Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File:                     2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier:          1eO/9PjObgfL6JePkEh/jSaAsaa4JHQhXVzOaadGGfE=
Subject key identifier:   2E:D1:9C:29:63:9C:E8:63:13:22:15:A0:3A:A9:A1:F8:D2:58:77:C4
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer:       /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial:       01A0D0EDA3F942EFA40E93CBB0743377FE64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 01:00:29 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:29 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:29 +0000
Files and hashes:         1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: eQkgX9qW63o5vGDd1PjRq6LisPXeY7aFdiOfSLnhTmo=)
                          2: shhYy56z_L8Lryb0eSAWTWJjZg0.roa (hash: wq6nVcRoqKZdcrByoBy3Jll3ZeZn4RTjcVn3BWiF//I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:a3:f9:42:ef:a4:0e:93:cb:b0:74:33:77:fe:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
        Validity
            Not Before: Sep 24 01:00:29 2026 GMT
            Not After : Sep 25 01:00:29 2026 GMT
        Subject: CN=2ed19c29639ce863132215a03aa9a1f8d25877c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:a1:a9:f2:ff:74:9c:c6:0a:ab:db:91:94:
                    8a:47:62:71:d5:b0:1c:1f:95:06:93:1f:e9:8a:4d:
                    50:a9:18:b8:95:f4:cd:52:c4:d1:be:bb:2f:2a:ea:
                    75:7e:a9:7a:2e:0f:01:dd:74:ff:78:93:c5:29:c3:
                    77:7a:e3:25:a7:b2:fb:ab:eb:83:30:81:39:41:91:
                    1b:1a:fa:b7:e2:fb:e9:6b:fe:a8:73:42:bd:cb:18:
                    5a:a4:d1:86:3e:90:5d:ed:05:ce:b8:6e:03:b5:fd:
                    a8:c4:f7:ee:f4:f5:66:9a:f4:49:67:75:be:d3:4e:
                    20:e3:9f:b8:6a:bf:2c:56:f3:92:1e:4a:5b:db:4c:
                    d1:3f:b1:15:cb:cc:d9:97:7f:b0:d4:f7:38:43:76:
                    d9:ff:02:18:11:6f:a1:61:d4:54:f5:0b:a0:4a:7e:
                    5d:00:f1:3d:7b:b1:b6:c5:49:a7:5b:bb:9d:e9:49:
                    a0:9e:ff:29:b0:00:bb:7a:fa:16:b3:0f:e1:7f:d9:
                    b5:d1:17:0a:54:13:7a:36:9d:cb:d4:46:98:2b:7e:
                    99:e3:05:20:46:0c:49:53:0a:0f:d7:3a:b0:be:aa:
                    57:ee:ac:72:36:c3:1a:dd:87:be:d3:5f:f0:0a:b3:
                    cd:6f:c9:6b:78:f2:ed:e6:d6:26:84:3c:51:97:46:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D1:9C:29:63:9C:E8:63:13:22:15:A0:3A:A9:A1:F8:D2:58:77:C4
            X509v3 Authority Key Identifier:
                keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5f:87:bb:23:8b:ed:6d:cb:05:c8:03:e7:a8:4b:fa:c9:49:
         1c:63:1b:9b:db:0a:6e:d1:37:09:ec:8a:70:d3:51:ef:ae:df:
         6f:45:e0:03:6c:c1:53:c1:6c:14:51:14:6b:aa:f1:e4:01:15:
         79:ec:67:c7:75:b4:b5:34:7b:26:b7:08:87:86:d0:f6:75:08:
         62:46:cd:a6:b8:43:07:8a:c4:e3:8a:02:36:3a:63:15:e1:7a:
         df:99:f4:df:b2:c4:65:72:27:81:f0:ed:4e:b2:b1:33:9c:d6:
         e7:da:ba:c1:1d:f3:d0:46:6d:0a:55:da:21:63:5e:d8:d5:e0:
         ed:11:fa:1d:82:92:84:a9:38:a2:bb:60:9d:35:f1:29:27:e4:
         2d:5c:b5:f4:d8:6b:4e:b7:34:cf:ae:0d:a5:eb:53:6e:25:9f:
         3d:6f:cf:70:a3:d6:4a:c7:1d:b2:7a:8a:bf:b1:3e:d1:69:27:
         78:31:37:95:7f:a2:3b:f8:29:60:8a:af:ff:06:d5:9d:1a:f7:
         24:c3:56:aa:d9:7e:cc:2d:00:1d:63:64:bd:13:bd:d4:8e:7e:
         9d:1f:59:44:0b:98:93:94:80:9a:cb:84:f6:db:ef:8b:3d:a7:
         35:5f:c7:1e:20:4c:b5:da:e2:4d:c0:37:4e:14:09:6f:8e:96:
         bb:8e:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:44:07 2026 by rpki-client