Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File:                     2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier:          oXu4yj/iSq0vHeZAaTwKeDcz/qZpnHQLaq4uzsuLgUs=
Subject key identifier:   70:D7:6A:D7:0E:7B:62:E3:88:FE:51:82:BC:05:77:A3:3A:41:37:44
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer:       /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial:       01A0CFA48391373A64664EFC229BDC93EFFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 19:01:00 +0000
Manifest this update:     Wed 23 Sep 2026 19:01:00 +0000
Manifest next update:     Thu 24 Sep 2026 19:01:00 +0000
Files and hashes:         1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: u9Ix+CJgGPFR4ZZQWW2SiXie6+UlrCduGwZlCCftoMw=)
                          2: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (hash: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:83:91:37:3a:64:66:4e:fc:22:9b:dc:93:ef:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
        Validity
            Not Before: Sep 23 19:01:00 2026 GMT
            Not After : Sep 24 19:01:00 2026 GMT
        Subject: CN=70d76ad70e7b62e388fe5182bc0577a33a413744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:0c:b8:c3:b2:f4:a6:01:ff:d1:d0:35:79:
                    5c:d1:9a:30:9c:3c:1f:4e:13:49:23:91:d9:a6:4b:
                    78:1a:81:31:8b:ce:5c:8b:bc:bd:26:be:97:56:09:
                    30:0b:f1:20:06:aa:f3:a3:bd:30:22:7f:08:fc:28:
                    d0:d9:7e:c7:c3:f8:56:6c:62:7a:63:12:1e:0e:25:
                    f4:f0:77:54:7f:95:2e:b8:6d:38:61:21:14:99:84:
                    eb:1f:f1:39:5a:ef:dd:ce:7f:c0:14:49:e9:d1:52:
                    3e:98:59:fa:a3:cb:dc:c9:48:31:62:8c:be:e0:58:
                    4a:48:17:6d:ef:74:27:04:40:dd:9c:fe:1a:03:ea:
                    43:d5:89:c9:8b:b9:a4:67:99:37:66:c6:6d:ae:be:
                    9a:55:94:53:74:60:17:c9:f5:59:c8:e1:e5:ae:c6:
                    16:f0:96:95:7a:52:6d:d8:83:17:83:1c:2c:9d:11:
                    f5:dd:45:1d:97:ec:fa:72:8f:6a:39:85:2e:c5:2e:
                    de:ac:42:a1:89:f7:6b:b9:17:8b:5e:8d:60:98:40:
                    50:c3:79:bd:f7:c2:dc:7e:dd:fa:b6:44:b8:21:1f:
                    ab:84:f4:96:18:d5:ca:4d:cf:0c:5a:57:94:76:e3:
                    a1:e8:9e:49:4b:1e:ab:ad:85:b4:e3:39:39:58:27:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D7:6A:D7:0E:7B:62:E3:88:FE:51:82:BC:05:77:A3:3A:41:37:44
            X509v3 Authority Key Identifier:
                keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:08:8e:6c:ed:98:97:2e:4e:52:ee:b7:9d:94:82:20:ce:35:
         73:12:8c:af:97:ba:ce:a9:4a:89:3c:38:d3:21:8c:24:48:82:
         f5:68:01:5c:a6:52:4c:ba:ad:1f:6d:fb:e1:bf:c2:ee:54:ed:
         30:c3:0e:cc:ee:6b:ae:c3:4a:d5:87:9e:82:4f:5d:be:58:a9:
         f3:b9:ba:0f:15:81:5e:e4:74:d7:83:8a:e5:b5:d8:b3:d4:f8:
         b7:43:62:cc:3c:0b:cc:81:1a:44:35:07:27:a9:c6:05:4f:34:
         e7:e6:7f:fd:ef:6b:74:0d:8b:35:4b:d5:46:b2:61:ad:63:40:
         03:00:01:a8:86:ad:3b:62:56:61:a8:78:41:99:3b:ff:89:15:
         f5:f2:56:26:01:4e:fc:79:46:8e:ec:d0:85:98:e3:38:ce:b6:
         6d:8f:b3:49:48:e7:4e:cb:36:7a:07:a0:df:29:a0:8c:82:fa:
         4a:17:7b:da:68:67:ea:04:c3:03:ac:6f:31:c4:53:83:49:d3:
         10:84:34:0e:2f:96:db:3f:95:06:09:68:dc:67:c5:4d:4f:88:
         a4:ca:9d:41:0a:99:4b:9f:d9:88:c4:7b:fb:44:1f:b3:0a:0a:
         98:c5:12:77:1a:1e:64:df:c9:c7:9c:13:c3:73:57:dd:bd:02:
         17:c0:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:30:47 2026 by rpki-client