Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
File:                     2n-fhLKCx8d4S509G2Lb4NT_CbU.mft (raw, json)
Hash identifier:          NhsiGa1Vujnl2xrTEeDWo+U6oG044y3WS1bC/ld+imU=
Subject key identifier:   0D:59:91:30:80:8D:BB:38:46:72:3C:AF:A4:66:B5:F1:E6:A2:5D:34
Authority key identifier: DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
Certificate issuer:       /CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Certificate serial:       01A0D26EA02D4846E8141BFF248976DDDF83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
Manifest number:          78
Signing time:             Thu 24 Sep 2026 08:01:00 +0000
Manifest this update:     Thu 24 Sep 2026 08:01:00 +0000
Manifest next update:     Fri 25 Sep 2026 08:01:00 +0000
Files and hashes:         1: 2n-fhLKCx8d4S509G2Lb4NT_CbU.crl (hash: k9f/7u3EQMi5cgXXmAbrOGKMxbzBlyT1vJXb+dCDmM0=)
                          2: HgfT2JSenK4GJsUbQzV8uG_wvvA.asa (hash: LZUpiuRRs3R10CKCH8iywjuLF9goXXtxdoAmImqKVGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:a0:2d:48:46:e8:14:1b:ff:24:89:76:dd:df:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
        Validity
            Not Before: Sep 24 08:01:00 2026 GMT
            Not After : Sep 25 08:01:00 2026 GMT
        Subject: CN=0d599130808dbb3846723cafa466b5f1e6a25d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:e0:1b:09:60:51:2f:c6:f5:0d:da:f5:9c:
                    1b:33:fb:3e:76:fe:71:1e:b3:69:f4:e6:24:37:6d:
                    00:d5:9c:32:33:a6:46:0a:13:3e:c9:cb:e4:7e:27:
                    47:87:f0:87:67:7d:b4:25:38:f4:5c:e6:d8:1d:c8:
                    d1:70:e3:b8:1e:bd:c8:77:69:84:80:44:b4:07:4c:
                    74:a2:de:29:9d:d5:c8:e3:63:c2:0e:2c:ee:8f:34:
                    71:ea:57:e9:e3:a5:d8:e3:8e:58:5b:93:b9:7d:25:
                    65:a6:4e:45:bd:dc:b6:b2:9c:03:c7:10:d9:4b:28:
                    06:25:4f:07:d8:21:5a:87:3d:1b:f4:6a:c4:16:24:
                    bc:75:5b:bf:74:64:9b:dc:f7:3d:68:ea:ba:a5:6f:
                    49:f8:b5:c9:c9:12:9f:a4:a6:5e:59:87:63:bd:f1:
                    b3:41:70:09:e5:3a:d2:38:51:c7:b9:45:f7:44:9b:
                    d4:27:58:de:4a:d9:76:e9:3a:00:99:66:8c:db:3f:
                    3f:e3:6a:66:7b:68:f7:87:33:05:fb:01:7e:26:7f:
                    27:f5:13:a0:8c:35:24:c0:e8:84:14:7c:0e:2c:92:
                    8f:01:a5:3d:fd:a4:5c:d7:1d:53:b2:35:1f:3b:c9:
                    88:b9:74:5c:e5:63:c9:96:ce:00:bf:a3:93:fc:29:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:59:91:30:80:8D:BB:38:46:72:3C:AF:A4:66:B5:F1:E6:A2:5D:34
            X509v3 Authority Key Identifier:
                keyid:DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:04:84:01:37:32:d7:fb:33:e9:9f:17:18:d9:d4:d6:c3:21:
         97:3a:0b:c3:46:c7:02:d6:83:bf:3b:75:d7:e5:8e:c6:8b:7c:
         0b:f7:1a:44:c6:bd:f2:8a:86:a5:ff:27:7a:8d:53:3a:56:93:
         8c:c0:68:47:fd:a9:1b:21:82:c5:e6:a8:ff:d0:72:89:0b:02:
         80:cb:af:34:2e:d3:c9:bd:1e:a8:19:16:2b:bf:dd:d8:f9:e7:
         4f:15:09:0d:7b:fb:ff:cc:6f:13:7c:5b:40:b1:91:7c:3e:e6:
         9d:00:ff:6a:3d:b6:61:66:45:2e:d4:e3:b8:95:31:f5:0d:5b:
         ac:02:d5:0a:2e:ee:29:96:96:ec:c3:b2:4e:ce:88:ca:88:7e:
         c4:66:52:b5:87:2b:be:12:6e:c2:fa:5e:92:c2:5c:e0:b0:66:
         2e:40:2b:f8:b0:a4:9a:36:a6:49:62:34:c1:98:d1:ae:66:e7:
         ed:86:5b:1a:09:47:64:f5:dd:29:b4:24:33:00:f2:a1:3e:80:
         0e:c7:79:6e:ce:61:3e:47:ad:de:92:a4:4f:72:84:b4:80:8d:
         19:25:05:67:78:07:88:a7:c9:85:fd:18:f9:37:0d:85:ed:57:
         ef:dc:82:88:ec:d9:3a:51:76:34:61:80:7c:b3:22:ef:ca:f7:
         75:16:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:25:59 2026 by rpki-client