Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File:                     2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier:          zp9H04dHMFMzopkNB7dXmS7Vt73V/gmIWkdB5o1/njU=
Subject key identifier:   F5:E6:FD:98:BB:9F:26:49:D5:84:64:13:A2:22:3D:E9:67:0C:8E:76
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer:       /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial:       01A0D15BF8B1298FDD9558C8F50FF1BD6BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number:          1113
Signing time:             Thu 24 Sep 2026 03:01:00 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:00 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:00 +0000
Files and hashes:         1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: zyu23IowVNj3tiVT5dhExxDPdxRXfooFh0+3RcGbCAU=)
                          2: GJE_tPOgXeLJ3DgOojgp5O691hA.roa (hash: 4D2iI83061LtWXrvOvTMbMz1c4sOHyfoyv2X47hDDUo=)
                          3: PIER6XCYCxthUakxWv-c4X999-4.roa (hash: aFXr3MnR3gymMlu+fiuuP0AS3tEEg0TArF5MnDX4EOI=)
                          4: zTdnnLc0QIacm1YbtJWIsiovLTw.roa (hash: kSnRCK8ElhlM0eULOEc3cJ4DBP5BQZF3/MbAm+M0XF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:f8:b1:29:8f:dd:95:58:c8:f5:0f:f1:bd:6b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
        Validity
            Not Before: Sep 24 03:01:00 2026 GMT
            Not After : Sep 25 03:01:00 2026 GMT
        Subject: CN=f5e6fd98bb9f2649d5846413a2223de9670c8e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:98:ec:9e:da:04:84:fe:a5:8f:6a:04:fe:
                    f1:9f:33:72:c9:9b:c7:db:f9:5e:0b:24:54:48:28:
                    e3:c0:46:1a:72:48:f6:df:93:ab:c3:23:3d:42:8a:
                    58:da:a3:a3:76:f4:a2:8b:dc:dd:96:53:2c:f8:8f:
                    81:ab:b4:be:6d:db:f0:5c:60:0c:28:00:a7:2c:66:
                    7c:5f:bb:13:66:0d:ce:93:5c:68:a0:77:11:65:e5:
                    22:b2:90:d8:ba:9c:02:9c:98:ec:4a:2a:77:4a:29:
                    2e:98:3d:e0:9a:c2:6d:64:9a:4c:1b:7a:39:58:a8:
                    58:f8:92:0c:66:56:bf:83:9e:05:9c:40:8e:71:50:
                    2a:3d:68:9b:25:34:d2:f1:89:93:0d:87:4b:e4:1e:
                    5a:92:e2:c8:fd:bf:bb:8c:19:cd:5f:36:2f:80:bc:
                    69:f1:36:27:1f:60:12:c5:7e:94:72:50:fb:53:71:
                    ce:7f:03:4e:a5:9e:6e:09:a6:a7:c4:fb:62:19:cb:
                    19:02:ec:2d:9b:17:d6:ed:40:3b:cf:e0:64:71:9c:
                    34:51:96:63:0c:06:61:1c:45:69:e4:44:4b:46:f7:
                    32:72:5f:24:55:8e:6d:e5:4c:0c:fe:dc:ce:ad:36:
                    7a:7f:65:65:b2:87:b1:d8:c0:e1:a1:75:ee:6d:e8:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E6:FD:98:BB:9F:26:49:D5:84:64:13:A2:22:3D:E9:67:0C:8E:76
            X509v3 Authority Key Identifier:
                keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:24:34:e3:47:1b:5e:7c:b5:c4:06:31:e2:63:d3:54:e4:5d:
         9a:94:10:24:ec:38:19:ef:94:1d:64:64:9e:e0:cc:a7:a9:e6:
         f6:8f:00:94:39:17:1f:50:aa:8d:5a:fb:08:ca:4d:b7:4b:e4:
         43:b8:45:dc:5b:04:53:5f:25:d8:24:b8:0c:50:2e:f4:53:c7:
         6a:2b:7c:85:07:b3:40:1b:83:8b:31:8c:a3:c5:19:44:dd:64:
         f0:b6:4d:06:82:ed:13:8f:a4:d2:2b:8d:e4:0e:5a:42:59:f0:
         bf:40:7b:15:d9:c3:47:ae:ed:20:52:28:0b:c8:10:03:9a:cd:
         11:a5:3c:a8:6c:34:65:92:5d:bb:9e:75:cb:47:ae:a2:cd:62:
         cc:b2:4f:c0:c5:03:87:d5:2c:3a:fe:e5:b1:9d:37:c5:b1:cc:
         52:f1:19:3e:d2:9b:2a:88:c4:c6:34:e4:5a:d3:38:14:44:64:
         42:fe:94:02:35:db:61:1d:cc:ec:ea:28:a5:0a:a8:e0:ba:f8:
         77:53:12:f7:ec:e9:00:1b:1a:57:e4:1e:ee:08:f0:70:47:9e:
         bc:91:00:9e:89:dd:d0:e4:86:fb:76:be:60:68:9a:cc:26:d3:
         29:45:46:e8:8d:f6:a1:a6:32:06:18:68:06:90:bf:8c:4d:02:
         8f:dd:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:38:52 2026 by rpki-client