Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File:                     2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier:          bwHpoXb//KtSB8UYU9PFbc9NfkOWaSV0JPtbOY7fGQE=
Subject key identifier:   47:FE:2A:34:B8:27:54:CA:D4:B7:4B:EF:6A:7A:74:3A:17:12:F8:3B
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer:       /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial:       01A001A5E86091CF5F0EBA52779DD29A911A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 19:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:45 +0000
Files and hashes:         1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: Vx70rn3YfD4THGR5XlkVD8LdfquVZ5jishUCtG1NcsI=)
                          2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:e8:60:91:cf:5f:0e:ba:52:77:9d:d2:9a:91:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
        Validity
            Not Before: Aug 14 19:00:45 2026 GMT
            Not After : Aug 15 19:00:45 2026 GMT
        Subject: CN=47fe2a34b82754cad4b74bef6a7a743a1712f83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:0e:c7:d7:b5:39:77:12:21:df:66:f3:bb:
                    fe:55:34:e2:f8:7d:b7:c9:f3:36:2b:8e:d2:a2:3c:
                    26:ca:0c:30:c7:ec:a4:99:24:1f:8e:1e:34:ef:40:
                    37:c9:1e:c8:05:30:46:10:a9:0b:1c:6d:c3:5b:2d:
                    50:48:14:19:4a:c5:03:24:6c:9d:3a:68:cf:f6:b4:
                    a1:fe:05:20:a2:de:fb:13:7d:8e:e6:16:ee:37:bc:
                    e4:b8:43:17:44:9a:81:49:2c:fc:ed:d4:13:74:83:
                    2d:e9:d9:bc:52:37:69:8c:a6:a1:f3:57:47:f2:d1:
                    c0:32:b3:27:3a:a4:39:c6:71:ba:61:c0:f5:74:78:
                    63:e8:04:c6:68:31:1e:0f:a5:a8:8b:88:8e:32:d7:
                    19:93:f2:6d:05:1a:e0:4f:b7:c4:b4:b3:0a:5b:91:
                    cf:83:3f:4f:28:67:30:6e:4d:4a:ea:17:7c:b8:35:
                    2d:4d:f2:2f:19:9d:3c:b6:98:91:c9:67:f4:74:f8:
                    af:8e:4a:cd:da:92:70:a2:7e:c0:7e:38:47:9f:95:
                    31:9e:0f:7c:3d:0b:88:84:9b:ef:89:f4:4d:f7:be:
                    99:31:6f:33:66:df:05:5c:79:6b:57:4d:b9:86:0c:
                    95:49:48:6e:42:5f:3e:1f:0c:2e:31:39:40:60:e3:
                    21:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FE:2A:34:B8:27:54:CA:D4:B7:4B:EF:6A:7A:74:3A:17:12:F8:3B
            X509v3 Authority Key Identifier:
                keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d9:b4:2c:92:70:dd:2c:0d:15:51:31:a4:d6:da:c0:8f:2a:
         c0:12:35:89:e6:df:6b:ca:5f:22:be:bf:68:44:c1:32:c1:93:
         9d:f3:5e:3c:3e:2c:99:00:59:ef:35:f3:68:2e:98:e8:69:fe:
         06:61:19:7e:0e:12:2a:45:78:df:fd:9e:3e:01:3e:2f:87:07:
         d5:ec:1d:02:9a:4b:3c:20:34:b2:1c:b8:4c:ac:bf:71:43:01:
         0f:1b:a3:8d:c2:27:48:10:be:79:25:67:08:86:4e:c8:8b:40:
         58:d2:5d:9f:90:46:f1:65:f0:3d:17:f3:14:53:db:00:99:46:
         67:31:dd:0b:23:e0:2e:57:c5:ce:b3:38:c5:92:78:b9:da:52:
         90:a6:c3:67:05:4c:fa:ad:9f:d0:df:c5:e0:f1:20:f7:54:72:
         d8:58:31:5c:43:49:f1:b2:18:de:c0:5c:e2:a9:c9:03:41:fd:
         aa:d1:ea:7b:2c:c8:65:50:cf:cb:24:dd:bd:3a:76:b8:71:01:
         d3:78:88:3d:47:f4:ab:48:fc:71:ac:1e:b9:93:28:8b:94:46:
         7a:d1:7d:fc:44:12:23:36:45:7d:a0:9b:e5:76:d8:9f:ad:65:
         4f:9f:52:b2:2a:cf:a9:c5:04:e6:f2:e6:47:ad:67:99:66:55:
         9a:0a:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:23 2026 by rpki-client