Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File:                     2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier:          D0bJeg3/lNlw3Jo01fzvjjcRjJU9mtRk1dDk1PrpkCE=
Subject key identifier:   D4:58:0F:FE:AB:60:FE:F1:92:71:48:A7:8F:87:5B:97:A8:9D:D4:2F
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer:       /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial:       01A0CDEC569635E6B4FD8F7374AC7B0121B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 11:00:12 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:12 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:12 +0000
Files and hashes:         1: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: dDDkYvN8HF0+kNnf0OY1mhLlSQWKRd0afaXzepWP7oo=)
                          2: YhhsybWAzHa63YaPvrgi4sjbjbI.roa (hash: T2MXxILyF0Me/fqVllL7VCaBjrZcghSwrlaqWl2tPkE=)
                          3: _kAyTCQof302et37HvM6mt9jgEM.roa (hash: 424VJZvw+ZmGcQi0r8Ayp33km0iNLVdVw38YU4HDjGU=)
                          4: wxi4D1t6N5E-A8MwJ6AwFD8d4kM.roa (hash: 391+SiltY2IpnHulRAud0EhzjNpX6Vgh8CqJXOeyKCI=)
                          5: xMne1SAMH-NmiH2AwUzcwkdTgl8.roa (hash: 2xRNoJJDPdFtBinldE8KCt/I2UuqqqoHmvwM/zMncZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:56:96:35:e6:b4:fd:8f:73:74:ac:7b:01:21:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
        Validity
            Not Before: Sep 23 11:00:12 2026 GMT
            Not After : Sep 24 11:00:12 2026 GMT
        Subject: CN=d4580ffeab60fef1927148a78f875b97a89dd42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:95:ab:48:ae:dd:53:75:6d:30:64:94:e1:
                    2b:79:a9:38:0a:b5:d4:9f:da:ce:6d:04:d9:d5:72:
                    4b:68:70:5c:fa:2f:f0:e8:9c:85:ba:33:05:37:45:
                    b0:c5:0c:96:cc:41:fd:6e:a9:ab:8c:16:d5:03:3c:
                    2c:c7:dc:a4:6b:75:32:ac:e1:72:02:2f:72:34:f9:
                    dc:70:48:30:a3:62:5c:01:8d:2f:f5:b3:c3:94:c8:
                    3c:16:a0:dd:5b:69:f1:0b:b0:1a:a7:0c:32:11:24:
                    90:b0:84:83:e3:85:1c:c5:50:3a:f4:4d:0c:37:79:
                    ae:0d:f3:c0:68:20:76:8d:a2:ca:c2:4a:af:e2:6d:
                    1f:f6:09:bf:ba:d0:90:c4:4a:e1:20:a7:5a:e6:4d:
                    00:d0:08:a5:40:e5:56:ca:be:94:c3:89:15:a2:55:
                    26:66:77:ff:28:0b:71:ef:05:04:00:71:68:b7:b6:
                    7c:1c:6b:ce:6f:ea:4d:5c:c6:8f:47:6b:b9:06:da:
                    aa:92:1b:9d:a6:9c:86:9c:b9:24:19:73:1b:a9:9e:
                    c5:e9:a3:73:86:50:25:1b:5f:f1:34:b9:e4:bb:2d:
                    0d:29:4e:a8:47:65:83:a4:3a:7c:2c:a8:85:94:4b:
                    f9:58:9f:1e:07:d1:f3:55:bf:98:74:eb:b7:e3:76:
                    eb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:58:0F:FE:AB:60:FE:F1:92:71:48:A7:8F:87:5B:97:A8:9D:D4:2F
            X509v3 Authority Key Identifier:
                keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:57:de:b1:bf:81:2e:23:3b:0e:d3:dc:1e:d6:ae:cc:94:b4:
         1e:3c:23:3f:89:69:2c:2c:90:c8:9c:32:12:64:66:72:3a:b1:
         81:6c:01:8a:af:e9:24:46:e6:a2:af:e5:e8:1f:2a:e8:28:bb:
         26:f8:8c:30:49:e5:c9:b8:14:cb:1a:06:44:e9:8d:a2:66:7c:
         77:79:18:29:f8:b1:f9:12:4c:86:8f:e0:8b:1d:1d:94:03:fd:
         e9:ad:0b:55:93:fb:ed:ca:2c:4e:b3:2b:1e:74:c0:76:a4:17:
         b3:ca:ff:8b:b2:9b:ba:ca:bc:b2:20:d9:39:88:f8:8b:44:60:
         de:68:66:08:f3:58:24:59:af:bd:ea:75:3c:c0:71:df:0d:24:
         8a:e4:80:7c:94:42:91:71:76:c4:bc:cf:cc:2d:97:58:27:77:
         ad:4b:30:fa:14:48:57:a4:89:77:1b:72:d2:77:44:e4:a5:34:
         44:60:41:27:9b:79:e8:82:16:79:9a:9f:54:8e:3b:0b:82:2b:
         ee:45:4b:79:4f:99:7e:db:4e:92:cb:4b:cb:d9:a7:f0:9c:f7:
         05:d0:46:2d:63:88:db:c4:7d:f8:d2:4f:e8:e1:6b:1c:79:c5:
         14:68:ae:4b:89:bd:cf:a4:35:f4:7e:c6:86:9a:89:2d:47:2e:
         fd:c1:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:24:11 2026 by rpki-client