Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File:                     2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier:          Y09eTiZQ4W9fbXy5z82zoleU1zdIlQdC7u0Oolvu64k=
Subject key identifier:   60:60:0D:DF:D4:39:36:41:0E:D7:C7:FC:06:E7:7A:B4:EE:24:E8:EA
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer:       /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial:       01A0C39F91C99A5F21EDDD9A06A502B76E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number:          10D2
Signing time:             Mon 21 Sep 2026 11:00:09 +0000
Manifest this update:     Mon 21 Sep 2026 11:00:09 +0000
Manifest next update:     Tue 22 Sep 2026 11:00:09 +0000
Files and hashes:         1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: LqqrIStqDuVkgLpLCFhBFgElt/N0n1nxflwAmy/1uMA=)
                          2: 30R6wB6gk0tAdQUb1nh5pGtizL0.roa (hash: 3d2YX3XYruYbRwjkdhZqOWEla3AbBvwumGbHye9XwtA=)
                          3: N1AbqW-LglnJHa8JDMfRFCkNqAg.roa (hash: pucNpOTLMDRyvd9Y5PyCoo7bgwR3bl/sj/khCUp1yHs=)
                          4: g9DlwoPcP__m6NZqUMdk9BeZ8_s.roa (hash: kBEZ3OB5J/nHjPA7g4sqM3oE29ycmGA4VRa1os8i/Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:9f:91:c9:9a:5f:21:ed:dd:9a:06:a5:02:b7:6e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
        Validity
            Not Before: Sep 21 11:00:09 2026 GMT
            Not After : Sep 22 11:00:09 2026 GMT
        Subject: CN=60600ddfd43936410ed7c7fc06e77ab4ee24e8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:7f:8e:02:1c:c9:7d:cd:48:28:27:8e:8f:
                    71:eb:b6:07:30:97:6e:12:1a:31:d7:49:42:87:59:
                    b1:4e:33:0f:97:a8:4d:41:e7:76:cf:59:5c:e9:9b:
                    ba:53:6a:a4:ff:a2:3a:64:c9:b9:ff:1d:14:48:a2:
                    03:52:2e:1d:0e:cb:f4:87:62:02:bb:e9:81:d9:a8:
                    07:c7:ad:f2:54:95:a1:fe:98:a1:14:e8:8c:84:a0:
                    af:09:fb:f7:f3:57:3a:ca:d2:e4:bb:c7:58:22:62:
                    63:8e:d9:e7:e8:68:a8:33:8e:7f:88:f2:e1:b4:d9:
                    ef:0e:75:b3:3c:ec:4c:c0:8b:52:7c:7a:e7:25:fe:
                    45:60:ca:b1:ae:56:94:fe:32:87:8b:cc:03:6e:7c:
                    25:21:b3:ba:c2:cf:62:c6:b3:05:d2:8e:de:28:f4:
                    f0:ac:21:9b:15:90:be:61:48:07:c6:4a:79:b3:b1:
                    76:e2:a8:2c:cd:fe:e3:c7:63:06:95:84:4f:1c:42:
                    b7:3a:e6:de:fb:78:4f:1b:6f:fa:b7:c3:a8:40:2e:
                    bc:b0:a7:89:f2:6e:34:49:f0:07:fb:1c:d9:a6:61:
                    7f:0e:81:af:9d:10:00:48:d0:e8:34:c2:b4:f3:f9:
                    ce:25:b6:a3:2e:b1:6b:52:c6:75:82:e3:9a:ab:96:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:60:0D:DF:D4:39:36:41:0E:D7:C7:FC:06:E7:7A:B4:EE:24:E8:EA
            X509v3 Authority Key Identifier:
                keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:78:fc:31:1b:88:2d:c4:69:34:e2:cc:f1:63:e7:33:fe:93:
         62:29:fc:c5:88:5a:fd:ea:3e:83:44:20:20:ec:a2:2b:af:a7:
         7d:2d:91:f5:7f:03:f7:34:e9:ca:a8:a5:a8:78:34:58:a1:50:
         44:dd:a4:3e:76:88:40:bd:75:fa:87:82:1d:c9:54:2d:08:ae:
         9f:b9:44:75:86:36:d6:21:69:c4:8c:57:53:49:e2:70:bd:62:
         f0:46:d5:c8:c5:aa:f3:65:f4:59:ec:90:aa:f8:bc:37:59:46:
         f5:49:83:64:85:28:27:74:4e:4b:d4:89:b1:0a:1e:1d:85:fe:
         b8:c9:f6:13:bf:60:ce:54:cf:7a:a7:4c:27:ed:d6:d7:1e:9d:
         cb:d7:34:9f:3e:48:5c:eb:54:bf:8b:b4:42:a1:44:04:77:89:
         17:87:cf:e9:df:0c:46:41:dc:6e:21:b6:1c:cf:98:33:20:16:
         e7:f0:8b:d7:a3:60:6c:b4:e7:e2:ed:be:32:aa:1e:eb:53:e8:
         23:7a:a3:8b:75:5b:ae:51:2d:da:9f:d2:e7:7c:5d:84:67:44:
         f6:fe:2e:9d:36:07:a8:42:96:11:50:24:72:ee:18:ed:59:ff:
         29:5e:46:67:40:56:1d:6a:40:9d:8f:4a:49:8d:b4:55:49:66:
         8e:eb:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:20:49 2026 by rpki-client