Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File:                     2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier:          Uk53H9iGZfmNDtCtejhKhgky6pmVikwrBggVUwxqQSE=
Subject key identifier:   F5:8D:0D:F7:D0:2A:9E:13:72:6C:29:1A:41:84:23:B0:D7:BA:F9:69
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer:       /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial:       01A0D1932A44D23A9B72C5C1ED7E0C1E0D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number:          185C
Signing time:             Thu 24 Sep 2026 04:01:17 +0000
Manifest this update:     Thu 24 Sep 2026 04:01:17 +0000
Manifest next update:     Fri 25 Sep 2026 04:01:17 +0000
Files and hashes:         1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: ly076hJIsuSnEThnRMEq+Zarq0jI1IK0KmN3bCVd2yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:93:2a:44:d2:3a:9b:72:c5:c1:ed:7e:0c:1e:0d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
        Validity
            Not Before: Sep 24 04:01:17 2026 GMT
            Not After : Sep 25 04:01:17 2026 GMT
        Subject: CN=f58d0df7d02a9e13726c291a418423b0d7baf969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:9d:32:e6:db:f9:e3:13:59:fe:21:fe:3f:
                    6a:0a:fc:d4:a9:02:b0:a4:25:f6:04:f6:db:84:86:
                    19:7d:85:a1:4e:d3:28:0b:66:de:4a:c4:a0:85:87:
                    06:f5:db:6b:8e:f4:1b:be:87:4a:98:f6:30:83:a9:
                    a5:e9:4b:0e:0a:4e:19:7e:c3:92:71:25:cd:8d:ee:
                    aa:76:b0:04:e8:75:21:f9:34:88:80:24:c8:09:7f:
                    a6:a4:98:21:2b:08:53:98:26:8e:70:2e:a4:92:15:
                    7d:2e:12:0f:f3:bb:67:fa:de:e3:77:20:5c:88:93:
                    0f:6a:d8:27:e4:22:2c:77:ca:3a:79:66:e4:67:50:
                    33:c7:47:bc:a7:76:d8:34:11:21:ab:16:07:bc:59:
                    52:71:bc:24:bf:4c:dd:9e:af:3e:16:35:05:49:d6:
                    b5:51:d4:7a:bc:53:ea:e9:8a:9a:ca:f8:f6:96:ad:
                    24:0f:3d:00:49:55:1c:1a:d5:c5:13:d9:73:d3:9d:
                    8c:a0:00:fc:c7:ca:bc:aa:3a:37:2d:4d:88:8d:c5:
                    d5:df:ba:d9:1a:0d:f8:81:c1:86:ea:39:02:9f:6e:
                    7a:fa:c3:67:4f:b4:c0:2c:77:7f:a8:7a:2c:0d:c5:
                    bb:41:ab:d2:04:5c:72:79:53:06:5b:56:42:56:1a:
                    b5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8D:0D:F7:D0:2A:9E:13:72:6C:29:1A:41:84:23:B0:D7:BA:F9:69
            X509v3 Authority Key Identifier:
                keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a0:2b:67:98:ed:d0:38:38:54:cd:3a:bb:9c:94:4a:fc:03:
         de:d2:23:f8:12:22:00:b4:ab:93:1a:a0:85:dc:60:78:3b:76:
         02:ff:bd:01:04:f7:c2:82:0e:4d:56:97:96:f2:0e:06:a8:63:
         88:10:9a:ba:b9:21:e7:12:66:1a:c0:9e:a8:4b:39:26:e0:2e:
         2d:c2:99:9d:a9:56:bd:02:75:1f:0f:70:bb:fc:06:8f:25:32:
         5a:fa:29:e7:0c:4a:ec:ef:a3:88:a5:1a:0a:f3:42:56:22:71:
         fe:9e:ca:56:fb:51:57:b2:74:92:bf:6e:88:b0:2b:4a:77:79:
         39:4b:6e:f5:b7:50:86:1c:51:69:06:8e:e6:d0:53:9f:7a:9f:
         49:45:f4:f0:80:76:2b:39:6c:ca:18:f0:98:0f:b4:53:82:48:
         89:48:b6:7a:e8:4c:93:33:fb:d7:49:fe:b9:02:7c:27:9a:03:
         d7:3a:46:18:1b:f5:cf:bd:ea:6d:97:70:f9:a2:eb:31:7b:56:
         ad:6a:26:9e:ef:22:7c:1a:bd:d1:a3:ab:7e:2f:18:28:e2:4a:
         a6:b8:8e:fa:e8:2d:82:ba:42:fc:53:12:bf:76:93:34:d8:a5:
         94:a8:32:4a:24:65:f3:9e:f0:b6:aa:ba:99:14:10:ff:e1:ce:
         15:0d:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:20:27 2026 by rpki-client