Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File:                     2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier:          sVB5qJGijJgitZVzfzW9aL74KUf2oV48+Y5qUgvpZ7w=
Subject key identifier:   CC:78:23:48:96:77:07:D0:16:54:38:31:52:AF:D7:14:E5:C2:5E:AD
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer:       /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial:       01A0C9A21E04A55FC4ED7174CD18702ED83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number:          1133
Signing time:             Tue 22 Sep 2026 15:00:39 +0000
Manifest this update:     Tue 22 Sep 2026 15:00:39 +0000
Manifest next update:     Wed 23 Sep 2026 15:00:39 +0000
Files and hashes:         1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: 28+MpsF9QSVlL9YYhMTouyvlANrOyyjINygWjL6cuLE=)
                          2: Mt9Wz8CiJyE1vhw9jtbceg6H-ug.roa (hash: fJNiy9ne0mTwA4HHTmShZYQguekNk9G6a4WDwn5xHSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a2:1e:04:a5:5f:c4:ed:71:74:cd:18:70:2e:d8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
        Validity
            Not Before: Sep 22 15:00:39 2026 GMT
            Not After : Sep 23 15:00:39 2026 GMT
        Subject: CN=cc782348967707d01654383152afd714e5c25ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:69:ce:96:b8:d2:22:42:bb:2e:48:40:75:
                    83:fa:09:a2:24:1c:e3:a1:75:db:57:69:ff:f6:42:
                    e4:ca:ee:9a:fe:a5:eb:28:db:ae:9b:6a:ee:20:ce:
                    f9:3f:83:30:bf:09:b4:a5:40:27:a8:d7:9c:fd:c6:
                    87:d1:7a:46:72:c6:ed:bd:55:fc:91:f6:92:61:46:
                    12:52:59:d1:ef:27:2c:f9:a9:86:3d:5e:74:b7:d3:
                    5e:bd:7f:ce:97:97:ac:c7:83:52:fc:62:82:fc:e7:
                    ce:68:e8:fa:e1:a7:6c:46:46:76:91:1f:93:4d:01:
                    e1:5b:5e:d2:04:26:06:0d:a0:67:7b:ba:53:c7:4e:
                    0c:35:94:3b:f4:34:75:98:9e:9a:b2:41:f4:02:1b:
                    ed:3f:c4:ef:9d:20:f5:1b:05:d6:60:8d:cb:1d:35:
                    7b:ad:dd:71:7c:e5:b2:73:c7:8d:52:72:e8:f9:dd:
                    c8:ba:e7:76:8a:fd:4c:6a:e7:db:67:5f:ad:7b:24:
                    a3:25:70:aa:b8:f1:58:8e:d8:61:12:ff:d8:23:0f:
                    cb:56:b8:d8:d9:f3:6c:4b:9d:d1:06:a7:3f:7d:77:
                    99:a7:96:e2:81:7b:be:e4:03:e2:af:51:12:97:74:
                    73:97:a5:3b:59:e2:d9:53:d0:aa:95:a1:cb:9a:ad:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:78:23:48:96:77:07:D0:16:54:38:31:52:AF:D7:14:E5:C2:5E:AD
            X509v3 Authority Key Identifier:
                keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:67:a2:60:d5:df:41:a1:d1:aa:a4:e0:fb:1c:f4:63:b5:35:
         b3:7d:99:40:c5:19:2b:19:17:85:74:34:a1:4b:e9:09:aa:60:
         43:75:5e:ce:82:3a:9e:8d:96:05:84:15:5d:55:d1:a8:c4:55:
         c2:a5:a7:be:b5:63:10:8c:31:9d:63:a7:50:66:49:e4:72:ae:
         af:d6:01:f5:55:a6:d0:cf:88:6b:c0:99:9e:47:19:e0:16:5a:
         53:87:d6:a8:53:ca:3e:98:4c:ae:5e:75:1d:47:30:8a:89:ba:
         0f:9d:28:d3:4c:45:ec:11:90:fa:ad:ba:b7:d8:40:90:c1:e2:
         1c:15:47:dc:8b:72:6f:2f:e1:82:8a:86:2b:ec:31:66:c2:08:
         8f:8e:58:f1:2b:b4:2e:50:4d:be:b4:98:cb:2e:7d:ab:16:b9:
         99:fc:86:4d:49:b0:64:3e:b7:c1:c0:2b:32:e6:a2:43:d5:20:
         be:47:cc:03:4b:42:08:75:f2:5e:dc:14:ae:34:2b:ea:6c:31:
         db:20:d8:83:76:77:b4:b9:24:8e:a4:0d:74:71:dc:f3:a9:6a:
         8a:90:f6:29:71:94:ba:ad:4b:7e:7c:15:af:4d:00:a8:c0:2b:
         c9:7b:d0:1c:cd:7a:72:dd:9d:74:a5:4f:68:18:9f:ff:f6:02:
         6c:b0:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:37 2026 by rpki-client