Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File:                     2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier:          T03lgYGKNQS8RY9+Qu1e6XhGFDnSaoPOieY+6lEIPNg=
Subject key identifier:   17:33:18:A4:05:98:DB:C2:56:7C:13:44:91:EB:34:ED:C8:1B:CA:52
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer:       /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial:       01A1DD269178E59E01B5C773DD8144EBFC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number:          0526
Signing time:             Sun 15 Nov 2026 03:00:54 +0000
Manifest this update:     Sun 15 Nov 2026 03:00:54 +0000
Manifest next update:     Mon 16 Nov 2026 03:00:54 +0000
Files and hashes:         1: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: cHtz8kKLvgEQ2npQTm+77a1Z9AXVrMWbpGcIVQuKjKo=)
                          2: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (hash: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4=)
                          3: 2naRCXtm4c8QGK9fzUN6omwb2OE.roa (hash: LZlEgbeiDa5co70KmVv/qHnC9NAMuF7oiCcCZqH+vuw=)
                          4: 6DOrz3928TU7wZXRvfoe5TIHe2A.roa (hash: dkoX6rsv82LKW6X0aXjN4hG4E9xoboCySwytbCJljwU=)
                          5: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (hash: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A=)
                          6: kAKuXVzbthSJCa9_XyQiFsVmBso.roa (hash: j7YyQibF9jux/DZKePceRe9hnhmF98H36thhTNTqV+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:26:91:78:e5:9e:01:b5:c7:73:dd:81:44:eb:fc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
        Validity
            Not Before: Nov 15 03:00:54 2026 GMT
            Not After : Nov 16 03:00:54 2026 GMT
        Subject: CN=173318a40598dbc2567c134491eb34edc81bca52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:90:05:0e:98:aa:d8:4f:a5:80:a0:5d:da:
                    09:af:e7:b9:98:29:01:c6:cb:55:bd:75:e5:9a:7d:
                    0b:1e:21:b6:64:3b:d4:e2:45:f8:b9:b2:fa:3e:62:
                    70:30:f4:16:0c:b9:da:9d:b7:e5:da:8a:52:99:96:
                    09:96:f0:6a:6b:d0:73:0e:45:53:86:f5:6f:95:67:
                    49:2c:a4:4f:08:41:af:57:3e:87:41:92:3e:04:77:
                    73:c2:5a:36:9a:57:32:e0:2f:c9:6e:cf:68:31:3b:
                    6e:51:42:8f:c6:49:db:86:0a:37:20:98:4f:1d:a1:
                    cb:6c:ab:d2:50:b0:d3:e7:67:ba:14:ac:5d:54:31:
                    c8:74:0a:5f:f8:1c:2d:fb:7b:1e:1b:17:50:3c:f9:
                    6d:b8:72:5f:3c:40:a7:f3:d9:33:a3:df:29:a7:c9:
                    f9:c2:72:b3:ec:e2:61:bd:11:cb:63:62:33:dc:33:
                    20:ff:6a:3d:0a:4e:c7:1f:59:a1:db:91:73:95:9f:
                    b0:2e:d3:5c:01:2e:9e:13:06:fc:ab:5b:d2:c4:b8:
                    88:91:11:a5:32:22:7b:97:bb:d0:81:43:29:88:d3:
                    b1:1c:79:b2:d3:9c:d6:be:4a:4d:28:da:5b:50:b2:
                    35:dd:52:cf:83:ac:93:07:1c:e7:c2:cd:f5:8e:4c:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:33:18:A4:05:98:DB:C2:56:7C:13:44:91:EB:34:ED:C8:1B:CA:52
            X509v3 Authority Key Identifier:
                keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:d4:c9:2c:10:fc:aa:58:05:5a:bb:9d:78:55:81:b7:88:
         a0:cc:47:10:49:6e:a7:66:3e:cc:12:14:5e:e2:b4:89:f5:b8:
         92:0f:13:00:3f:a8:34:9b:cd:7a:f8:5e:b1:f8:01:5f:34:78:
         1b:ca:2b:85:40:a1:19:02:30:bf:42:6a:43:b1:a8:d0:b9:18:
         e2:70:18:38:09:80:b3:78:9e:dd:37:9b:3e:7e:21:9e:98:c8:
         ba:15:20:46:03:4a:ad:48:10:71:61:fb:c9:19:69:3c:a6:84:
         25:bf:7d:7b:5e:23:17:98:03:33:09:60:9a:1f:6a:0a:7e:f8:
         36:77:08:cc:ca:88:c8:c4:55:1d:b1:00:5a:fc:05:b6:b2:07:
         1f:40:82:bd:3d:1a:af:b6:50:e8:3f:52:c1:32:d2:db:fb:e0:
         60:67:a1:fb:4f:ba:a4:eb:51:24:97:31:b8:af:ba:b1:8b:35:
         2f:0c:26:86:5d:4f:1a:3d:14:65:27:fb:d1:c5:26:92:e8:e9:
         7b:43:d2:19:6e:49:4a:18:b6:32:b5:d0:8f:b0:23:0c:ed:c5:
         61:c2:df:96:db:55:12:33:a1:0d:69:f9:c7:f8:12:ca:05:fa:
         8b:4d:7f:5e:79:01:07:e6:92:42:f3:da:4a:02:91:e3:f4:eb:
         8b:51:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:22:59 2026 by rpki-client