Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File:                     2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier:          wn6r2jmx1JCu6bfxGqAniOAubCQ7sgXNfaBuvUS39s8=
Subject key identifier:   16:02:4E:F1:83:7E:E5:C7:BD:53:D6:3F:64:F6:89:72:F7:72:9E:C7
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer:       /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial:       01A1DE396840C9FA652E2A2F729408FF9CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number:          1812
Signing time:             Sun 15 Nov 2026 08:01:06 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:06 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:06 +0000
Files and hashes:         1: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: azkddGTHeaaVsNw3mCc6awH1c/6axVgOSmhbRSZCIe0=)
                          2: C_DCfRSN7oCVV67q6bLzPSt0SX0.roa (hash: tuuEyNKdU6FCNvpWoORJaYe7wS5Tgy0s63MOjepUKAA=)
                          3: F6ItjWva3f1OheuFpaWQqZIl8-A.roa (hash: k0FVOFBY6Wpq6IM4bLDDBEm5uiTQoudoYWJB3bMH7aY=)
                          4: GcPrPHGVncEuFnODCW4ngX3ZQE8.roa (hash: 9U3tDv9Npae/FEnqBXW/Bi1yx4I34R4F2zK1MTG5y2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:68:40:c9:fa:65:2e:2a:2f:72:94:08:ff:9c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
        Validity
            Not Before: Nov 15 08:01:06 2026 GMT
            Not After : Nov 16 08:01:06 2026 GMT
        Subject: CN=16024ef1837ee5c7bd53d63f64f68972f7729ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:89:10:13:81:59:e1:f4:81:18:20:7b:7e:6b:
                    fe:26:4e:b2:86:74:c4:b0:a1:a7:95:fa:38:8e:77:
                    1e:e3:83:d3:02:2b:47:29:70:71:25:16:49:0d:ea:
                    de:13:95:7c:5d:68:62:87:aa:9e:9e:f1:a8:b7:e3:
                    95:c6:7f:6b:28:a4:4b:96:42:85:a1:17:12:01:b7:
                    8a:d5:78:94:df:a5:4e:33:a9:f9:50:cc:2c:7d:c9:
                    a2:23:e1:1a:b0:fb:35:92:de:77:15:16:b3:ac:75:
                    ea:4c:0d:d5:8d:da:5a:7f:e2:a2:6f:eb:48:48:5f:
                    c5:48:fc:0a:cb:1f:93:21:dd:8b:84:62:02:6a:3c:
                    6a:f8:9b:3a:fc:43:0b:f6:e2:a2:6d:5a:ef:35:e4:
                    ca:bf:29:07:20:bb:1d:ae:ce:35:ae:db:8c:ff:e9:
                    15:1c:25:32:61:67:35:da:79:0b:33:a5:e7:d7:82:
                    89:43:4f:b2:fa:4f:b4:d9:33:37:77:98:32:8a:87:
                    dd:5c:01:86:9c:62:85:a7:67:ea:3c:a0:5c:ee:7c:
                    fc:e9:68:0a:35:5f:fa:72:41:65:c6:a6:91:a9:ea:
                    05:92:bd:dc:9a:9f:26:56:69:42:f5:40:96:03:34:
                    df:2a:f6:bc:a3:fe:0d:d3:af:d4:36:b4:c8:b6:ae:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:02:4E:F1:83:7E:E5:C7:BD:53:D6:3F:64:F6:89:72:F7:72:9E:C7
            X509v3 Authority Key Identifier:
                keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:41:e3:c0:53:6f:4b:21:9e:9f:38:e5:9b:5f:47:3b:72:1d:
         0c:28:56:73:23:98:40:d2:d1:10:7f:c9:30:7c:c2:b3:ad:2c:
         27:27:ed:2f:0e:21:33:5d:09:cd:ca:28:52:b8:98:8f:1d:62:
         fe:dc:ca:dc:98:78:8e:9f:69:26:e2:2d:b3:f6:58:d2:07:eb:
         d7:38:1b:55:03:52:bc:75:58:1d:64:6e:f9:42:1a:f6:4b:19:
         b2:9f:91:d1:fa:c7:2f:4f:9f:15:21:63:1a:e1:6d:55:6a:1b:
         2a:aa:45:ec:c3:b1:dd:3e:31:e8:29:e7:5c:4d:5d:c2:08:bb:
         7f:c6:74:f9:be:6f:a3:d6:8a:4b:f1:46:f0:5d:79:76:74:25:
         b5:0e:0c:6c:5a:8c:ba:79:e5:88:10:b4:2c:8f:b5:74:d3:78:
         62:fc:08:f5:0d:8f:f2:5f:a8:46:f3:27:25:57:fa:ad:0a:e3:
         ba:9e:13:28:49:20:5b:c8:ee:54:e0:57:8c:3a:f7:0e:3f:56:
         67:b9:36:bc:d9:12:fc:6b:c1:99:8e:c0:20:5c:7a:d9:4c:58:
         55:34:44:f8:c3:5e:7a:e5:b5:0f:92:3f:4c:c8:0e:99:68:83:
         42:d7:f1:02:eb:97:2a:3d:86:63:63:34:8c:ea:0e:46:57:ea:
         54:7d:47:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:24:55 2026 by rpki-client