Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File:                     2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier:          7imf0+XePz4A9yMbMjcUqpoccSKmh3lApw+no5dP5G0=
Subject key identifier:   D3:CF:3C:2C:05:C6:25:AA:FC:F5:B2:E3:BF:46:9C:C8:2C:02:EA:18
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer:       /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial:       01A0D1C919BC1B2BD2A550E3EEFF08DA51B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number:          0C78
Signing time:             Thu 24 Sep 2026 05:00:12 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:12 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:12 +0000
Files and hashes:         1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: sKUxrN9rKtpr8fshPVJH6KpYCWTRbhaCzMgaAYtzanU=)
                          2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:19:bc:1b:2b:d2:a5:50:e3:ee:ff:08:da:51:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
        Validity
            Not Before: Sep 24 05:00:12 2026 GMT
            Not After : Sep 25 05:00:12 2026 GMT
        Subject: CN=d3cf3c2c05c625aafcf5b2e3bf469cc82c02ea18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:67:30:75:32:34:d9:d3:0c:ca:c9:f8:03:
                    81:3f:69:e0:52:bd:e6:4e:c8:e7:9a:fa:80:4f:af:
                    a2:a2:fb:28:65:1f:b8:2c:fc:d2:da:d9:1f:73:d9:
                    fc:65:c7:f4:00:67:6c:09:ce:c0:19:bd:ab:34:de:
                    a7:ff:20:0f:e0:0a:40:13:1c:6c:44:f0:95:74:31:
                    3b:42:4e:54:ba:b2:af:63:88:28:2e:9b:20:43:d1:
                    3e:7e:77:a9:98:1b:1e:64:09:41:b5:9d:cc:8d:9b:
                    7b:c6:0c:b0:7a:e9:d3:7e:db:d1:36:b5:32:17:10:
                    6d:18:62:a3:c1:ef:d5:16:78:44:45:15:13:58:1d:
                    b2:c7:d6:f4:14:00:cd:99:f6:32:0d:fa:fb:e1:98:
                    02:68:8d:07:c8:ff:64:8b:0f:8b:8b:82:b7:20:ee:
                    a6:36:00:19:4f:7e:ac:57:ad:47:19:91:88:45:e9:
                    b4:84:05:e2:1a:e6:24:3e:e3:16:54:19:cd:04:d4:
                    90:7e:26:23:73:c1:8f:5c:0f:da:89:d7:b6:49:1c:
                    b0:e3:b9:b7:91:28:93:a6:d2:4c:99:16:cf:b6:40:
                    da:47:b5:e3:44:6b:6d:8f:9d:da:70:8b:31:21:6a:
                    a8:49:61:b5:86:a7:fb:b4:42:5c:be:b2:61:3c:05:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CF:3C:2C:05:C6:25:AA:FC:F5:B2:E3:BF:46:9C:C8:2C:02:EA:18
            X509v3 Authority Key Identifier:
                keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7f:6e:52:52:89:92:79:3a:ef:06:93:49:ad:1d:96:50:56:
         ce:87:47:25:31:c7:03:e1:93:28:43:68:4c:0d:65:58:af:5a:
         36:c2:89:f1:8c:92:e2:9b:2a:62:52:08:f8:8b:26:c3:79:e4:
         7d:93:92:76:af:ab:3f:16:76:04:f9:d2:00:c6:ca:fd:96:87:
         97:6c:bd:bc:d5:6a:63:55:0d:20:c8:f2:6a:4e:48:c7:ec:b9:
         18:77:61:76:1c:58:03:10:f4:28:0e:56:90:de:2d:d9:52:e2:
         ff:57:76:8e:f3:5c:ed:b4:c0:6d:66:67:fe:64:22:af:bc:d1:
         52:d9:2b:34:01:33:fd:d5:7f:f6:7d:9d:31:d6:f8:7b:10:4b:
         0f:f3:af:e5:20:0e:ac:8b:a4:ff:84:65:0b:d4:86:6b:ba:ff:
         e0:50:90:e6:ec:57:4d:ed:87:1f:15:75:00:19:ac:a2:57:18:
         89:03:e6:b3:0a:9a:1c:98:c0:61:04:22:d2:6e:0d:35:12:88:
         dc:87:26:dd:56:1b:5e:16:75:ef:d8:d8:a1:86:c7:94:07:80:
         30:81:d8:6c:99:dd:7a:a2:0c:8a:be:2b:e7:85:be:82:74:43:
         e3:0c:94:4d:36:a2:58:fe:93:37:37:85:d3:64:59:38:78:08:
         b2:17:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:05:28 2026 by rpki-client