Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File:                     2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier:          3UziOnITpSqUs/wsX5IDfliGp4ehDHl4ufsmWMPgatE=
Subject key identifier:   6E:EC:0C:CF:9A:7C:C2:B8:D4:C0:1A:A4:0E:FE:B1:EB:6E:3A:7D:DA
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer:       /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial:       01A0CDEC96182FE0AD5AFFBDAA5DFA380FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number:          133D
Signing time:             Wed 23 Sep 2026 11:00:29 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:29 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:29 +0000
Files and hashes:         1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: ioeZyM8O8X4DGlbOFIo/LStihoNetqWYYe86vxmJTSQ=)
                          2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:96:18:2f:e0:ad:5a:ff:bd:aa:5d:fa:38:0f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
        Validity
            Not Before: Sep 23 11:00:29 2026 GMT
            Not After : Sep 24 11:00:29 2026 GMT
        Subject: CN=6eec0ccf9a7cc2b8d4c01aa40efeb1eb6e3a7dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:c1:8f:34:e0:b7:78:53:0e:25:da:c7:a7:
                    93:18:27:21:7d:27:5b:80:c0:be:34:70:e9:0a:5f:
                    62:3c:a2:6e:c3:bb:0a:4a:27:c7:20:4d:cd:43:df:
                    73:dc:1d:22:22:20:75:51:62:16:b6:d8:73:e5:c8:
                    24:43:70:c6:0b:5d:16:7e:0a:47:af:2a:f4:b3:02:
                    96:b5:8d:bf:96:54:60:78:e2:71:ef:57:48:78:e9:
                    8c:49:91:c9:52:c4:6d:f0:92:1a:08:62:bb:64:a3:
                    ef:82:f2:23:21:c4:f1:8d:6c:15:36:bd:c8:9d:e4:
                    03:a7:e7:eb:5f:1b:f0:f0:7c:06:dc:ee:b1:66:77:
                    57:51:62:dd:19:e4:c1:a7:e2:12:46:00:9a:41:f0:
                    68:9c:67:8f:8b:cf:4f:19:78:f2:8a:93:d6:7c:fb:
                    1b:dd:45:f1:c6:bb:74:0b:08:97:9b:44:9c:77:45:
                    f7:4a:ca:1e:b2:33:54:d2:cc:cb:47:f3:f6:83:c9:
                    2c:84:00:81:d5:d1:5e:b0:0f:e3:1c:7f:4a:4f:c9:
                    75:de:c5:fc:26:ce:7d:31:ac:67:38:76:b6:3d:39:
                    2d:5f:af:10:62:cc:cc:64:df:11:fa:12:8c:c9:87:
                    92:19:06:2d:0b:d4:c0:16:58:2d:c1:48:cf:c1:a9:
                    bf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EC:0C:CF:9A:7C:C2:B8:D4:C0:1A:A4:0E:FE:B1:EB:6E:3A:7D:DA
            X509v3 Authority Key Identifier:
                keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:04:4e:ae:f6:13:6b:8f:bc:de:f3:8f:ee:a6:b3:b2:63:29:
         55:3c:96:02:cd:a1:8b:bc:00:f5:be:9a:95:7e:d0:d7:ea:f2:
         29:41:e5:df:a0:6b:15:6d:6f:d8:3e:b4:7d:88:22:04:b9:6d:
         1c:c8:c9:9a:bb:1e:4f:34:be:a5:fa:97:6c:00:5a:21:b6:08:
         85:42:a5:2c:c9:29:01:5e:ac:68:6d:25:3a:09:da:64:05:cf:
         3c:67:db:c7:c6:d4:47:db:c6:2f:2f:4f:18:66:d4:37:77:26:
         00:cb:42:70:4a:60:b9:1c:4e:93:0b:51:e3:4f:c0:9d:ce:e8:
         3a:d7:e7:94:42:a3:ac:e2:ce:eb:f7:c6:d3:e3:53:19:79:8c:
         bd:d2:46:58:53:4e:db:24:33:c5:60:45:81:7d:f5:09:ea:a5:
         60:2a:e3:95:da:10:91:d7:7a:81:77:58:7e:af:ae:79:7b:8d:
         54:1b:22:db:6b:3a:f6:ac:78:7b:41:57:88:b1:d0:1d:01:4a:
         f8:64:95:2c:71:4d:62:47:45:97:61:93:25:56:23:88:22:eb:
         10:62:3d:da:21:44:f5:d7:af:c9:73:82:20:c0:c9:c5:3a:3c:
         54:16:bc:9f:4e:a0:eb:20:ca:77:e4:ff:5d:05:df:55:52:d2:
         95:db:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:01:25 2026 by rpki-client