Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File:                     2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier:          3V+D+NmGJ5JmjS44k4oOanmssLc2k0VuEoVnk+uHx+A=
Subject key identifier:   A0:BB:3D:09:19:D0:BC:04:21:EA:88:56:B1:18:0E:71:23:5B:EB:BB
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer:       /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial:       01A10211508C290F3A875B32B6E826E3702D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number:          1A86
Signing time:             Sat 03 Oct 2026 14:00:51 +0000
Manifest this update:     Sat 03 Oct 2026 14:00:51 +0000
Manifest next update:     Sun 04 Oct 2026 14:00:51 +0000
Files and hashes:         1: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: +buxH7MwqDQEgjgz0Zx6DfZXsnmXjn0wFiG6ENYoJm8=)
                          2: YhhsybWAzHa63YaPvrgi4sjbjbI.roa (hash: T2MXxILyF0Me/fqVllL7VCaBjrZcghSwrlaqWl2tPkE=)
                          3: _kAyTCQof302et37HvM6mt9jgEM.roa (hash: 424VJZvw+ZmGcQi0r8Ayp33km0iNLVdVw38YU4HDjGU=)
                          4: wxi4D1t6N5E-A8MwJ6AwFD8d4kM.roa (hash: 391+SiltY2IpnHulRAud0EhzjNpX6Vgh8CqJXOeyKCI=)
                          5: xMne1SAMH-NmiH2AwUzcwkdTgl8.roa (hash: 2xRNoJJDPdFtBinldE8KCt/I2UuqqqoHmvwM/zMncZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:11:50:8c:29:0f:3a:87:5b:32:b6:e8:26:e3:70:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
        Validity
            Not Before: Oct  3 14:00:51 2026 GMT
            Not After : Oct  4 14:00:51 2026 GMT
        Subject: CN=a0bb3d0919d0bc0421ea8856b1180e71235bebbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:92:44:c1:0c:e1:49:f6:45:6f:44:cc:2e:
                    4c:aa:e6:d7:fa:3b:ae:43:ee:81:10:07:d8:79:44:
                    15:79:2c:13:11:5e:d3:20:60:57:22:fa:8b:97:74:
                    37:6b:58:a2:fc:db:c5:08:90:61:03:ac:65:a4:13:
                    6c:bc:43:7b:a5:1c:d8:ce:8c:99:14:94:8e:bf:ae:
                    b4:30:07:45:33:de:10:6b:69:73:95:f7:93:57:54:
                    ef:1c:7e:ad:32:c0:33:d7:6e:bf:1d:7a:a1:94:38:
                    76:36:c5:fe:c3:67:c1:71:cf:37:fb:11:83:c4:a6:
                    9a:3c:f9:20:18:76:51:ea:97:ec:1e:9f:57:b6:88:
                    fa:71:13:c2:60:5b:b6:ca:18:da:5b:f2:f2:b3:8b:
                    4c:cd:75:37:0a:26:7c:4c:33:50:be:c8:1c:d6:4f:
                    87:c9:de:93:b0:56:3e:1e:c6:53:a7:e6:43:6a:20:
                    65:69:db:16:c3:d3:5c:6b:b8:21:bc:52:65:ba:6f:
                    09:ef:7b:2e:ba:99:14:8b:14:a1:f5:47:25:50:3f:
                    9f:7b:9d:f7:88:14:56:ca:7f:95:08:44:8c:13:1b:
                    ee:aa:08:ca:d2:1f:68:b0:61:b7:eb:42:21:9b:ff:
                    5d:58:71:28:d9:49:41:f7:97:ea:aa:3e:58:8d:69:
                    dd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BB:3D:09:19:D0:BC:04:21:EA:88:56:B1:18:0E:71:23:5B:EB:BB
            X509v3 Authority Key Identifier:
                keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:37:ae:52:8c:b7:b0:13:ef:c9:ac:32:bf:0b:20:7f:ab:f2:
         24:4a:f7:2f:83:07:4f:9e:e1:0d:1e:58:bf:b5:c9:f5:42:2b:
         75:d0:87:7d:ed:54:bf:28:9c:86:73:bb:ce:ab:00:4d:ff:f4:
         4a:92:8d:32:23:29:fd:1a:0d:2a:18:61:7f:25:09:49:4d:c5:
         a3:d2:3b:96:c6:5e:47:26:7e:a4:a7:4b:7e:5d:1a:9d:e9:cf:
         23:d6:34:48:11:d4:21:29:3c:b7:53:b4:be:4d:15:4b:44:c3:
         28:d2:6d:6d:7d:0a:ac:e9:12:02:47:72:eb:7f:49:23:d8:ef:
         6e:c0:41:78:2b:7f:71:6c:1c:cf:17:28:40:ff:3a:9c:d6:00:
         c2:d9:46:e8:da:86:b8:ff:ce:e5:5b:c2:7c:13:57:ac:69:67:
         bf:18:ad:73:60:b2:bd:e0:60:d8:d8:41:b5:45:d1:df:91:80:
         5c:17:ec:7f:f5:17:e3:9f:da:61:7f:fb:fe:70:67:04:8b:38:
         8e:62:35:a1:2c:7b:ac:1c:e4:18:cb:f8:bf:6c:4f:6c:4f:00:
         7c:9b:e1:f8:26:a1:47:65:ce:85:d7:42:59:32:00:be:74:57:
         7a:67:ca:ad:ad:58:48:2f:30:3e:af:5b:3d:b5:5f:c0:a2:24:
         a5:e4:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:38:50 2026 by rpki-client