Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File:                     2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier:          UXiMS6l9NFwDYBlkyVC64X6ngj1k1cBnp4MtRTXnGL4=
Subject key identifier:   E6:E7:8A:BB:C9:C4:0F:CD:82:9E:D8:62:43:CE:E7:8E:3C:28:AF:79
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer:       /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial:       01A0EB1BD6BA8C2C284212B3EF9C652A8AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number:          1A78
Signing time:             Tue 29 Sep 2026 03:01:05 +0000
Manifest this update:     Tue 29 Sep 2026 03:01:05 +0000
Manifest next update:     Wed 30 Sep 2026 03:01:05 +0000
Files and hashes:         1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: nZ5Lj5BqWweSudbQHgMmWYwzcTLBJGBl2lRMqMi/u7U=)
                          2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:1b:d6:ba:8c:2c:28:42:12:b3:ef:9c:65:2a:8a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
        Validity
            Not Before: Sep 29 03:01:05 2026 GMT
            Not After : Sep 30 03:01:05 2026 GMT
        Subject: CN=e6e78abbc9c40fcd829ed86243cee78e3c28af79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:20:26:7b:81:75:71:40:71:ac:46:c0:12:
                    05:b1:0b:70:b5:6c:b2:0b:51:c7:76:c7:c4:ff:43:
                    8f:9c:fc:17:90:94:2d:66:04:d4:51:90:f1:6f:88:
                    44:f6:12:31:a7:7d:a8:f3:a2:f3:a1:d4:e3:52:6c:
                    21:c7:11:7b:99:60:68:fc:51:2a:3f:b2:9c:63:7e:
                    28:af:e9:b7:8b:2e:ec:ce:66:76:55:bc:21:4c:21:
                    e0:36:0f:a0:a4:29:ab:25:2c:96:6e:75:27:d3:6f:
                    4a:bb:e0:36:37:9e:b5:73:0f:b1:58:b1:17:05:0a:
                    93:4d:c4:b1:65:9d:f0:82:bc:e5:16:26:a1:42:72:
                    b6:7d:15:97:e2:ca:15:81:d9:16:60:70:ab:a2:04:
                    8c:1e:b9:16:cd:33:6a:e9:39:a7:b0:2c:46:c6:74:
                    b3:a6:c5:8a:2e:71:57:12:36:9c:ac:9b:61:4f:ee:
                    b7:2e:31:ce:00:76:23:67:12:9a:68:66:7a:e0:17:
                    8f:d4:c1:ad:08:12:92:c6:40:47:5a:58:a7:cf:03:
                    4a:0b:ab:b0:e7:06:cf:c0:27:fa:8c:dd:4c:45:1e:
                    08:4f:83:36:80:a2:43:bf:37:49:13:8c:3f:1f:20:
                    0e:1e:50:58:51:da:67:8b:44:cb:da:ad:7c:68:f2:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E7:8A:BB:C9:C4:0F:CD:82:9E:D8:62:43:CE:E7:8E:3C:28:AF:79
            X509v3 Authority Key Identifier:
                keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:24:a6:4a:43:7c:52:ed:53:45:fe:ed:01:a5:1c:7f:11:89:
         7a:10:f3:97:ef:85:22:04:2d:bc:07:ec:fe:9a:0c:32:9b:03:
         87:fb:f5:fc:be:0e:c8:a7:2c:02:64:83:42:b3:e0:5b:b1:55:
         8e:51:e1:b1:77:84:2e:f6:93:52:4d:c0:5b:f0:8d:3a:9c:00:
         fc:a5:59:f1:9e:46:f6:5d:bd:a4:ac:49:ea:ab:ea:06:10:16:
         80:f3:1e:2d:fe:3a:6f:a2:79:c7:df:28:d7:35:89:1c:10:74:
         ce:b3:94:30:47:3d:d2:3f:81:76:30:af:07:3a:94:c3:97:4d:
         e3:02:fc:64:c5:9b:00:26:b1:b3:58:ec:b3:a6:f2:c8:f3:c7:
         65:f8:e3:0a:e9:81:cc:91:01:9e:c5:0f:c4:3f:49:57:23:c1:
         df:3c:4e:93:e1:04:b7:27:89:b2:69:f6:b0:f4:0f:6a:86:67:
         0d:24:19:4e:9d:bf:c0:15:14:c2:fe:30:c7:4a:1a:9a:66:f9:
         7f:48:9f:4c:07:f7:0c:ac:be:97:9e:6d:12:f8:28:66:be:83:
         fe:e0:49:80:b4:78:f2:a2:41:b9:c0:17:26:34:e1:6c:95:1d:
         9e:17:e9:62:cf:72:b9:4b:f7:c4:c2:25:f5:70:6d:e2:63:1d:
         d2:66:3e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:12:40 2026 by rpki-client