Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File:                     2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier:          yFT0WYWkO3EmJKor32fRRgXRONpi17Q7D6dxcVogUnk=
Subject key identifier:   C0:16:50:19:EA:48:14:66:9E:3E:4F:53:0C:F0:5A:E8:AE:A9:1F:05
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer:       /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial:       01A0C40DCA40FC916B58F35CB95A2CFD87B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number:          1A62
Signing time:             Mon 21 Sep 2026 13:00:33 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:33 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:33 +0000
Files and hashes:         1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: f0+Om6oBwpXXQ1YauUDY+q84DFiiXW4zcsEjXklWICQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:ca:40:fc:91:6b:58:f3:5c:b9:5a:2c:fd:87:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
        Validity
            Not Before: Sep 21 13:00:33 2026 GMT
            Not After : Sep 22 13:00:33 2026 GMT
        Subject: CN=c0165019ea4814669e3e4f530cf05ae8aea91f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:31:77:cd:a7:d3:00:ca:1b:d5:0b:3b:16:
                    1a:59:c3:da:48:b2:51:d9:1c:15:0f:63:d7:a3:8d:
                    35:ad:34:9e:df:71:9e:91:2e:8e:71:02:d6:c4:43:
                    1b:00:a9:b5:c3:8e:4f:cf:ed:27:11:67:ac:d4:b8:
                    57:31:ce:50:14:9a:48:09:42:4c:91:b9:40:bd:0b:
                    be:fb:d6:f4:30:d4:41:68:db:d6:b0:af:bb:47:eb:
                    f4:66:b8:45:fb:b8:bc:97:7b:4c:c1:23:33:07:2a:
                    fa:9f:32:2c:92:5f:4d:d2:23:80:1e:d5:c1:71:7a:
                    db:1b:f1:2a:63:27:9e:de:48:e4:90:4a:13:0d:72:
                    67:83:85:1f:69:36:8b:e8:0c:e8:1c:cc:10:90:67:
                    89:89:6d:a8:a4:4a:c3:b3:cd:2d:ad:d6:1e:dd:8a:
                    bb:b3:72:36:e5:7e:e9:06:0e:b4:9b:06:aa:77:70:
                    d1:00:85:56:78:13:7a:b6:00:8d:32:b0:42:fd:f6:
                    b5:09:0b:92:bc:52:cd:db:69:ca:ad:4c:4d:c8:21:
                    e3:cb:02:43:b4:ba:5c:56:75:96:95:26:7a:a8:a5:
                    61:7f:3f:77:e6:72:97:49:54:cf:12:21:2a:3a:53:
                    cc:da:ff:b3:5a:59:9b:f2:7d:fa:ad:c2:a9:11:16:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:16:50:19:EA:48:14:66:9E:3E:4F:53:0C:F0:5A:E8:AE:A9:1F:05
            X509v3 Authority Key Identifier:
                keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:75:c7:5f:38:71:c5:18:44:b3:a2:d4:72:2f:14:79:76:
         fb:a7:3e:e6:93:7a:0c:5c:05:fd:57:53:18:05:07:42:26:d1:
         f9:0f:22:74:75:db:9a:ad:f8:78:4c:6b:dc:8d:6e:42:05:58:
         8f:01:37:56:fc:1c:6a:93:9d:87:c3:80:b4:dd:a1:c3:e3:0c:
         b9:85:7f:aa:02:6b:00:e7:71:4d:23:b6:e8:ce:70:ad:da:3d:
         fb:8d:c9:5b:cc:d4:76:72:64:9d:e7:c2:72:af:02:6d:f1:f5:
         d1:5f:08:c5:f2:fd:3d:68:28:ac:1c:5b:d8:99:05:14:ee:d1:
         ed:38:35:79:cd:d2:4e:32:2d:67:be:24:95:1d:51:e1:da:47:
         db:67:e6:14:f1:b8:3d:e0:ad:7f:03:b9:01:5e:28:28:61:29:
         d8:ed:79:1f:b8:eb:bf:c4:00:9b:94:e0:84:4d:cb:63:88:13:
         18:ec:e0:93:dd:40:ae:6e:a6:be:8c:52:98:3e:8f:0d:08:46:
         e1:b7:ea:7c:ba:33:dd:75:c5:6e:bd:c0:77:16:03:82:52:41:
         b8:da:0c:2a:69:f8:1f:8a:27:e8:47:12:69:b9:ec:95:ee:44:
         37:d3:f1:8b:04:da:f0:91:09:52:b7:44:0e:fd:9d:8b:20:61:
         84:7a:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----