Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
File:                     2cj-O3Ss0SRgHvsTBk98cwBglno.mft (raw, json)
Hash identifier:          gF1cOF7Zgs6rY0LnT1Pq729QgNA6jCTLVpm3jnYKmk8=
Subject key identifier:   DB:F6:08:2A:45:B8:D7:17:E7:32:F1:69:9D:28:3E:6C:BD:A6:AC:05
Authority key identifier: D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A
Certificate issuer:       /CN=d9c8fe3b74acd124601efb13064f7c730060967a
Certificate serial:       01A06F837E562EDD82BF0A49ECD4795A2A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
Manifest number:          B3
Signing time:             Sat 05 Sep 2026 03:01:23 +0000
Manifest this update:     Sat 05 Sep 2026 03:01:23 +0000
Manifest next update:     Sun 06 Sep 2026 03:01:23 +0000
Files and hashes:         1: 2cj-O3Ss0SRgHvsTBk98cwBglno.crl (hash: KcZGm6hWMHak8FSKghwviJ80/g94JqphdSrZLuOo7Xk=)
                          2: TO3cxd5QRgHVv4vfV-AK8g1sKi4.roa (hash: jGEJgjAw/pTEDwfFfRkLAiRtAOsP3LY6QYQDLOvhrWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:83:7e:56:2e:dd:82:bf:0a:49:ec:d4:79:5a:2a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9c8fe3b74acd124601efb13064f7c730060967a
        Validity
            Not Before: Sep  5 03:01:23 2026 GMT
            Not After : Sep  6 03:01:23 2026 GMT
        Subject: CN=dbf6082a45b8d717e732f1699d283e6cbda6ac05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:2c:3e:e7:eb:64:fd:a3:8b:11:df:03:75:
                    7c:23:df:c8:ea:e7:82:b0:cf:a3:5b:14:f4:a5:13:
                    2c:b7:4d:6e:30:ae:06:d7:a5:ac:6d:e1:e8:c0:3d:
                    d8:7b:ff:3b:51:9e:f5:d5:4e:44:0c:71:b4:63:e3:
                    cd:f2:6a:52:54:84:4e:59:12:56:77:2c:9d:ea:06:
                    2a:e6:37:fa:c3:e4:63:f4:da:f4:89:86:23:95:e5:
                    ac:ee:fc:83:dd:a2:4b:be:18:05:4d:75:c9:8d:eb:
                    29:a5:b2:a7:0b:7c:d6:2d:a0:0c:5a:c8:1f:4c:f0:
                    84:93:c1:39:b3:ee:96:5f:b2:bb:2b:f4:02:b3:07:
                    99:79:46:27:ce:49:1f:92:56:1e:c4:76:f0:33:6f:
                    73:cc:c6:cc:6f:6d:ed:95:2a:5e:ea:07:f2:a7:8d:
                    82:85:b4:50:bb:a0:46:08:9d:22:2d:38:7b:cc:01:
                    6d:cb:91:f9:7c:98:9d:67:ba:ef:77:6d:ff:b9:e5:
                    22:b3:27:20:94:7c:32:a6:a8:cf:62:a5:33:c6:7a:
                    20:82:ff:b6:45:0e:1b:fc:c8:5c:a1:73:ec:18:a2:
                    01:7d:80:8d:08:f7:23:04:47:da:97:75:c6:92:83:
                    5f:6d:7a:9e:e9:43:5b:65:ec:e1:ed:fa:61:9f:cf:
                    d4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F6:08:2A:45:B8:D7:17:E7:32:F1:69:9D:28:3E:6C:BD:A6:AC:05
            X509v3 Authority Key Identifier:
                keyid:D9:C8:FE:3B:74:AC:D1:24:60:1E:FB:13:06:4F:7C:73:00:60:96:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cj-O3Ss0SRgHvsTBk98cwBglno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/2cj-O3Ss0SRgHvsTBk98cwBglno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ce:08:1b:95:03:9a:e7:57:4c:51:ab:8f:8d:c8:12:1f:59:
         09:10:f0:ae:7c:a1:db:b5:ed:08:30:bf:de:6b:9f:91:72:0e:
         10:19:71:16:88:25:b5:bb:89:5a:1e:63:3f:59:98:ea:ed:96:
         91:4c:73:af:96:51:3a:8a:c2:ba:44:3d:49:58:b2:97:94:11:
         7e:d0:56:c0:56:2a:31:fa:79:75:4a:f4:60:f9:bd:d0:13:fd:
         82:a7:d7:66:d5:34:08:90:ae:fe:cd:28:9b:b0:b8:19:cc:7b:
         20:ff:62:97:56:de:de:12:73:55:06:67:16:74:2e:fe:91:06:
         5e:ee:a5:e6:30:d5:1f:5a:45:e7:db:33:55:28:f6:ee:4c:c4:
         11:62:ad:b0:70:eb:e8:7c:6c:f8:f8:61:da:b5:b2:71:9f:e3:
         a0:b5:3f:cd:df:14:87:07:69:47:86:af:fd:ed:6c:c0:98:e2:
         59:ef:fc:52:b1:66:13:3b:72:9d:2e:df:5d:90:10:19:57:06:
         fd:a4:86:34:bb:4e:91:d3:95:87:6e:fe:6c:0b:04:22:61:40:
         76:ef:d6:8e:9c:9a:c3:ef:51:45:c0:ee:7a:56:c0:ba:e5:1f:
         ed:d7:4d:dd:5e:8f:26:1b:f8:17:2d:63:86:c9:9b:ac:02:4c:
         59:b7:39:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:47:21 2026 by rpki-client