Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File:                     2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier:          QLK6CHeiOdSEaIlKfyVdkzYgkDbC6I0EdtlSDcoJtAs=
Subject key identifier:   9F:E2:9D:0A:CE:3F:95:26:3A:38:8B:72:72:93:BA:BA:04:28:4F:26
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer:       /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial:       01A0C40E4804585595AB435CF381E4BC5DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number:          064E
Signing time:             Mon 21 Sep 2026 13:01:05 +0000
Manifest this update:     Mon 21 Sep 2026 13:01:05 +0000
Manifest next update:     Tue 22 Sep 2026 13:01:05 +0000
Files and hashes:         1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: loJEVzMlEvxInn5UuB3JG+x5+Wl9EJJUDnVr6lRlAPE=)
                          2: w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa (hash: X6/QclUhRxI/QNNJjqFf+pxHUaHW1PpD7IKrBpkxN4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:48:04:58:55:95:ab:43:5c:f3:81:e4:bc:5d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
        Validity
            Not Before: Sep 21 13:01:05 2026 GMT
            Not After : Sep 22 13:01:05 2026 GMT
        Subject: CN=9fe29d0ace3f95263a388b727293baba04284f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:98:bf:b7:bb:8d:13:ad:ce:b0:ba:1b:b2:
                    2c:59:9d:ad:32:de:d0:2d:fe:a3:e0:9e:c6:9c:79:
                    c5:a3:85:b2:a4:8b:76:c4:30:9f:3e:c9:f0:19:ef:
                    22:6b:b7:82:6d:34:24:0d:e0:b3:f7:64:46:92:26:
                    bb:d5:6d:b1:cb:13:2c:ac:20:23:2a:e3:a4:b0:5c:
                    da:16:0d:01:85:7d:3b:40:ee:dc:27:ee:eb:1a:24:
                    d1:f4:9b:11:6f:4a:86:c9:98:b9:6c:dd:6d:96:97:
                    f0:d4:36:ab:98:02:a8:86:9a:50:bf:6c:3d:33:3d:
                    8b:ab:b7:8d:ca:8c:d3:74:6e:6e:a0:db:c3:14:3b:
                    7c:9a:7b:71:34:70:10:2f:ed:6d:e0:6e:ba:0e:98:
                    e3:45:f4:f8:9b:f3:5c:4c:50:47:34:0e:ae:0f:d3:
                    6f:99:18:09:45:53:4c:98:b5:86:75:bd:4e:1d:6d:
                    d1:c8:9f:69:4d:1d:75:cd:41:03:80:95:b6:ee:c3:
                    2f:c2:43:10:6a:9f:6f:2a:2f:2b:5f:ca:b7:00:74:
                    37:6b:81:48:fb:81:1e:da:3a:e8:3e:ba:11:2c:66:
                    29:88:0d:de:1b:9d:dd:3b:bd:ad:0d:20:f7:e8:80:
                    4d:d7:4f:82:e2:b1:e1:97:4a:25:9c:e7:d0:6a:8f:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E2:9D:0A:CE:3F:95:26:3A:38:8B:72:72:93:BA:BA:04:28:4F:26
            X509v3 Authority Key Identifier:
                keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:55:e8:86:6b:1d:0f:d1:fb:76:cb:96:ce:cc:91:15:ef:2e:
         f4:3f:41:60:36:ea:ec:56:56:54:f1:f8:a0:e0:de:d0:d3:96:
         a5:d4:b6:9e:c8:e3:7d:0e:34:d7:5e:5a:ca:24:31:fa:c1:43:
         b8:d0:b5:0f:fb:8c:aa:12:ee:2f:0a:a8:e4:26:1c:a6:15:c8:
         e3:fa:fe:85:bb:87:87:7c:0f:db:b1:c1:d9:1c:bf:83:6d:61:
         5a:94:f6:67:cc:a6:4e:96:6f:ed:5f:32:14:c6:be:d4:11:d9:
         86:6b:3f:c0:ef:68:eb:b7:79:9d:48:1b:46:3e:a4:01:94:ee:
         59:a1:06:38:e7:40:a9:6f:ae:39:e2:35:98:37:ab:03:3f:88:
         cd:46:e4:18:c4:4f:c4:6b:f5:64:98:2f:97:4d:a8:53:35:6b:
         6a:28:af:d1:63:8b:10:cb:b5:68:d7:43:8b:0a:32:c2:29:97:
         3a:cb:77:db:1e:1f:c7:0f:23:b0:2d:04:34:76:3f:79:35:9a:
         56:bc:83:f4:84:9e:9c:4c:08:88:94:7d:c5:19:5d:56:04:d9:
         d8:2a:b1:36:a3:dc:ac:84:96:22:a2:3d:9a:07:59:39:52:61:
         38:ee:ee:a2:d4:9e:79:35:26:0a:1e:26:f3:2d:92:03:a1:cf:
         e6:b8:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:07:41 2026 by rpki-client