:54:29:1a:
         59:2f:fb:b0:a4:58:5e:6f:83:79:0e:73:6d:00:40:91:66:f6:
         48:72:b6:64:5b:7c:64:62:51:7f:99:11:a6:df:1a:c1:74:1c:
         4c:2b:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:33:25 2026 by rpki-client