Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft
File:                     2OAupPOGx89uaQGRtZ4OGm97v1Y.mft (raw, json)
Hash identifier:          5q1lcs+FnJMZ2WCxj2v5cwAhUVs4YvB+je3d8ryVWRs=
Subject key identifier:   24:B0:70:E2:F1:2E:E9:66:E1:3F:0C:B2:0B:D4:E6:E9:35:44:68:39
Authority key identifier: D8:E0:2E:A4:F3:86:C7:CF:6E:69:01:91:B5:9E:0E:1A:6F:7B:BF:56
Certificate issuer:       /CN=d8e02ea4f386c7cf6e690191b59e0e1a6f7bbf56
Certificate serial:       01A0CBC7B312B7566EBDE2B1E1B47DF4BC36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2OAupPOGx89uaQGRtZ4OGm97v1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft
Manifest number:          77
Signing time:             Wed 23 Sep 2026 01:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:57 +0000
Files and hashes:         1: 2OAupPOGx89uaQGRtZ4OGm97v1Y.crl (hash: NVX5+wbxJcLhqo/vJKkDquyT9CscIAGoV8eyD6/8cdI=)
                          2: RMzDvmtOqFCdl5vHYWn-4JPkhBc.asa (hash: 6FBTJTQJCqZB8z+0sqmUko06T36YD4suvUIzStU/iZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2OAupPOGx89uaQGRtZ4OGm97v1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:b3:12:b7:56:6e:bd:e2:b1:e1:b4:7d:f4:bc:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8e02ea4f386c7cf6e690191b59e0e1a6f7bbf56
        Validity
            Not Before: Sep 23 01:00:57 2026 GMT
            Not After : Sep 24 01:00:57 2026 GMT
        Subject: CN=24b070e2f12ee966e13f0cb20bd4e6e935446839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:44:06:c1:4e:a4:55:7f:7c:91:5d:49:af:
                    63:83:23:b2:9a:26:0d:9d:af:49:0e:64:da:31:8e:
                    ab:ff:3f:c6:38:5f:6a:f2:f1:6e:04:e1:43:60:60:
                    70:d3:40:7d:64:1d:f3:c6:c2:ca:3a:da:fd:65:fd:
                    0c:8e:85:f3:2e:82:5f:31:20:41:76:f1:e7:91:0c:
                    c6:49:04:cd:c6:2b:d0:a8:f6:83:0d:d6:84:58:81:
                    c6:39:28:02:95:47:fa:45:8b:dd:77:47:09:76:5f:
                    24:66:22:fc:0a:be:22:e4:f3:d6:23:07:ea:10:7b:
                    4c:40:93:80:80:86:11:23:9a:58:be:2d:12:32:7a:
                    24:ce:2a:49:45:00:30:37:c6:f0:9d:b2:e7:8f:ee:
                    cf:0b:8a:b1:63:45:27:93:21:17:51:b6:11:59:25:
                    40:ac:2e:e3:e1:be:09:10:7f:dd:f0:67:d0:01:59:
                    18:77:57:75:bf:08:d9:e5:29:75:5d:54:9f:c9:09:
                    d8:df:ef:44:3f:8a:3e:ee:83:5e:99:0f:56:b4:c6:
                    cd:ae:6c:5b:b6:ec:01:f7:41:fb:65:7e:75:e4:d9:
                    91:23:fd:22:48:f1:52:55:0b:1a:fe:b0:14:1d:e4:
                    e5:2a:dc:d4:ea:3d:ea:ef:e8:41:76:fd:a3:68:b8:
                    a9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B0:70:E2:F1:2E:E9:66:E1:3F:0C:B2:0B:D4:E6:E9:35:44:68:39
            X509v3 Authority Key Identifier:
                keyid:D8:E0:2E:A4:F3:86:C7:CF:6E:69:01:91:B5:9E:0E:1A:6F:7B:BF:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OAupPOGx89uaQGRtZ4OGm97v1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e5:bc:7c:c3:02:78:ee:6a:c3:57:14:bb:b2:1e:bd:23:87:
         1a:61:59:ef:d1:c2:38:3a:a9:23:57:82:64:3d:2c:a5:15:04:
         d8:b1:c8:48:17:9c:84:18:a2:82:3f:99:18:e8:c1:d9:44:c7:
         51:f3:36:2e:c0:61:d3:c3:8d:3d:16:0a:96:df:fa:90:ec:14:
         87:46:2f:7e:35:31:ec:a8:d5:99:5e:3a:d0:42:36:b8:fd:0a:
         a8:41:e3:cd:b8:c6:7a:17:7a:14:79:11:82:90:56:98:f6:1d:
         9d:fc:8a:a6:28:11:f7:19:57:12:0e:45:d2:3c:92:fa:01:6c:
         c5:f1:06:1a:6a:26:5a:eb:45:f5:3b:b5:ff:bb:e4:88:c5:0e:
         45:b8:f7:90:1f:0a:59:82:71:ad:eb:6d:3b:44:7e:70:58:59:
         b6:29:bc:2f:88:24:b3:b4:1f:0b:5e:88:7a:af:20:79:46:95:
         17:c2:53:04:99:f9:d8:f9:b2:b1:65:41:d0:e2:4e:90:d0:31:
         d2:2f:eb:ac:f3:85:8a:88:78:f5:12:3a:c2:a8:eb:d7:cd:5d:
         1d:7c:14:bb:e6:a0:08:30:e5:30:9f:53:76:20:3d:c9:83:50:
         e5:f7:68:f1:d2:2b:87:3f:3d:70:11:a6:96:88:03:2f:ad:ab:
         d5:03:e7:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx7MSt1ZuveKx4bR99Lw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZTAyZWE0ZjM4NmM3Y2Y2ZTY5MDE5MWI1OWUwZTFhNmY3
YmJmNTYwHhcNMjYwOTIzMDEwMDU3WhcNMjYwOTI0MDEwMDU3WjAzMTEwLwYDVQQD
EygyNGIwNzBlMmYxMmVlOTY2ZTEzZjBjYjIwYmQ0ZTZlOTM1NDQ2ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sdEBsFOpFV/fJFdSa9jgyOymiYN
na9JDmTaMY6r/z/GOF9q8vFuBOFDYGBw00B9ZB3zxsLKOtr9Zf0MjoXzLoJfMSBB
dvHnkQzGSQTNxivQqPaDDdaEWIHGOSgClUf6RYvdd0cJdl8kZiL8Cr4i5PPWIwfq
EHtMQJOAgIYRI5pYvi0SMnokzipJRQAwN8bwnbLnj+7PC4qxY0UnkyEXUbYRWSVA
rC7j4b4JEH/d8GfQAVkYd1d1vwjZ5Sl1XVSfyQnY3+9EP4o+7oNemQ9WtMbNrmxb
tuwB90H7ZX515NmRI/0iSPFSVQsa/rAUHeTlKtzU6j3q7+hBdv2jaLiprQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSwcOLxLulm4T8MsgvU5uk1RGg5MB8GA1UdIwQY
MBaAFNjgLqTzhsfPbmkBkbWeDhpve79WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk9BdXBQT0d4ODl1YVFHUnRaNE9HbTk3djFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84ZTA5YWItNjEwOC00NDIxLWIzOGMt
NGQwNzFjN2I1MTg3LzEvMk9BdXBQT0d4ODl1YVFHUnRaNE9HbTk3djFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84ZTA5YWItNjEwOC00NDIxLWIzOGMtNGQwNzFjN2I1MTg3
LzEvMk9BdXBQT0d4ODl1YVFHUnRaNE9HbTk3djFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOW8fMMC
eO5qw1cUu7IevSOHGmFZ79HCODqpI1eCZD0spRUE2LHISBechBiigj+ZGOjB2UTH
UfM2LsBh08ONPRYKlt/6kOwUh0YvfjUx7KjVmV460EI2uP0KqEHjzbjGehd6FHkR
gpBWmPYdnfyKpigR9xlXEg5F0jyS+gFsxfEGGmomWutF9Tu1/7vkiMUORbj3kB8K
WYJxrettO0R+cFhZtim8L4gks7QfC16Ieq8geUaVF8JTBJn52PmysWVB0OJOkNAx
0i/rrPOFioh49RI6wqjr181dHXwUu+agCDDlMJ9TdiA9yYNQ5fdo8dIrhz89cBGm
logDL62r1QPnPw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:48:34 2026 by rpki-client