Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
File:                     AdKI5UcwsQk69JmTgDQvhdgZjQo.mft (raw, json)
Hash identifier:          Y6KzKfYFyuhG7VvZWLB9lmm/yz6pwBgK3MQgHq6mV3k=
Subject key identifier:   E0:2A:6A:DA:D3:7C:F5:FE:8A:DF:21:FF:58:47:66:A4:4D:86:53:D4
Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
Certificate issuer:       /CN=01d288e54730b1093af4999380342f85d8198d0a
Certificate serial:       01A0C8C69A371B3E919258D6B23ABE5BD82E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
Manifest number:          0CA2
Signing time:             Tue 22 Sep 2026 11:00:53 +0000
Manifest this update:     Tue 22 Sep 2026 11:00:53 +0000
Manifest next update:     Wed 23 Sep 2026 11:00:53 +0000
Files and hashes:         1: AdKI5UcwsQk69JmTgDQvhdgZjQo.crl (hash: Cz/rvMsC5kRyMUIKvEkvFEioq3LgsvToqdoHCYt5k5Q=)
                          2: fg1ZDaE-Jw3uqLF5HiZidz3xbjg.roa (hash: EEwrRzOKdmaJZWY6WRbn+FygexN1DQqGjCid31GjTaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:9a:37:1b:3e:91:92:58:d6:b2:3a:be:5b:d8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a
        Validity
            Not Before: Sep 22 11:00:53 2026 GMT
            Not After : Sep 23 11:00:53 2026 GMT
        Subject: CN=e02a6adad37cf5fe8adf21ff584766a44d8653d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:53:c8:ce:30:9f:70:fb:2c:e1:97:e2:94:
                    33:17:55:35:87:18:14:2a:1e:0c:2b:b8:ab:36:b0:
                    f7:e3:c3:ab:d7:3c:1e:a2:51:e2:70:73:cf:62:78:
                    29:29:cf:10:42:7b:27:66:77:d8:09:70:9d:be:ac:
                    f3:28:98:42:41:d3:12:a1:f8:00:36:4c:eb:2c:cb:
                    28:d2:c0:19:d3:58:e7:dd:b8:73:f4:b4:75:70:85:
                    f9:a4:9a:7d:c3:2b:4e:ff:22:63:99:11:d2:c1:21:
                    5e:31:0e:1d:78:77:01:bd:d3:ed:e9:8e:c6:19:2c:
                    13:91:37:27:57:43:1a:3b:8c:d2:db:3f:31:26:27:
                    37:a5:32:d6:ee:40:9f:29:d2:00:13:e0:78:8b:27:
                    70:59:df:6b:d6:60:96:d7:ec:57:cd:2a:fd:f4:7d:
                    4d:a4:10:86:62:c4:d1:7a:79:6c:51:3e:ff:c1:08:
                    86:1b:60:e8:fa:7e:99:27:4a:05:7e:f6:a9:bc:fd:
                    f9:00:39:c0:0f:db:29:a6:62:97:03:6f:3f:63:e9:
                    ff:90:91:71:eb:06:f4:6e:a8:86:07:a9:79:ca:05:
                    8e:cb:f7:ef:9f:11:a2:5e:86:f9:57:81:66:00:d6:
                    47:61:41:b4:a8:71:e4:10:be:a5:02:ad:cb:cc:26:
                    e9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2A:6A:DA:D3:7C:F5:FE:8A:DF:21:FF:58:47:66:A4:4D:86:53:D4
            X509v3 Authority Key Identifier:
                keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:91:01:dc:be:e5:2b:4b:0f:d8:fd:c2:18:21:e5:02:80:c6:
         3c:9c:95:30:57:84:11:d8:fb:39:a6:78:2e:80:a6:0a:53:84:
         c6:03:55:1a:7a:87:44:6c:21:ae:e3:39:a0:ba:17:bc:33:e2:
         74:c7:7e:b7:35:1e:13:9e:52:dd:39:7c:16:96:61:d8:17:df:
         e0:f7:9d:7d:46:97:4d:c3:5a:95:07:ef:27:1c:16:e2:25:f3:
         c9:20:80:9e:fe:c5:0b:3d:47:ea:e7:52:43:2d:eb:56:75:c3:
         7b:9f:1d:cb:64:01:64:5f:86:32:4b:34:df:aa:bf:bc:3e:5b:
         9f:7b:3d:03:e4:c4:b7:bc:ef:eb:46:f4:d7:ff:31:c8:7f:45:
         70:bb:90:a5:be:34:d5:8f:8b:55:d8:ce:bb:c4:22:50:cd:be:
         77:b7:2d:de:9b:b7:85:3b:bd:a0:74:18:c3:5b:bd:47:b3:02:
         5c:74:bd:3e:b1:89:94:af:05:f2:67:dc:41:97:0f:1b:12:79:
         42:0d:ae:5b:22:dc:65:dc:9e:76:73:0c:ba:98:5a:9d:69:d1:
         bd:4f:a9:4f:38:e2:d7:62:09:28:df:bd:02:51:c7:7b:cd:e5:
         83:91:08:71:b0:9c:92:aa:6e:38:fb:78:5a:4a:88:45:f8:29:
         e0:04:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:02:48 2026 by rpki-client