Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File:                     2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier:          evfAEE4SFikw2xcHf3pRNLFqeOIUUCYEAQi78t+0OAo=
Subject key identifier:   88:92:BE:55:5C:CE:41:7D:10:91:33:98:35:BB:1D:F1:C1:04:61:ED
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer:       /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial:       01A11297366ED163BF95616086B80B6BEBF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number:          0A4E
Signing time:             Tue 06 Oct 2026 19:01:02 +0000
Manifest this update:     Tue 06 Oct 2026 19:01:02 +0000
Manifest next update:     Wed 07 Oct 2026 19:01:02 +0000
Files and hashes:         1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: sfkgvVLkEhZAnr/4apjp6ZMoaIDOeRGmKpPB9/PnxbM=)
                          2: yAvipSzqrRMIwGb_dYX551oEf3c.roa (hash: PTrrr2bY67mRScuYX9mwm1OfW9eCtFbaYeGSBUpSsqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:97:36:6e:d1:63:bf:95:61:60:86:b8:0b:6b:eb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
        Validity
            Not Before: Oct  6 19:01:02 2026 GMT
            Not After : Oct  7 19:01:02 2026 GMT
        Subject: CN=8892be555cce417d1091339835bb1df1c10461ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:2b:a7:0d:0e:6b:f8:0c:bb:9a:1c:86:81:49:
                    a5:aa:e0:f1:69:95:83:97:36:b7:62:71:77:c3:5a:
                    ed:44:78:89:f9:06:3b:30:7b:65:a8:bc:3c:6a:49:
                    8e:27:dd:5a:91:bb:da:88:e7:8f:48:10:b9:05:4a:
                    2f:7d:21:b7:35:0e:aa:94:b3:b3:d7:d4:32:b2:52:
                    e2:fb:8d:a3:68:8a:43:0d:3f:02:71:81:b6:04:32:
                    ec:ae:0c:2e:bf:e1:13:e5:a2:0a:e0:1e:92:c7:70:
                    68:a0:20:b2:36:c9:95:d2:e1:9f:84:ce:9a:49:9a:
                    b0:54:f2:c8:c4:f7:71:e1:a6:dd:a8:ac:f3:d7:f5:
                    14:42:87:40:dd:d1:c7:36:de:ad:9b:7f:cf:a7:f1:
                    f9:ee:ec:b9:d1:d5:6a:c4:51:d3:6f:20:8d:df:a5:
                    73:1f:a2:80:04:98:f2:d8:91:6c:e1:72:48:6c:dd:
                    d0:d0:2b:8a:6c:58:cf:c8:8e:c2:cb:96:a4:3e:92:
                    6f:06:33:21:9b:91:49:cd:c9:02:25:f8:08:10:f8:
                    27:cb:58:f0:f6:cd:87:ef:bf:3e:a6:af:86:74:4f:
                    ef:96:56:1a:6a:2f:c1:69:bf:7a:a3:55:1b:18:d5:
                    23:53:41:c6:01:03:ac:e4:c5:d0:43:73:2b:95:92:
                    18:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:92:BE:55:5C:CE:41:7D:10:91:33:98:35:BB:1D:F1:C1:04:61:ED
            X509v3 Authority Key Identifier:
                keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a9:6c:99:7a:10:a9:82:ee:74:e4:19:73:fb:3e:d1:d5:76:
         cd:ef:d9:fa:91:32:f6:35:22:f8:3c:64:d0:49:93:1d:8f:27:
         ee:80:68:e9:7f:43:87:4b:ef:3a:58:45:65:66:91:8f:83:41:
         19:03:b7:a3:5f:81:ec:2f:2b:4d:dd:4e:4a:bd:6b:cb:ea:4c:
         c1:93:aa:7a:8b:56:78:70:cc:50:9b:15:fa:16:30:ea:ae:8d:
         5c:5e:a0:dc:fc:c8:da:e6:e7:52:da:26:fe:a4:52:17:32:04:
         1a:8a:82:04:3c:d7:dc:8c:26:fe:15:d8:4d:e8:e9:cb:19:cd:
         66:aa:01:ca:8c:c6:30:62:72:38:b7:4a:dc:96:04:5d:0a:1d:
         23:0b:f5:d1:24:18:7f:ed:6e:61:e8:6b:0b:84:38:38:30:be:
         2e:23:51:76:4f:3c:d3:9a:0d:1a:df:64:1d:da:f0:5f:6e:ff:
         18:04:95:37:9b:6c:00:a2:3e:54:64:10:67:bf:dc:ef:01:6e:
         ca:3a:ba:9d:ac:a2:15:1a:e0:fa:af:ec:89:16:96:47:ab:f0:
         4e:38:0b:fe:77:96:a5:ca:17:b0:97:87:64:fa:24:36:9a:20:
         69:91:3f:d4:3c:96:c4:ca:ec:71:02:5e:9d:40:0a:d1:62:5e:
         a7:e1:88:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaESlzZu0WO/lWFghrgLa+v4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGY1NzQ2YTZkYzc0MGI2MWI5OGVmODJkYzZjMzNkZGIy
MzhlZDgwHhcNMjYxMDA2MTkwMTAyWhcNMjYxMDA3MTkwMTAyWjAzMTEwLwYDVQQD
Eyg4ODkyYmU1NTVjY2U0MTdkMTA5MTMzOTgzNWJiMWRmMWMxMDQ2MWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CunDQ5r+Ay7mhyGgUmlquDxaZWD
lza3YnF3w1rtRHiJ+QY7MHtlqLw8akmOJ91akbvaiOePSBC5BUovfSG3NQ6qlLOz
19QyslLi+42jaIpDDT8CcYG2BDLsrgwuv+ET5aIK4B6Sx3BooCCyNsmV0uGfhM6a
SZqwVPLIxPdx4abdqKzz1/UUQodA3dHHNt6tm3/Pp/H57uy50dVqxFHTbyCN36Vz
H6KABJjy2JFs4XJIbN3Q0CuKbFjPyI7Cy5akPpJvBjMhm5FJzckCJfgIEPgny1jw
9s2H778+pq+GdE/vllYaai/Bab96o1UbGNUjU0HGAQOs5MXQQ3MrlZIYaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiSvlVczkF9EJEzmDW7HfHBBGHtMB8GA1UdIwQY
MBaAFNpPV0am3HQLYbmO+C3Gwz3bI47YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzIt
YmQ5NzFlOWM1MTk5LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzItYmQ5NzFlOWM1MTk5
LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdalsmXoQ
qYLudOQZc/s+0dV2ze/Z+pEy9jUi+Dxk0EmTHY8n7oBo6X9Dh0vvOlhFZWaRj4NB
GQO3o1+B7C8rTd1OSr1ry+pMwZOqeotWeHDMUJsV+hYw6q6NXF6g3PzI2ubnUtom
/qRSFzIEGoqCBDzX3Iwm/hXYTejpyxnNZqoByozGMGJyOLdK3JYEXQodIwv10SQY
f+1uYehrC4Q4ODC+LiNRdk8805oNGt9kHdrwX27/GASVN5tsAKI+VGQQZ7/c7wFu
yjq6nayiFRrg+q/siRaWR6vwTjgL/neWpcoXsJeHZPokNpogaZE/1DyWxMrscQJe
nUAK0WJep+GIJw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:04:45 2026 by rpki-client