Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File:                     2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier:          jeyajAMNQKTs0nIpnZ4quLBXbornswzJYC29WFk9M7g=
Subject key identifier:   81:14:67:7D:CA:EB:D5:D4:83:61:69:B8:31:19:CA:58:78:30:6B:88
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer:       /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial:       01A06E39C264D7CB2E3A79F625E3151C253B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number:          1927
Signing time:             Fri 04 Sep 2026 21:01:14 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:14 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:14 +0000
Files and hashes:         1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: T+0XgBxgynqNjy8PgfxY6/XJ2wg79CaKr6j00Mk2wo8=)
                          2: NkvybtyieeqcXDjHG9gHl_XAsMQ.roa (hash: 00Ye2JJrLJ1zMVpdd8DivfPeXqrw+enAIn41E191EYk=)
                          3: WYvB7z2E3X738_d9cgopMgPJk5I.roa (hash: u5beh3Tb2byL/rGs3HaRRLRbrFXqSXUDof4rFMurirU=)
                          4: gLFfimILtrvNmLCqHHnLyf5HeDQ.roa (hash: Au61gdy9n9KoeOHWn+nWGKr6a14kosDrZi3ajbtwzn8=)
                          5: zNk-M0VG943BmxksL9suzBVm4vQ.roa (hash: UUWX1bpaoMZzwXQx5EXEi0bI53+v8tYUcjIfVRmZCYY=)
                          6: znK95_JFl0pNvLfj6OXmewYJypk.roa (hash: KuT2Fb0+p87DW0EC5Dzu5qZfHaXjG7VpnPReGDVhA8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:c2:64:d7:cb:2e:3a:79:f6:25:e3:15:1c:25:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
        Validity
            Not Before: Sep  4 21:01:14 2026 GMT
            Not After : Sep  5 21:01:14 2026 GMT
        Subject: CN=8114677dcaebd5d4836169b83119ca5878306b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:d6:55:13:b8:a4:1e:d5:6a:cc:20:08:c5:
                    b4:7c:21:8e:da:2a:d5:28:4a:93:2e:d1:f3:e0:6f:
                    44:b6:7c:d2:6f:b7:fb:01:61:ca:a9:ad:ca:45:fb:
                    f3:3a:db:be:a8:f0:46:b4:20:6f:40:1e:49:d4:b3:
                    5c:5c:b6:b0:27:04:65:6b:f6:b3:cf:54:e7:c3:74:
                    60:f9:60:7f:5c:82:6b:de:99:b5:e5:c0:3a:bb:02:
                    24:08:93:b8:7a:81:cc:c0:27:18:9d:86:49:f8:97:
                    51:f5:cd:bc:ee:5a:bb:92:96:ce:af:39:f9:61:00:
                    0d:02:5b:42:9e:7c:19:03:52:07:f1:a8:a1:e2:b5:
                    a6:63:25:70:22:e1:f3:11:4a:4a:ad:7b:2f:d4:12:
                    04:23:93:c7:bc:0d:58:44:41:a5:87:a5:8c:a2:58:
                    8c:10:10:05:31:55:dc:4d:74:2f:f1:91:77:8d:6e:
                    5e:f3:fb:b4:05:0b:f9:a4:3b:a5:97:90:b8:e5:ad:
                    82:d3:c5:6b:7a:5a:ec:11:45:32:ee:9a:e7:7d:94:
                    8a:ae:16:02:d2:23:12:dd:d4:79:64:7a:06:7c:c2:
                    98:e4:27:89:d9:a3:c1:d2:53:0f:6d:8a:87:69:57:
                    5c:1c:24:c0:aa:8f:71:7c:a9:b8:bf:ff:47:a4:71:
                    18:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:14:67:7D:CA:EB:D5:D4:83:61:69:B8:31:19:CA:58:78:30:6B:88
            X509v3 Authority Key Identifier:
                keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:2b:d3:2c:5e:f8:2c:c6:e0:d4:a8:3e:77:1d:64:7c:f7:
         cd:37:55:ec:4d:0d:48:0a:f2:2b:4f:1f:d4:11:41:7b:7d:e5:
         a1:d4:9e:5a:c6:6c:43:fe:a4:3f:92:4b:24:ba:d2:74:54:23:
         e7:d0:72:91:68:70:c5:ce:b3:94:ad:85:65:8f:24:aa:14:c1:
         96:64:87:d0:e9:cd:72:81:eb:49:fd:0f:b2:b5:32:ac:23:f2:
         6a:17:69:5a:1e:20:93:87:86:7d:78:5b:59:11:05:81:49:33:
         65:36:6f:dd:54:cb:af:ef:eb:6e:9d:8f:ce:ef:48:55:bd:cf:
         ef:6b:9c:3f:47:ac:31:68:6f:78:e2:d4:ed:d8:ef:1a:a7:b8:
         09:b0:08:7f:e3:65:ad:e9:e9:93:05:50:38:e4:92:8c:13:36:
         88:48:69:15:df:41:e0:bf:62:43:f1:38:07:c7:f5:cf:5c:4f:
         65:58:90:17:c1:14:62:5e:97:d4:9e:3d:33:18:98:1a:ff:23:
         94:95:13:41:bb:30:96:8a:8d:9f:b6:e8:e1:43:86:31:51:85:
         ee:31:4f:60:20:5a:e4:fe:2a:dd:78:bd:72:a8:1d:07:eb:a1:
         ea:7e:54:50:ca:8b:a3:0e:54:52:56:ea:f4:06:93:2e:38:ef:
         ac:71:47:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:44 2026 by rpki-client