Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File:                     2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier:          xFB2E+qr06XKoS5Ke60cw3v+FwdeRLl3589Vjubk6mY=
Subject key identifier:   AB:6F:39:DD:08:4A:12:CB:FC:1E:65:74:6E:11:42:18:E3:03:CB:93
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer:       /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial:       01A0C09FBBC670CCE55268868921579B2261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number:          0B19
Signing time:             Sun 20 Sep 2026 21:01:28 +0000
Manifest this update:     Sun 20 Sep 2026 21:01:28 +0000
Manifest next update:     Mon 21 Sep 2026 21:01:28 +0000
Files and hashes:         1: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: ljIrQ9VhLup6iaTrk/02ZiYR9T6LFauoteJw/PCUPFc=)
                          2: 48OS4sWYglwtZBn1YxiPqc26nTU.roa (hash: NBM10gWvuZSa38kRQAx40WjX3amxqFeb96LnMyUj85Q=)
                          3: HUZvsXoFqmpwitLw4aku7m5jYa8.roa (hash: rhpAJ7/RvlTCzRrbypi+sM57yT9OZ8RJ46KD4H90XuY=)
                          4: Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa (hash: iB5ApjU6OfFGOZU2O/uqHAaYYGIEkIhRygeaclVc054=)
                          5: hih4fzkJ3O9yEk3BE5UpAZ6h-8Q.roa (hash: R7mk0homAMVaYBl/kyf6p+7Cu/DPi0srKaEKzzxe+Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9f:bb:c6:70:cc:e5:52:68:86:89:21:57:9b:22:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
        Validity
            Not Before: Sep 20 21:01:28 2026 GMT
            Not After : Sep 21 21:01:28 2026 GMT
        Subject: CN=ab6f39dd084a12cbfc1e65746e114218e303cb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:85:4b:31:ba:a7:0b:9f:c2:89:66:94:e3:
                    b6:03:bc:6b:68:3a:df:84:13:68:48:c9:75:f2:aa:
                    af:8f:26:86:d6:da:85:a1:96:34:84:e1:d3:74:db:
                    2d:dd:8e:f7:d0:93:2d:0c:3c:e1:dd:ad:18:dd:dd:
                    2b:96:ac:58:07:d3:df:99:5b:c4:dd:4c:71:8c:08:
                    99:83:ad:cd:17:fc:a8:8a:6e:36:3a:4a:80:ae:c3:
                    c2:20:a5:98:a3:14:9d:dd:28:77:b0:ed:9e:40:61:
                    5f:28:64:2c:2d:ed:fd:ec:ea:a2:ee:09:6b:19:b8:
                    e7:32:db:c8:ab:47:dd:6b:53:7d:31:24:3b:14:69:
                    71:db:cb:0c:d3:31:04:1d:d6:3b:bb:45:19:b8:b6:
                    76:78:9f:2f:5c:eb:32:28:97:f0:b2:1e:df:fa:7d:
                    78:cb:4f:a3:da:eb:2a:47:a3:d1:c5:da:33:fd:df:
                    b3:9b:df:56:54:22:8e:18:c6:bb:a4:e8:a4:38:d0:
                    65:15:dc:78:bf:95:e1:ee:17:4b:7c:af:61:06:4b:
                    f3:22:0b:ae:88:e3:66:f2:63:08:94:16:07:42:72:
                    79:93:96:1b:d3:69:d0:03:9d:86:ed:95:51:89:14:
                    cf:ef:3c:71:22:5b:05:4b:84:5a:4e:39:c8:36:2b:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6F:39:DD:08:4A:12:CB:FC:1E:65:74:6E:11:42:18:E3:03:CB:93
            X509v3 Authority Key Identifier:
                keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0c:67:79:32:19:71:1c:eb:e5:2a:6c:ac:87:3f:26:72:c5:
         1a:c5:48:79:d8:ed:77:7e:9d:a1:f8:79:c1:2b:45:c5:b6:07:
         14:9a:54:04:a9:db:c9:41:36:4d:28:35:8c:35:6b:41:2b:52:
         1b:4d:2a:50:91:10:ef:52:75:af:5a:1e:a6:a9:78:b9:19:cd:
         bc:a6:59:58:9f:f7:8b:ae:c2:0d:d6:77:33:1c:79:a5:00:36:
         8d:16:5e:48:d3:2a:4f:33:43:e9:ef:42:11:26:90:63:cf:88:
         cf:20:7f:b5:fa:82:a5:cf:ec:ac:2a:98:6b:4b:86:ee:7b:61:
         18:2f:14:93:57:59:ef:5e:d9:5d:30:28:fe:27:d2:8b:ba:d5:
         da:46:ed:61:de:41:8b:34:b4:12:ce:90:1c:11:3b:0c:8d:31:
         94:2d:bd:0a:0e:d6:42:23:37:d0:bb:e8:f6:a0:85:21:3b:e0:
         9c:d5:98:4f:47:c6:f7:97:cf:a7:cf:63:5a:ca:e8:18:1f:fd:
         c3:db:23:0b:c4:6e:23:e6:50:64:95:e1:17:70:a9:4a:3d:00:
         1d:55:76:e0:9a:c7:56:17:80:0e:b6:ec:5e:4a:91:d5:ca:60:
         e9:71:66:f2:e7:38:9b:12:a3:fb:3a:e4:8b:ba:f5:18:fc:af:
         ea:68:d5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:16:57 2026 by rpki-client