Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File:                     2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier:          r4fwC9NiTWCIY4HbyEmDXPGB45iP6tjCTyh732NOV4Y=
Subject key identifier:   A4:71:3C:E9:B7:36:2C:35:6A:BE:BF:24:00:FD:6E:B6:C6:79:AC:CC
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer:       /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial:       01A000CA5E51EA8F7A93CFC29D0776113020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number:          1553
Signing time:             Fri 14 Aug 2026 15:00:57 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:57 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:57 +0000
Files and hashes:         1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: eJRXMQqfdBRE+ksfwPUT2KMGR+cClgeovb+zwQbMXKY=)
                          2: i9hMEuJaBfT7lcapiz_ahkSHzcg.roa (hash: fw1KAABJZ7dzQA1QjS2gjeHAVGrrtjSeZ6MepK2bPQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:5e:51:ea:8f:7a:93:cf:c2:9d:07:76:11:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
        Validity
            Not Before: Aug 14 15:00:57 2026 GMT
            Not After : Aug 15 15:00:57 2026 GMT
        Subject: CN=a4713ce9b7362c356abebf2400fd6eb6c679accc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5d:17:97:fc:20:5e:1e:4e:ae:8c:7b:c5:02:
                    68:36:93:9e:70:62:7e:23:63:0f:5e:f1:ce:88:2b:
                    63:7f:e4:a3:89:3f:84:7d:00:3d:03:0b:55:f2:c9:
                    41:b8:a1:76:73:f1:fe:83:37:15:50:04:26:3a:a2:
                    59:cf:8d:9a:48:25:58:a8:f4:2e:a5:45:78:e4:7f:
                    a2:6e:b5:5f:2c:42:fa:ce:86:0f:c5:48:f3:85:f2:
                    1f:cc:3c:ad:2e:73:7c:61:1c:c9:c4:21:72:5a:12:
                    b9:14:f1:3b:08:ad:c9:08:07:14:78:bc:5f:64:5c:
                    59:37:57:24:8f:dc:94:f7:ef:40:fa:05:84:97:bb:
                    33:6a:69:6f:3d:46:ae:35:65:eb:1b:1c:25:10:38:
                    fc:c3:07:98:ef:d1:1d:70:f2:7b:27:72:85:31:5b:
                    ab:10:9c:fa:b2:34:30:e0:71:bc:b0:32:ce:5e:00:
                    75:04:20:79:1d:44:9d:56:55:46:ce:c6:29:33:72:
                    20:83:7e:14:a7:da:40:05:5c:53:15:a9:5a:e4:68:
                    55:05:d2:bf:c3:51:9e:07:22:95:f4:9d:09:b0:b3:
                    72:af:f9:7d:d5:4a:aa:6c:a6:e3:89:29:a1:88:26:
                    5b:54:af:e9:fc:b2:8a:fc:32:1c:55:3a:9a:d0:6d:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:71:3C:E9:B7:36:2C:35:6A:BE:BF:24:00:FD:6E:B6:C6:79:AC:CC
            X509v3 Authority Key Identifier:
                keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:7e:a7:dd:82:61:06:43:38:ed:07:b4:95:b7:79:a9:f1:e1:
         fd:b3:c0:a6:37:7a:4b:d7:cc:37:b0:ea:d2:c4:ee:a0:5f:5f:
         c6:cf:55:a7:98:02:54:df:19:88:0a:bd:86:5b:5a:bf:c1:7d:
         6f:e0:ad:b1:bf:18:8e:4a:6a:98:a6:80:f2:77:19:96:d0:40:
         ad:36:af:78:42:a5:4f:28:78:ea:2a:56:6a:86:87:3a:1c:16:
         0c:84:63:c8:24:b3:01:3d:7c:67:a6:c3:be:2c:be:d4:1f:36:
         d4:dc:0c:54:e1:eb:c6:66:47:e9:1e:d5:67:54:f5:dc:fe:6a:
         1d:11:9e:ea:63:f0:0c:88:2b:06:e1:15:87:0b:12:87:f5:e4:
         17:90:16:10:0d:ef:4e:9a:f8:2f:ff:7a:22:27:57:bb:14:9e:
         db:bf:8e:16:a8:ee:05:e0:b1:79:a7:7d:2f:7e:1d:a8:78:5c:
         90:2a:b8:52:f7:3e:9e:86:39:b2:42:9e:f0:39:ec:f5:10:aa:
         1f:f8:81:17:56:21:f2:c2:99:ca:17:4f:41:94:11:bd:ca:0b:
         8a:92:c2:8f:b0:40:47:f5:dd:2c:65:3d:84:bb:91:d1:18:8c:
         86:73:b7:9a:f2:05:f7:20:ef:4f:06:7b:9d:22:df:fb:2f:ee:
         12:55:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:46 2026 by rpki-client