Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
File:                     c_-bDajLqCMr_Xx3EPBFN2eInp0.mft (raw, json)
Hash identifier:          ENdWVMSH0mpEMdC3BxOXamMLx5oi5OXE9A/66TAh+v4=
Subject key identifier:   CC:28:AC:34:FA:4E:8B:31:0D:A9:03:6E:17:2F:66:7B:CB:23:B1:E8
Authority key identifier: 73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
Certificate issuer:       /CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Certificate serial:       01A160E9DE304FA6AAA387AE7259347EA4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
Manifest number:          0130
Signing time:             Thu 22 Oct 2026 00:01:41 +0000
Manifest this update:     Thu 22 Oct 2026 00:01:41 +0000
Manifest next update:     Fri 23 Oct 2026 00:01:41 +0000
Files and hashes:         1: c_-bDajLqCMr_Xx3EPBFN2eInp0.crl (hash: oewVe8pT7dTB6lotfneyJAJQr6lEnmNrVsj/LVNIqGM=)
                          2: vTX4iIqH_CJW3BVeMGACQiGfVBw.roa (hash: B07mgx6eQq4EygaQx3Hss2ApntF23K/SLlLex5sG5XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:60:e9:de:30:4f:a6:aa:a3:87:ae:72:59:34:7e:a4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
        Validity
            Not Before: Oct 22 00:01:41 2026 GMT
            Not After : Oct 23 00:01:41 2026 GMT
        Subject: CN=cc28ac34fa4e8b310da9036e172f667bcb23b1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:b9:3e:c4:81:e5:4f:0c:36:45:c2:2c:da:
                    37:6e:41:54:4b:87:81:7b:c6:d5:6b:87:b1:2a:e4:
                    c7:82:9d:12:40:09:c4:66:ca:a4:19:7d:79:6b:17:
                    e6:04:5d:04:1d:8c:eb:24:d1:8c:72:3c:51:73:d7:
                    fb:e1:53:90:4d:dc:d5:a2:77:a0:3b:52:05:58:57:
                    e7:87:5a:2f:13:43:21:20:a0:08:75:72:d4:d5:f9:
                    5c:93:23:a9:c8:9b:8a:e6:61:49:ab:e9:03:8b:b0:
                    7b:fd:cf:94:8e:80:df:11:d7:9f:89:32:9a:ca:2a:
                    bc:6a:ae:b4:cb:7c:bb:a4:04:9d:ec:b8:13:cc:48:
                    e5:11:90:3b:ef:c5:ab:a5:d6:3d:dc:d9:2a:27:d4:
                    be:0d:46:fb:a5:97:4e:a9:dc:cf:5a:8c:95:94:49:
                    9f:15:4a:8d:92:38:f3:d6:f0:83:2c:9c:63:01:09:
                    d0:6d:98:7d:01:d2:be:17:3d:9e:58:cd:e5:33:83:
                    9a:31:d8:de:95:22:fc:7a:87:af:1c:21:75:07:5e:
                    2c:3f:b4:d9:cb:c1:27:bb:eb:20:40:f6:94:24:d4:
                    0d:40:eb:e7:e5:1c:cd:0e:7e:74:a5:22:cd:b6:ec:
                    fd:98:1b:3f:69:69:4a:24:4e:23:6b:29:9b:c4:64:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:28:AC:34:FA:4E:8B:31:0D:A9:03:6E:17:2F:66:7B:CB:23:B1:E8
            X509v3 Authority Key Identifier:
                keyid:73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3c:b6:78:40:af:e1:61:9f:55:cd:35:f5:ed:55:df:b9:ee:
         2c:3d:76:4a:8e:c6:9a:dd:e2:16:da:85:29:37:52:38:1a:2e:
         f2:25:d6:6c:c5:77:e3:e1:53:ec:d9:c5:84:ed:03:74:51:53:
         4e:88:52:8c:90:7b:ec:bc:73:3d:69:b8:12:b6:e8:6c:8c:1f:
         44:09:04:0d:c3:54:e8:15:2f:db:a7:ed:50:21:61:19:ef:52:
         96:97:35:af:1d:9d:4d:ac:54:ba:7d:4b:be:58:3d:2e:65:0a:
         b2:96:6f:ea:c0:52:43:80:c2:44:b1:3e:e6:3b:94:e5:35:fe:
         3d:9a:34:aa:84:51:35:e3:b0:c9:be:dc:e6:1b:05:31:dc:08:
         63:68:1f:6f:91:ab:92:57:25:ad:a4:85:98:3e:f4:2c:c4:e7:
         75:dd:b9:79:e5:8e:dc:27:f8:df:b4:5c:ee:6c:a5:86:2c:cd:
         93:e8:e7:5c:0a:73:2d:5b:af:4d:9d:34:5f:6f:99:91:4a:26:
         ca:64:10:62:de:e3:8f:7f:d9:c1:9e:92:ab:31:98:ea:32:31:
         78:7d:ac:d5:2e:ef:49:8b:f5:3a:b3:a3:41:cf:7d:32:24:55:
         80:74:27:08:b2:de:22:6a:d2:f9:3f:2c:0f:23:63:1e:ca:dc:
         ba:c1:e0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:52:30 2026 by rpki-client