Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File:                     2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier:          8anYhu4BUhVy3qwJSow4Lydfrz3FeNPk4tdumkuwY2Y=
Subject key identifier:   75:8F:B7:AB:49:87:FB:2C:59:77:B6:47:8C:72:F5:A7:2B:C3:23:E8
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer:       /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial:       01A0D1928BD30E58B85D3965EF331A63A1BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number:          12EA
Signing time:             Thu 24 Sep 2026 04:00:37 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:37 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:37 +0000
Files and hashes:         1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: Wv2mwCH6EywKGm52oAuR+53nCdntO6fREtmSabQzVY8=)
                          2: pIcqH37mWZXnad3o1d2yHDKbwH8.roa (hash: z3PK62MjV1YaS1wR+F4I8PDopJNEQIGDsxc/zrbNfnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:8b:d3:0e:58:b8:5d:39:65:ef:33:1a:63:a1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
        Validity
            Not Before: Sep 24 04:00:37 2026 GMT
            Not After : Sep 25 04:00:37 2026 GMT
        Subject: CN=758fb7ab4987fb2c5977b6478c72f5a72bc323e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:e7:e6:d8:02:d0:b0:63:8e:13:cd:c4:58:
                    e2:fe:5e:10:fc:80:c1:76:d4:d5:b0:d2:02:f2:1c:
                    5c:03:53:5e:c6:01:63:04:f9:7b:3a:07:e9:8e:bc:
                    a0:4d:f4:4c:e8:5e:f2:ab:29:ad:ed:4e:52:a9:83:
                    ab:ed:5d:da:aa:02:3c:1b:ee:b8:c2:4c:c0:ae:07:
                    f2:e3:66:8d:06:cb:09:67:d7:77:db:25:54:27:90:
                    e5:01:a4:6d:d5:05:84:17:8d:b7:d8:f1:b1:1c:bf:
                    19:7f:18:36:35:86:71:1f:85:f1:99:9e:d3:0b:c1:
                    95:1d:f5:5d:ac:15:68:cd:81:53:8e:21:ed:a5:da:
                    4b:f3:c0:95:ec:1b:00:37:c9:f9:0f:db:ad:40:f4:
                    c4:64:09:d7:ac:67:b5:64:e6:f8:9c:76:34:d4:1e:
                    1f:31:53:90:5e:22:84:e7:7b:f1:be:a4:ee:17:8d:
                    18:66:08:fb:66:bc:86:cd:f4:04:d4:e5:ee:37:27:
                    be:7e:e3:81:85:92:d2:47:0d:93:c6:f0:8c:e1:1a:
                    c5:27:10:1b:46:59:be:f8:bb:a8:51:b4:2d:0d:52:
                    83:e0:cc:b2:0f:9f:2c:0a:a7:7f:89:31:3f:1b:73:
                    d4:bf:54:fc:e2:77:98:97:59:fa:ba:77:02:03:e4:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8F:B7:AB:49:87:FB:2C:59:77:B6:47:8C:72:F5:A7:2B:C3:23:E8
            X509v3 Authority Key Identifier:
                keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:f2:c3:b7:fb:ac:91:b5:3f:58:fd:d6:6d:04:2d:8e:15:
         bb:3d:c9:b7:c8:90:d6:97:29:32:39:bd:88:1b:f5:15:3d:89:
         f4:ac:fa:d6:aa:2e:26:6a:20:96:13:38:ba:d0:e4:f2:1c:0e:
         20:69:74:9b:06:ff:7e:92:23:fa:22:e1:71:98:1d:79:67:dc:
         86:b3:2b:11:2d:15:44:69:26:70:82:b7:85:2e:76:d5:e1:67:
         67:28:e2:50:c9:88:90:43:a7:f8:44:7e:a4:c1:05:a9:c2:4e:
         b8:0b:39:1b:eb:03:00:87:2a:4b:f8:1e:2f:14:29:8a:84:44:
         cd:62:6c:26:8e:bb:af:83:53:43:ac:52:cb:7e:2d:db:e2:a9:
         39:29:9c:b3:0a:33:da:17:1e:cc:95:61:71:5d:fb:ef:35:6a:
         48:40:9d:a1:e0:af:e4:54:8f:29:b7:b7:e0:04:4f:b1:b1:31:
         48:57:fb:a0:2d:db:d2:30:89:1f:0c:d0:7f:6e:21:98:a1:db:
         ff:b7:86:64:89:76:18:c1:a1:e1:9b:61:a7:1b:0e:21:14:f6:
         b0:3d:c6:03:1f:9e:68:8e:1a:c5:d1:aa:60:ee:12:b8:3e:0a:
         83:06:e9:e3:eb:09:09:e9:66:80:01:2b:b3:c7:a4:82:98:60:
         bc:f3:df:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:06:01 2026 by rpki-client