Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
File:                     2V_Z-7sug4agu3amyEH8aKfD65g.mft (raw, json)
Hash identifier:          H/29o5JuwqhOzIH7gRX14rpc47TnlentF7SuGdk2M7E=
Subject key identifier:   34:E8:E2:E4:71:C9:C0:74:AB:9F:A5:25:9F:38:66:6F:94:D4:2A:A8
Authority key identifier: D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98
Certificate issuer:       /CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
Certificate serial:       01A0D0B6F193AE18EE14D10F77A7A8793E0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
Manifest number:          06BD
Signing time:             Thu 24 Sep 2026 00:00:45 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:45 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:45 +0000
Files and hashes:         1: 2V_Z-7sug4agu3amyEH8aKfD65g.crl (hash: Pm/j0NLW/W3DKydI4n8jR3ZGr6h43YN6uFs/tQ7Tfm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:f1:93:ae:18:ee:14:d1:0f:77:a7:a8:79:3e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
        Validity
            Not Before: Sep 24 00:00:45 2026 GMT
            Not After : Sep 25 00:00:45 2026 GMT
        Subject: CN=34e8e2e471c9c074ab9fa5259f38666f94d42aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:13:6c:f5:bd:e5:c5:3b:6f:2a:0a:b5:17:
                    5d:b6:c3:a6:35:8d:66:01:dc:75:88:d1:96:06:98:
                    b3:87:e9:cb:50:1d:0c:55:f7:be:c7:aa:e2:7b:b8:
                    8b:5c:ff:45:b2:f0:5b:6c:9d:3f:2f:a7:66:8d:59:
                    ec:d5:58:90:7c:ef:34:39:af:38:e7:55:62:61:46:
                    f6:d6:df:11:ab:48:e9:bf:39:fd:76:36:5b:e1:ee:
                    13:3f:2c:d2:24:07:88:6e:fa:bc:64:91:59:af:8e:
                    aa:a6:77:ef:f0:c0:80:d5:cd:66:e0:f7:34:9e:92:
                    98:5f:ce:da:3b:cc:06:54:85:b8:f6:e6:9a:bc:1c:
                    23:53:3d:21:6b:aa:45:2e:0b:68:4e:81:25:0d:0e:
                    93:2f:65:d4:99:81:4c:8c:ed:48:39:0d:17:8f:b6:
                    6b:03:ce:14:06:7e:28:07:c6:d7:83:37:e4:76:88:
                    5c:2f:e8:23:8b:a6:60:56:e0:f4:d3:71:24:b9:28:
                    ae:e5:6f:30:99:43:44:b6:d1:25:ca:b6:e1:d5:0e:
                    84:1f:d0:bc:96:4b:76:10:ac:c1:af:0a:8b:00:3a:
                    99:f4:ee:38:da:88:cf:1d:ae:a5:1d:fa:d1:4c:e2:
                    b6:47:87:47:ed:bf:32:09:be:f9:93:34:76:c0:c1:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E8:E2:E4:71:C9:C0:74:AB:9F:A5:25:9F:38:66:6F:94:D4:2A:A8
            X509v3 Authority Key Identifier:
                keyid:D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:26:e7:a4:a3:d2:b3:ef:c9:f5:9d:a2:4f:08:7b:20:29:
         a4:44:bf:b6:7b:70:a6:04:d0:c1:34:49:46:ab:71:32:fd:f7:
         0d:23:60:4a:ff:75:74:a0:25:1a:c4:d7:eb:0e:c1:d2:47:48:
         46:0f:af:c6:ff:a0:dc:07:76:72:ee:9b:9e:17:a3:27:8c:13:
         5a:9a:0f:e6:25:03:d1:9f:a7:ce:20:5e:49:63:4b:fe:0f:c6:
         4f:df:4a:1b:6e:53:a4:ec:2b:42:59:f3:f2:d7:af:77:c8:01:
         e1:58:96:5e:6b:3c:92:f2:65:1d:0a:80:71:3c:49:ed:c0:34:
         53:da:a1:c9:a2:95:0a:b3:e3:e1:7b:3c:03:f4:c5:cd:6b:6d:
         c4:e8:79:dc:25:87:1c:63:3a:1e:45:9d:fe:16:c8:94:83:db:
         96:c1:05:f1:a0:f9:98:58:7b:3f:1e:af:d5:85:fd:4f:ac:fc:
         79:c9:19:bd:e9:e3:64:95:d0:a2:ab:fe:6f:24:6d:ab:d1:d2:
         01:67:b2:90:d3:d7:b9:f0:4b:4a:0a:a3:39:84:ff:0f:4a:54:
         0a:5e:8a:dd:f4:cd:36:c9:00:a9:f2:b7:38:fc:cc:ed:26:4d:
         47:72:3d:cc:27:57:8a:34:ce:81:3d:6c:36:94:41:37:c3:3c:
         41:73:02:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQtvGTrhjuFNEPd6eoeT4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NWZkOWZiYmIyZTgzODZhMGJiNzZhNmM4NDFmYzY4YTdj
M2ViOTgwHhcNMjYwOTI0MDAwMDQ1WhcNMjYwOTI1MDAwMDQ1WjAzMTEwLwYDVQQD
EygzNGU4ZTJlNDcxYzljMDc0YWI5ZmE1MjU5ZjM4NjY2Zjk0ZDQyYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8sTbPW95cU7byoKtRddtsOmNY1m
Adx1iNGWBpizh+nLUB0MVfe+x6rie7iLXP9FsvBbbJ0/L6dmjVns1ViQfO80Oa84
51ViYUb21t8Rq0jpvzn9djZb4e4TPyzSJAeIbvq8ZJFZr46qpnfv8MCA1c1m4Pc0
npKYX87aO8wGVIW49uaavBwjUz0ha6pFLgtoToElDQ6TL2XUmYFMjO1IOQ0Xj7Zr
A84UBn4oB8bXgzfkdohcL+gji6ZgVuD003EkuSiu5W8wmUNEttElyrbh1Q6EH9C8
lkt2EKzBrwqLADqZ9O442ojPHa6lHfrRTOK2R4dH7b8yCb75kzR2wME17QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTo4uRxycB0q5+lJZ84Zm+U1CqoMB8GA1UdIwQY
MBaAFNlf2fu7LoOGoLt2pshB/Ginw+uYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZfWi03c3VnNGFndTNhbXlFSDhhS2ZENjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kMzIyMGMtNGQ2Ni00ZDRjLTkzNTgt
MzIwZGYyZWIwZmQyLzEvMlZfWi03c3VnNGFndTNhbXlFSDhhS2ZENjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kMzIyMGMtNGQ2Ni00ZDRjLTkzNTgtMzIwZGYyZWIwZmQy
LzEvMlZfWi03c3VnNGFndTNhbXlFSDhhS2ZENjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2sm56Sj
0rPvyfWdok8IeyAppES/tntwpgTQwTRJRqtxMv33DSNgSv91dKAlGsTX6w7B0kdI
Rg+vxv+g3Ad2cu6bnhejJ4wTWpoP5iUD0Z+nziBeSWNL/g/GT99KG25TpOwrQlnz
8tevd8gB4ViWXms8kvJlHQqAcTxJ7cA0U9qhyaKVCrPj4Xs8A/TFzWttxOh53CWH
HGM6HkWd/hbIlIPblsEF8aD5mFh7Px6v1YX9T6z8eckZvenjZJXQoqv+byRtq9HS
AWeykNPXufBLSgqjOYT/D0pUCl6K3fTNNskAqfK3OPzM7SZNR3I9zCdXijTOgT1s
NpRBN8M8QXMC/g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:03:59 2026 by rpki-client