Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File:                     2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier:          J282xdAuS7YFM53puW6XdkrzM2ezBPBgyDovbXPVk1Q=
Subject key identifier:   F1:B0:59:20:2B:0C:34:A1:A2:8D:22:BD:C3:8B:07:3C:C2:FF:01:15
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer:       /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial:       01A0C66A5B727BD8734B4A96168D911C641A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number:          0CD0
Signing time:             Tue 22 Sep 2026 00:00:53 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:53 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:53 +0000
Files and hashes:         1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: 9GKSuJySYkSjC9+4LB9GFadeC7gkG6TdKYS99/5qFyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:5b:72:7b:d8:73:4b:4a:96:16:8d:91:1c:64:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
        Validity
            Not Before: Sep 22 00:00:53 2026 GMT
            Not After : Sep 23 00:00:53 2026 GMT
        Subject: CN=f1b059202b0c34a1a28d22bdc38b073cc2ff0115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:56:4e:d2:70:51:85:52:83:fa:6a:11:22:
                    bf:f7:02:59:59:b0:ba:4b:6f:53:d8:63:8b:93:cb:
                    90:6c:26:47:e1:46:21:9a:8c:e9:70:07:a1:b4:ea:
                    28:14:4f:49:a2:7f:62:83:55:43:bf:7f:6f:9e:5f:
                    94:f5:be:77:26:fe:2a:33:99:c1:a6:ab:60:3a:74:
                    b5:9f:18:31:df:b1:a8:d9:18:18:a1:69:08:53:53:
                    e3:42:32:f4:f3:0d:03:b8:fb:6b:ac:fb:ac:85:11:
                    03:50:03:86:24:a6:55:6f:51:b2:b2:8a:a0:14:8f:
                    58:27:54:a6:40:af:8c:bb:25:93:a5:ae:7b:3a:1a:
                    f4:8f:20:d0:91:6b:38:bf:4f:d7:31:54:56:a8:29:
                    e2:51:dd:55:78:23:e3:6c:36:fa:97:5d:ff:9e:46:
                    7d:71:a9:2e:7c:44:20:96:b1:71:a2:ed:c3:5c:e4:
                    25:f6:1c:ee:78:4e:02:a8:4c:ee:ec:0a:7d:ac:bd:
                    14:bb:b9:16:ed:71:88:d5:c2:b9:e6:b6:bb:6f:37:
                    81:a6:05:b9:b1:c7:65:79:ef:52:25:22:77:2e:6b:
                    c6:65:6c:79:31:23:67:9d:52:33:e2:a3:95:d3:be:
                    4e:27:c0:c5:44:4d:24:2f:01:eb:12:f3:c3:e3:c7:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B0:59:20:2B:0C:34:A1:A2:8D:22:BD:C3:8B:07:3C:C2:FF:01:15
            X509v3 Authority Key Identifier:
                keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:dc:24:ce:da:59:27:3d:ae:d2:97:0f:b5:f9:34:c9:6e:71:
         e1:5c:8b:90:e2:3d:04:cb:a3:64:be:81:18:d0:ea:af:3f:17:
         a9:fd:96:1b:74:02:46:6c:f0:ca:20:b8:6d:62:d5:92:66:7f:
         c7:8d:a9:35:af:ff:de:21:30:3c:4a:ec:32:65:dd:99:ed:a1:
         28:b7:6a:de:16:73:b9:f3:02:71:b5:21:d6:2e:b0:31:e4:10:
         0c:c2:94:48:97:3e:1e:ee:98:25:66:eb:63:27:b9:9f:97:e4:
         d5:9b:c4:47:f4:2b:a2:b2:d1:c3:81:4c:61:b5:63:10:56:02:
         ec:4c:03:fa:cf:70:68:a5:e2:9b:6d:d0:70:a7:75:c1:aa:c3:
         39:1a:e9:60:9d:85:d5:83:2a:88:58:15:03:7e:15:4f:d6:b6:
         b5:3e:12:75:7e:7e:02:36:58:d8:68:d5:87:d7:40:b1:4a:f3:
         dd:c4:66:0d:f1:77:2e:73:0a:7b:7f:c3:aa:e2:5c:1e:5f:18:
         74:11:00:87:8e:d9:33:81:c3:21:67:dc:ed:70:14:e7:56:bf:
         e5:87:32:16:02:e8:54:ca:f8:6f:72:45:d0:36:67:96:0d:a0:
         f8:64:58:ff:c9:75:c8:89:c1:22:13:05:5d:ca:71:71:25:d0:
         51:ac:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:39:58 2026 by rpki-client