Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File:                     2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier:          p+mZzwbHHC5mjo9syBsL0Rq91QCg9m6sbIkyPdinpXE=
Subject key identifier:   82:45:D2:43:91:A4:2A:8F:9D:C8:34:3F:80:C0:88:6C:A7:30:D4:FC
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer:       /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial:       01A13D134D984854FF78216E472E07238098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 01:00:37 +0000
Manifest this update:     Thu 15 Oct 2026 01:00:37 +0000
Manifest next update:     Fri 16 Oct 2026 01:00:37 +0000
Files and hashes:         1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: QryYAUwVbtOQXwnSIJG6Qezhrwe/7jwWKMUE3rB1aBs=)
                          2: 3ZLc8PtVozm-eNgGoAQOIa_oVE8.roa (hash: KwhZKW2lEh+jd+kB9cN/6tlHTLzCCYETic1USeu5gbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:4d:98:48:54:ff:78:21:6e:47:2e:07:23:80:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
        Validity
            Not Before: Oct 15 01:00:37 2026 GMT
            Not After : Oct 16 01:00:37 2026 GMT
        Subject: CN=8245d24391a42a8f9dc8343f80c0886ca730d4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:43:76:ee:4a:26:19:68:96:92:c1:40:54:
                    dc:9d:38:fc:47:df:62:bf:02:d7:19:14:5c:e0:79:
                    b5:be:0d:00:4d:52:d0:a3:1d:13:d0:f2:e1:b7:58:
                    34:ef:a2:e7:ef:11:d3:d7:1c:c8:d2:8b:1e:cb:ae:
                    53:63:60:73:f9:69:c6:f6:f6:c5:4f:5e:a2:4d:b3:
                    ec:4c:0a:85:20:b2:25:00:39:f7:70:d1:5c:ee:40:
                    63:11:18:f9:0e:05:4c:63:30:e7:cc:47:75:8a:19:
                    3d:f6:42:7b:07:3e:73:33:80:19:a5:74:f0:91:38:
                    43:9d:05:39:41:8f:7d:aa:c2:50:b3:49:11:a6:80:
                    ae:48:68:98:40:51:93:3d:a0:cd:19:19:22:03:d6:
                    6b:2a:d5:b4:27:d2:06:ca:62:af:f6:0f:01:a7:1e:
                    7c:cc:a3:e5:bb:4c:fe:9b:21:df:85:d0:64:cf:1b:
                    8d:06:9d:e1:a2:af:bb:89:0a:e2:1f:79:15:58:1f:
                    47:73:23:0b:7f:23:c0:59:1c:61:d4:1c:8c:2f:2d:
                    df:17:c3:80:b9:ec:52:ae:ca:e5:15:c8:60:7e:3f:
                    e9:da:eb:4b:49:37:0d:79:a9:09:72:f6:ff:b9:d7:
                    92:82:72:db:f0:e0:b8:ef:41:90:d2:9d:2f:09:fb:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:D2:43:91:A4:2A:8F:9D:C8:34:3F:80:C0:88:6C:A7:30:D4:FC
            X509v3 Authority Key Identifier:
                keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c9:f1:b3:61:15:a5:5e:bf:c9:12:4c:47:2b:52:4e:38:c8:
         66:12:f4:34:5c:e4:2b:58:3d:4e:c8:81:0c:36:44:29:6c:88:
         8e:d2:6e:ba:a2:0d:4c:ee:5e:19:f1:99:29:2d:b7:59:b8:59:
         f0:89:da:e1:15:39:24:71:32:a2:fe:f1:9b:cd:d8:56:a6:00:
         ff:bb:6b:31:66:c5:21:8f:f6:2a:f4:ce:2f:f1:6a:4f:96:d0:
         55:d5:9f:07:2e:98:e1:fa:fe:5d:15:3e:ab:29:83:43:83:32:
         79:85:ed:89:55:86:f8:99:69:cf:44:e9:ea:81:e3:88:e3:96:
         6c:99:c4:45:60:a9:4e:b0:99:69:12:ee:d6:3a:c4:c7:a0:0b:
         97:f7:81:dc:5b:d1:87:72:14:64:f3:c6:c8:8a:f7:ed:a1:22:
         39:c8:1d:fa:29:be:a1:54:c8:e4:91:98:b7:06:ee:44:99:3f:
         a0:07:4c:7f:82:24:2d:6a:0e:b5:67:fb:4b:e5:13:59:a9:13:
         2e:d5:a1:40:b2:21:54:52:01:31:e2:53:b1:c2:51:b5:1f:ea:
         6f:9d:bb:c4:19:02:66:d8:3f:70:76:a6:05:86:39:76:3a:0a:
         73:b3:bf:a9:dc:75:66:f0:cf:bb:06:ae:d7:ee:a2:1e:2d:ab:
         81:d4:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:59 2026 by rpki-client