Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
File:                     2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft (raw, json)
Hash identifier:          cqE2euCFOK6qEaPPJHDte0R+Xwv2IC31Gstm/dZ39Mw=
Subject key identifier:   17:DB:46:14:BD:64:E1:D2:0C:96:C4:C6:60:FB:B6:4D:F6:2E:55:40
Authority key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
Certificate issuer:       /CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Certificate serial:       01A0D45DBCC71200099F2C6CB5124CF4875F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
Manifest number:          08AF
Signing time:             Thu 24 Sep 2026 17:01:47 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:47 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:47 +0000
Files and hashes:         1: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl (hash: FrpNGwz5a3ax1PdcQC9EXlUHovSdsLokzVXCM3MHSTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:bc:c7:12:00:09:9f:2c:6c:b5:12:4c:f4:87:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
        Validity
            Not Before: Sep 24 17:01:47 2026 GMT
            Not After : Sep 25 17:01:47 2026 GMT
        Subject: CN=17db4614bd64e1d20c96c4c660fbb64df62e5540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:c5:c5:36:a8:2b:6d:d8:ff:c8:6e:f8:f5:
                    01:7a:eb:fe:b7:61:72:f2:8d:0d:a4:9a:b0:9f:c4:
                    75:ce:5d:79:91:bc:38:9e:85:f2:94:7e:14:58:0c:
                    61:b3:b2:a7:fa:36:ae:cc:a9:c8:e3:cd:a6:d9:0e:
                    8b:da:ba:fd:d2:36:8b:00:52:65:52:bf:42:33:91:
                    22:3d:88:9b:c8:3b:4d:6a:e3:c8:e7:98:c7:3e:52:
                    e8:2e:c9:a4:76:04:eb:da:8a:36:e7:53:80:b4:e2:
                    68:17:67:52:30:7f:ad:da:2f:e0:e2:85:2f:8e:5f:
                    cb:e7:5a:88:e6:20:44:e2:f8:3b:1c:a8:c1:56:cb:
                    a4:ac:b4:ab:c1:c5:ef:c0:4a:9f:48:c2:4e:ff:cf:
                    72:b1:f8:7c:ab:81:d0:d6:01:7e:cf:ec:69:e0:62:
                    bd:ff:04:b2:bc:3e:0f:1a:f8:73:be:66:7d:6a:f3:
                    17:29:f0:49:58:75:16:8b:0d:e0:8b:95:a6:fc:03:
                    2b:7a:b4:26:d9:51:38:24:69:9d:ce:e4:7c:50:96:
                    07:86:8b:98:7f:3c:5d:e8:01:8c:f0:73:60:70:1b:
                    aa:9b:a4:33:d0:57:8a:47:61:7c:5b:70:08:68:19:
                    03:66:a7:60:78:30:ea:ba:91:d9:13:d0:6d:4c:11:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DB:46:14:BD:64:E1:D2:0C:96:C4:C6:60:FB:B6:4D:F6:2E:55:40
            X509v3 Authority Key Identifier:
                keyid:DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:24:93:57:41:2d:53:5e:33:6b:c2:df:db:30:dd:1c:bf:3b:
         83:a3:bc:03:3b:cf:14:33:55:2b:f6:83:3b:8a:46:12:de:24:
         34:89:82:f4:00:64:73:2c:ea:00:00:5c:77:06:b3:f0:2e:43:
         06:ea:7c:7c:b0:ad:8c:17:50:fb:31:5b:bf:28:69:ab:6d:86:
         be:14:cd:be:a8:81:70:2f:19:f4:20:0f:7b:d0:f2:6c:de:31:
         2a:7e:42:aa:ce:0f:ee:58:ba:32:6d:28:1d:ad:4c:b6:76:55:
         25:73:d6:e4:31:74:d1:84:ef:6c:a5:4e:1f:cf:00:95:75:72:
         ce:b4:35:51:21:d5:e7:83:a0:94:7a:12:29:de:5a:f9:1e:e8:
         57:e6:57:db:d8:db:5e:1e:0a:d3:27:4f:2c:56:ee:52:1d:4c:
         b9:72:97:ac:50:f8:4b:b7:6e:68:c2:c7:14:b3:d5:fc:93:98:
         5d:8c:65:b7:5c:c6:62:63:ce:45:59:6f:5c:a7:f8:e1:8c:f9:
         ef:74:6a:9d:a3:1d:e7:99:89:d5:d8:aa:92:75:42:41:4f:22:
         4c:a5:c9:ea:f5:bc:8f:11:7f:a9:7d:56:ac:8e:12:5f:ee:df:
         c3:4e:4c:92:86:e0:c2:ab:a4:df:3f:d0:ef:67:96:8f:bc:68:
         c4:10:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----