Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File:                     2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier:          TDdtgGYWlGy2ZBV4hitE6Fmtxgq9dA1K29BrSIN1Wt4=
Subject key identifier:   40:14:21:AC:1C:CD:7A:1E:FB:78:95:93:A0:BD:48:97:FD:2E:D1:FE
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer:       /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial:       01A06D95B7846378B462E2E49BE00E63BED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number:          0F46
Signing time:             Fri 04 Sep 2026 18:02:03 +0000
Manifest this update:     Fri 04 Sep 2026 18:02:03 +0000
Manifest next update:     Sat 05 Sep 2026 18:02:03 +0000
Files and hashes:         1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: TG+rU+fNqyUFBPWFU3iV2ah7y9H7wsqqLCxs3zuv4YU=)
                          2: MFAY7_OLyA4recGDb-cluDo0Fy4.roa (hash: gbxISH9PotemB1t2Fhr1XbKqizGCUJkHo7eezE3JciE=)
                          3: MR_WWabOjbaD5Mj0B9qpiV19gvE.roa (hash: 9sUkJjmHz8rfNkqGVSSONlc5MfW4R236Pz0xtOtiNP0=)
                          4: cP1lvMExnryf8cpW14P-YTW6oFM.roa (hash: 1i/eVOAe4LzQ+ZGAHO4PSAx1yAI1zK27WYnYn0/9SC0=)
                          5: hhlmQR1deqPI7PsOQluJZIgF1ig.roa (hash: FQuxizImz+yJ1GnWvSPkbFP5dKWAXYI6qufg2Wz3UBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:b7:84:63:78:b4:62:e2:e4:9b:e0:0e:63:be:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
        Validity
            Not Before: Sep  4 18:02:03 2026 GMT
            Not After : Sep  5 18:02:03 2026 GMT
        Subject: CN=401421ac1ccd7a1efb789593a0bd4897fd2ed1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:9f:ee:ae:b9:7a:6e:34:70:ad:8b:a5:61:
                    09:e0:23:65:42:fd:ef:2e:f1:f9:31:51:2d:60:20:
                    cc:2d:e0:f9:40:5f:92:05:ad:96:45:ad:13:32:43:
                    af:de:f1:87:e0:03:d8:95:ee:12:50:52:34:59:f4:
                    3b:50:d0:03:79:d9:0f:56:38:80:7e:b0:9e:00:a4:
                    bf:94:26:dd:11:b1:20:c2:5a:7c:73:2f:dc:f1:74:
                    0c:f4:1c:96:a6:b0:81:df:f6:dd:33:88:73:b2:35:
                    16:ea:5d:84:84:66:a2:94:c0:10:c7:71:0d:1e:bf:
                    d5:07:08:26:6a:35:2c:53:6a:61:d9:f3:5b:19:09:
                    26:e5:47:5c:5e:6d:f3:1f:86:d9:fb:19:61:a6:7d:
                    93:7e:5a:33:37:95:3f:5a:9b:4a:db:45:07:21:9a:
                    a8:4e:0c:a1:49:98:9c:73:0a:fe:df:4d:72:fa:61:
                    df:f0:11:d9:89:f2:c8:dc:f9:ab:75:50:07:b4:09:
                    6f:07:61:ed:68:97:48:f6:49:1e:9f:b2:92:6f:c8:
                    aa:bd:6e:11:5c:1a:0d:0a:4a:04:a8:0a:a6:5f:da:
                    2c:9d:e4:83:07:c3:ee:1f:ad:70:bb:8c:a1:91:70:
                    bf:c0:28:14:4d:63:8e:b5:e4:11:77:f3:b1:20:1b:
                    19:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:14:21:AC:1C:CD:7A:1E:FB:78:95:93:A0:BD:48:97:FD:2E:D1:FE
            X509v3 Authority Key Identifier:
                keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5d:d0:b7:52:99:4a:f2:bd:a9:57:6e:7f:ac:66:75:4a:06:
         32:d4:c4:27:1a:58:cc:c2:c2:d2:2a:74:dd:1f:bc:8d:6c:d0:
         5d:8c:84:a0:de:7c:ef:8e:87:4d:6a:5f:b8:7e:71:21:d5:2a:
         78:53:44:0a:56:23:8f:66:0b:8c:5c:22:7d:bb:83:98:9a:b7:
         0f:1f:2f:a5:47:19:0d:bb:05:6b:37:f1:34:90:52:0b:42:20:
         04:cb:73:85:7f:d5:e7:61:9e:d0:7b:fa:f7:42:18:2b:3e:1d:
         25:14:fe:62:dc:c3:af:58:a0:5b:aa:63:9c:51:7c:b8:b5:80:
         8d:81:55:6c:c9:a9:7b:0c:e0:1c:14:5d:06:da:8b:bf:0b:74:
         98:18:9f:27:04:69:64:0d:15:be:f5:c4:04:da:2a:fd:d6:77:
         67:87:bf:f3:a7:75:ba:59:15:a3:2b:50:1f:63:32:23:5c:41:
         2a:6f:29:12:50:54:8a:d0:d9:3b:2f:bd:66:8b:a1:1c:84:47:
         a8:15:e4:18:4b:8a:90:f6:e4:43:b2:35:96:45:da:74:a4:b2:
         1e:50:5c:a7:17:46:c0:02:b1:ae:97:fc:6f:17:91:de:42:c9:
         46:d1:b1:d7:0d:c2:53:a1:df:ca:e0:d3:a8:14:49:94:68:0b:
         f7:d4:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:30:48 2026 by rpki-client