Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File:                     2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier:          QgymvP5h7gY82L8qzqD+zW0tviR/Fpk8znhXkvagaSc=
Subject key identifier:   0A:92:4B:80:48:5A:CE:DE:5C:E9:46:2B:64:2F:C9:F4:05:83:75:5B
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer:       /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial:       01A06D5DC850C6C2D4FA75F4A44EA233BDAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number:          0997
Signing time:             Fri 04 Sep 2026 17:00:57 +0000
Manifest this update:     Fri 04 Sep 2026 17:00:57 +0000
Manifest next update:     Sat 05 Sep 2026 17:00:57 +0000
Files and hashes:         1: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: UxCstall0eRRcvtMdxeaSAcHSGEkj5AOWUuQlQrqK7Y=)
                          2: 5_M5mOxDjDkgwkAca1tXv2jpthQ.roa (hash: xBboSwWLCofMIytfTnyu9mKMvX+dSAJG4UOMJtzKnkA=)
                          3: JvCqnDgnG_NMUFGCTVJgzecfD7c.roa (hash: AcWZWGCS7jwVQ2QXY4DUEvQhQzrEr9Bgn3uL02QHLvA=)
                          4: q2cwbHgodll5mTiws3YOiqyA-i8.roa (hash: p3hYIacztdEjHfwDJyx/+pczxs7JhRz6S+sXnyC782Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5d:c8:50:c6:c2:d4:fa:75:f4:a4:4e:a2:33:bd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
        Validity
            Not Before: Sep  4 17:00:57 2026 GMT
            Not After : Sep  5 17:00:57 2026 GMT
        Subject: CN=0a924b80485acede5ce9462b642fc9f40583755b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:cb:85:c8:4c:eb:e4:3a:38:8e:45:47:b3:
                    60:6c:7d:77:ad:47:57:f3:de:40:40:8d:51:4a:31:
                    7a:4d:54:0d:13:08:a6:88:98:d2:41:45:c1:3d:1f:
                    65:63:4f:d8:1a:06:00:b8:54:1e:b1:90:94:b0:83:
                    e7:1a:3f:64:67:74:c2:91:63:a8:ca:3a:1d:0f:b5:
                    5b:22:57:34:eb:5d:1e:98:06:39:c0:56:4f:f7:21:
                    b1:90:5a:34:d1:ee:2c:1d:03:73:dd:59:27:a4:a5:
                    e8:01:08:94:75:8b:7f:af:81:ce:7d:f1:f5:7b:de:
                    82:7a:70:c8:4f:67:0b:b2:42:85:2c:86:e7:12:e4:
                    39:0a:f9:10:f7:72:2d:22:8b:ac:4a:3f:f7:66:07:
                    18:56:84:0e:1d:bc:6d:1a:18:bc:7c:ca:d4:b4:9f:
                    f4:fc:e1:70:62:5d:40:18:75:65:6c:34:dc:4b:ba:
                    80:7e:01:ae:4c:90:a8:63:32:59:66:c4:d2:7a:ef:
                    35:95:9e:97:1d:a5:21:48:56:3f:68:8a:0d:7e:34:
                    bf:8f:35:ed:e7:fb:7b:f0:b4:ee:65:0a:80:67:09:
                    3e:25:db:82:53:8b:2d:45:30:bf:02:20:ae:4b:d2:
                    9a:0b:1e:2c:77:94:2f:a3:91:a5:19:ab:26:b6:2d:
                    3a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:92:4B:80:48:5A:CE:DE:5C:E9:46:2B:64:2F:C9:F4:05:83:75:5B
            X509v3 Authority Key Identifier:
                keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:cc:a5:27:ed:47:71:4b:4b:7f:cd:f7:8a:95:c8:6d:32:f3:
         79:6a:f4:92:75:a0:1e:22:9e:c5:66:70:ad:9d:4c:b7:14:14:
         c7:c2:a6:f1:72:a9:08:f8:28:01:aa:67:23:44:06:70:09:ec:
         63:42:f2:b9:f5:50:6c:d8:6c:12:4b:05:7f:b3:48:89:49:5c:
         c3:40:e8:93:c8:d5:7c:a0:a5:37:db:f3:17:8f:06:71:68:bc:
         4d:c6:89:95:f8:c5:ec:24:5c:14:21:fa:87:0e:4a:e5:59:c6:
         48:de:70:f1:bd:84:ac:2f:41:0d:a4:15:4a:94:1e:d4:f8:3f:
         d4:de:10:4d:d7:ce:0c:fa:49:5a:00:7f:ee:8f:62:4e:70:ab:
         f2:b6:21:9f:c1:25:d2:bd:8d:fc:e4:d6:7e:4d:ec:40:9d:46:
         c8:db:01:1e:7f:2e:f9:de:cb:7e:6d:1f:bb:0b:3f:3e:63:6f:
         de:af:78:9a:d7:f2:77:e7:bc:3a:5b:0b:34:1f:8c:44:e9:f7:
         f2:f7:5a:c8:51:b0:74:73:11:47:b8:94:64:7a:6d:93:ae:0a:
         bb:b0:4c:4e:cd:d4:42:74:e5:a9:be:82:97:cf:08:ea:83:b3:
         6f:e4:4d:ac:6c:51:b7:47:d7:3e:29:15:55:21:e6:77:5b:33:
         5d:58:d7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:14:09 2026 by rpki-client