Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File:                     2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier:          bn8aVhUquY+Pd0LvF0AOgKbih1sZetPm0B6ZZW8wkZU=
Subject key identifier:   AD:A6:CE:03:07:96:33:2E:62:18:1A:95:AA:6F:DE:C1:1B:D4:21:E7
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer:       /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial:       01A0D07F7EC8944B705A115DDCDAD44086B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 23:00:11 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:11 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:11 +0000
Files and hashes:         1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: K7VFKjwyzR/n9njcpYjQJB0jOsYReoHPgainfl5jzD0=)
                          2: JqePAdgixxFWqA5Nk9EhxTVUR1w.roa (hash: 8V9B6G/PlO/tuR8Ihfw8dzc5qWqPg0dd9Oy1jXd8ubE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:7e:c8:94:4b:70:5a:11:5d:dc:da:d4:40:86:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
        Validity
            Not Before: Sep 23 23:00:11 2026 GMT
            Not After : Sep 24 23:00:11 2026 GMT
        Subject: CN=ada6ce030796332e62181a95aa6fdec11bd421e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:e9:f7:3b:93:0c:2b:b6:93:09:1e:13:22:
                    4c:40:f5:fa:bf:1b:4d:da:e5:72:ba:24:f7:cc:91:
                    46:1b:02:14:4c:90:8b:ab:11:20:4b:9f:8b:ac:39:
                    eb:ae:b8:53:df:36:c4:e9:e1:35:81:50:f9:07:98:
                    08:d8:38:e4:b5:94:73:1d:5b:bc:d2:bf:7f:bd:d2:
                    55:58:2e:41:53:2d:88:fe:f3:a8:12:29:71:b9:36:
                    f6:36:67:b8:85:34:1b:28:b1:6a:0a:97:b0:a6:52:
                    0c:ba:cb:a7:f0:d6:d8:cf:c7:06:60:1a:ea:2b:9c:
                    3d:ad:1f:5b:fe:25:5a:bc:ac:7e:e6:86:2e:f9:42:
                    7d:7c:bb:fc:3c:5f:a9:3a:f8:a9:d7:6b:b8:99:72:
                    7c:22:7d:17:d2:ce:24:fa:c1:9a:99:28:5e:81:ae:
                    30:5f:00:98:33:80:53:1f:97:ba:f8:d2:44:8b:68:
                    b9:65:2b:4a:7c:a6:d3:4d:cc:e0:bd:6c:a8:f1:00:
                    6b:82:bc:2f:38:40:3f:98:81:08:87:52:24:58:77:
                    36:45:1a:70:b5:f8:75:21:88:55:11:e8:64:ed:31:
                    35:f0:b9:c0:0a:a5:3d:9a:17:a0:2d:28:ca:e4:68:
                    46:40:b4:9a:9c:20:dd:8d:3d:21:75:4d:11:44:08:
                    e5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A6:CE:03:07:96:33:2E:62:18:1A:95:AA:6F:DE:C1:1B:D4:21:E7
            X509v3 Authority Key Identifier:
                keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:19:94:46:70:1b:30:ef:95:48:18:d6:fb:10:3e:f6:9f:dd:
         8d:b5:29:c9:7f:16:64:94:cf:f1:0f:ba:b5:75:fb:e6:4c:79:
         dc:39:5b:0b:75:6f:86:b5:b4:ec:15:fb:d1:fb:d9:ad:08:e1:
         96:a3:ae:59:35:ec:d6:2f:99:45:5b:dc:20:ce:e2:f4:c8:ab:
         c3:6e:77:64:e9:94:6c:90:52:b1:12:63:6c:b3:c4:4a:f8:c3:
         ea:8b:a9:a5:21:bd:46:e2:7c:98:ef:b6:27:76:f5:40:c1:96:
         b9:65:c5:9c:c3:54:f9:38:96:3c:9f:37:4c:ec:51:9e:94:de:
         50:53:01:43:c6:75:73:a5:58:28:57:39:35:ba:9c:72:4f:5e:
         af:aa:20:af:a3:d8:bb:0e:d7:fe:84:35:86:de:46:48:4f:96:
         d9:9c:3e:db:e9:ef:7d:da:40:e6:5c:82:31:81:34:65:6e:ee:
         66:92:d4:6b:e9:c3:4c:d5:2e:ce:0e:55:5f:11:5a:09:3d:35:
         1f:27:8c:c1:5d:02:bd:bd:d7:95:af:42:c2:2f:d2:e0:ab:f3:
         fe:4a:5a:2f:40:dc:76:7d:1c:38:73:e4:e6:3d:08:cf:18:14:
         0e:25:7a:85:dd:db:be:1a:3c:dd:ef:85:52:09:54:f1:9f:c9:
         e3:17:50:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:08:38 2026 by rpki-client