Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File:                     2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier:          irRXey1DINnEYL6ymNcVNtS1TUuhurznpfosYpTsKMI=
Subject key identifier:   1D:A9:24:88:F5:3C:DC:0F:4D:E8:3C:7C:36:CF:B4:CE:7C:C5:EF:D2
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer:       /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial:       01A0D2013C777B1433C40E308CFFE66D97B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 06:01:31 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:31 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:31 +0000
Files and hashes:         1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: /LnXQTmBmj5Y8lEbo3TH9FbBs8Ui7lIYEn1o1IE1614=)
                          2: VEbdeDBfoS7OV3q8Pyt7XMZlTvw.roa (hash: ryGpV2N0yjPTa2J+772hPmPtDVApuFyLbz9EHlqw2ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:01:3c:77:7b:14:33:c4:0e:30:8c:ff:e6:6d:97:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
        Validity
            Not Before: Sep 24 06:01:31 2026 GMT
            Not After : Sep 25 06:01:31 2026 GMT
        Subject: CN=1da92488f53cdc0f4de83c7c36cfb4ce7cc5efd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:d4:45:70:69:7a:34:1f:7f:f7:f7:e5:73:
                    4c:f0:b9:d8:7d:3d:4c:38:6e:11:5c:a7:bb:82:ae:
                    79:9f:a7:04:cd:be:52:2e:58:70:01:d7:90:f3:34:
                    61:ae:31:6f:61:66:a8:a3:d6:61:3c:9a:8a:7f:d0:
                    73:0d:99:1d:f8:5d:52:0a:ee:2c:0a:29:25:79:b6:
                    33:4a:80:41:b7:8f:6e:35:08:15:56:82:cf:26:88:
                    6b:80:dd:ad:1f:1f:0d:d7:8d:fe:96:9f:1f:02:35:
                    a0:38:35:70:9e:e2:76:bc:f6:4c:4b:cc:65:c0:59:
                    6d:b0:05:62:97:25:d4:15:38:23:05:34:49:99:ba:
                    c3:8a:5e:4b:b0:24:a9:ff:95:4d:87:a3:60:05:8a:
                    78:80:c8:c7:f0:74:71:de:82:a6:3a:04:74:0e:6e:
                    80:77:57:c8:51:2a:cf:40:1f:3b:c6:c5:7a:61:cb:
                    28:1f:d6:72:7c:31:22:df:99:1c:af:cf:67:22:8a:
                    a3:64:2f:f1:15:60:2b:75:de:ee:75:db:8e:e0:c2:
                    5e:8c:12:92:18:00:87:2d:bd:75:f7:ef:b5:a4:22:
                    c2:5c:e2:dc:68:24:b6:6e:0d:6f:b9:c9:68:92:58:
                    03:46:23:6a:ad:7c:b1:ba:0e:88:60:7e:73:bb:ad:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A9:24:88:F5:3C:DC:0F:4D:E8:3C:7C:36:CF:B4:CE:7C:C5:EF:D2
            X509v3 Authority Key Identifier:
                keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f2:9e:3e:b4:60:e5:48:d0:c4:24:56:98:34:75:a8:f1:6c:
         46:8e:dd:a2:45:f3:ba:29:b0:d9:ed:03:ab:47:c4:a0:97:02:
         66:a1:0f:49:ae:4c:14:0e:12:c6:3b:f6:0b:97:74:45:7b:85:
         f0:c6:1e:54:87:f0:5f:34:d7:28:c7:4c:17:cd:00:4b:5c:c2:
         4e:b3:b5:ec:82:f3:2a:2e:13:94:5e:c3:7f:a7:7a:b3:5a:00:
         c1:a9:4c:7f:cf:87:e9:01:7b:fe:18:50:4e:ed:12:23:d0:65:
         a4:a8:5d:40:9a:fb:1c:1a:7e:95:bf:7b:79:c4:f4:5f:e5:06:
         1f:7a:49:ea:e7:1d:29:68:b1:0b:c4:fb:59:ee:f2:27:74:7e:
         7a:27:ca:2b:eb:49:a6:43:b8:76:3f:c5:01:aa:2a:a1:50:eb:
         6b:1a:d3:e7:c9:44:7d:12:df:40:a3:7b:df:12:9e:db:26:fb:
         ea:83:61:8e:86:49:0a:94:56:84:04:cf:64:d8:31:03:93:66:
         0c:8d:9e:28:27:e5:0b:05:3b:1b:85:06:a0:90:56:b8:1f:12:
         a0:1b:01:87:b4:ea:19:98:f6:a1:8e:bc:08:82:85:3e:5f:df:
         25:c6:25:3c:88:4d:66:98:6e:63:10:45:41:47:35:4a:c1:51:
         26:e6:bc:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSATx3exQzxA4wjP/mbZewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWRhMzIxODQzZjlmYWQxMzhlNjExNWQ4NWJlZThhOTIw
YjhlMWQwHhcNMjYwOTI0MDYwMTMxWhcNMjYwOTI1MDYwMTMxWjAzMTEwLwYDVQQD
EygxZGE5MjQ4OGY1M2NkYzBmNGRlODNjN2MzNmNmYjRjZTdjYzVlZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGLURXBpejQff/f35XNM8LnYfT1M
OG4RXKe7gq55n6cEzb5SLlhwAdeQ8zRhrjFvYWaoo9ZhPJqKf9BzDZkd+F1SCu4s
CiklebYzSoBBt49uNQgVVoLPJohrgN2tHx8N143+lp8fAjWgODVwnuJ2vPZMS8xl
wFltsAVilyXUFTgjBTRJmbrDil5LsCSp/5VNh6NgBYp4gMjH8HRx3oKmOgR0Dm6A
d1fIUSrPQB87xsV6YcsoH9ZyfDEi35kcr89nIoqjZC/xFWArdd7udduO4MJejBKS
GACHLb119++1pCLCXOLcaCS2bg1vucloklgDRiNqrXyxug6IYH5zu61WSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2pJIj1PNwPTeg8fDbPtM58xe/SMB8GA1UdIwQY
MBaAFNsdoyGEP5+tE45hFdhb7oqSC44dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAt
NzM5ZDYyNjY5ZjkxLzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAtNzM5ZDYyNjY5Zjkx
LzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/KePrRg
5UjQxCRWmDR1qPFsRo7dokXzuimw2e0Dq0fEoJcCZqEPSa5MFA4Sxjv2C5d0RXuF
8MYeVIfwXzTXKMdMF80AS1zCTrO17ILzKi4TlF7Df6d6s1oAwalMf8+H6QF7/hhQ
Tu0SI9BlpKhdQJr7HBp+lb97ecT0X+UGH3pJ6ucdKWixC8T7We7yJ3R+eifKK+tJ
pkO4dj/FAaoqoVDraxrT58lEfRLfQKN73xKe2yb76oNhjoZJCpRWhATPZNgxA5Nm
DI2eKCflCwU7G4UGoJBWuB8SoBsBh7TqGZj2oY68CIKFPl/fJcYlPIhNZphuYxBF
QUc1SsFRJua8uA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:57:26 2026 by rpki-client