Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
File:                     2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft (raw, json)
Hash identifier:          glUSAe7yTsT9L0H2u80xNSrL3dwOd9qaT3mm9FC7n48=
Subject key identifier:   43:7E:03:22:80:25:3D:CE:E5:39:76:E5:DA:7D:5C:15:F2:9F:80:B2
Authority key identifier: D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64
Certificate issuer:       /CN=d99becd088794b11daf34c7f54e59f6939fe9864
Certificate serial:       01A0CE91D6205120123E3B03069ABB9FA6EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
Manifest number:          0788
Signing time:             Wed 23 Sep 2026 14:00:58 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:58 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:58 +0000
Files and hashes:         1: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl (hash: Qn+vjDJC3LEwcfCBM2Ny57Pzphz5Qh7J6ppPVxjIgO4=)
                          2: S6JRzdPpGObhz0VldQpk2KnV2uI.roa (hash: lJGmLlkU+7M1+xw3eyjs66v6c+81KsPPae1DO4AI0OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:d6:20:51:20:12:3e:3b:03:06:9a:bb:9f:a6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99becd088794b11daf34c7f54e59f6939fe9864
        Validity
            Not Before: Sep 23 14:00:58 2026 GMT
            Not After : Sep 24 14:00:58 2026 GMT
        Subject: CN=437e032280253dcee53976e5da7d5c15f29f80b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:0e:e6:2b:a1:5a:0b:49:dc:86:56:56:a7:
                    02:79:56:4a:65:e8:e7:1b:1d:3a:21:80:70:30:e1:
                    e3:bd:9e:dd:83:7f:34:4e:5a:67:35:87:12:42:96:
                    4e:cd:de:ef:9f:01:71:1c:17:5f:dd:87:41:51:0a:
                    c4:fd:fa:5e:1d:5d:68:31:da:e1:45:da:0c:f1:41:
                    1b:10:16:bd:ef:12:27:2c:bf:e1:bd:4b:6d:09:d0:
                    18:1e:98:20:d4:80:19:75:73:41:17:ab:63:75:a6:
                    7f:8e:a4:85:24:9a:7f:0d:6b:51:fc:fa:cb:07:98:
                    1a:93:81:ab:04:1b:2e:6a:94:11:af:7d:b9:b6:c7:
                    91:f9:de:3d:3f:f8:b5:46:ea:3e:6b:55:f3:56:5b:
                    9c:e0:7d:21:c4:76:ea:17:54:00:4b:45:e5:7c:38:
                    eb:c5:e1:9f:e1:c8:45:30:cb:08:59:10:b2:a3:39:
                    31:48:be:b9:68:4d:58:b6:95:b5:13:a4:79:4c:67:
                    37:5b:1b:33:fa:73:d2:f1:14:ee:e1:7c:46:87:a4:
                    3d:4d:fc:e9:54:fa:ed:fc:ab:72:4f:cd:18:bd:c3:
                    03:f6:5a:0d:00:1e:c2:e7:0e:25:3b:13:e8:e8:a5:
                    2b:57:0e:c1:43:59:50:76:d1:d4:b8:9e:c7:53:e5:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7E:03:22:80:25:3D:CE:E5:39:76:E5:DA:7D:5C:15:F2:9F:80:B2
            X509v3 Authority Key Identifier:
                keyid:D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7b:73:98:51:a5:dc:88:5c:0b:76:8c:16:7a:db:6c:1f:26:
         7b:85:0d:fb:37:86:4e:c0:63:59:33:5e:bb:c5:5b:5c:73:91:
         05:a9:5d:b4:e1:44:03:8e:6c:43:70:50:d4:74:75:f7:be:05:
         d6:85:21:4d:7d:56:e5:60:ec:00:c0:d0:99:1b:a1:b0:1a:01:
         25:7a:dd:7c:51:df:e8:6c:7a:f9:e7:d4:5f:86:3c:79:65:6c:
         61:f9:8a:e7:18:32:47:04:4f:cf:2d:08:50:b3:95:44:45:a4:
         fe:c6:23:b8:d3:5c:9c:b3:48:aa:af:c5:00:a9:37:bb:92:bd:
         67:9d:3e:7b:ac:8e:45:36:54:1b:aa:11:45:1c:56:cd:1d:a0:
         71:c4:04:00:32:6c:41:06:c7:2b:09:3e:5b:96:82:83:b9:03:
         97:32:1b:30:54:30:c4:28:cc:2c:ea:8d:b4:c9:88:9d:77:d8:
         4c:cd:f0:bf:e6:24:04:5a:9d:9e:41:a2:cb:d6:46:fd:cc:a8:
         85:e6:f7:b8:b2:64:be:98:07:d1:20:7d:e1:27:f9:6f:ec:97:
         3b:d1:9a:1a:a7:1a:8a:9a:ab:96:09:a3:da:18:27:75:78:73:
         ca:e3:f0:d3:e9:df:ac:78:dd:22:f1:65:2b:27:56:15:e3:c6:
         f8:ab:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:03:59 2026 by rpki-client