Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
File:                     P2TX2Py26n88U-wAJA2Owcl3Zqc.mft (raw, json)
Hash identifier:          nGFBDX6901erthwx/XQHDtDMM0lMR2Njp1z0lxtiv1Q=
Subject key identifier:   42:6D:B9:82:C5:36:DD:2B:F3:8D:E4:AB:FE:E3:0D:62:7A:A3:15:82
Authority key identifier: 3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7
Certificate issuer:       /CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
Certificate serial:       01A17F985DBD2D8C02FC0391A1819FDE7B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
Manifest number:          028E
Signing time:             Tue 27 Oct 2026 23:00:54 +0000
Manifest this update:     Tue 27 Oct 2026 23:00:54 +0000
Manifest next update:     Wed 28 Oct 2026 23:00:54 +0000
Files and hashes:         1: P2TX2Py26n88U-wAJA2Owcl3Zqc.crl (hash: MM7GK7aFGDhhEjskD7raeS01ynQjGRlAYair2zmAUKQ=)
                          2: sSJSF0Ef5iNGBXgop50-6zZdD2k.asa (hash: 2H0jdgMOud4+cQqq8gHUDsGfxxUMnvX/NXbs1EyPhbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:98:5d:bd:2d:8c:02:fc:03:91:a1:81:9f:de:7b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
        Validity
            Not Before: Oct 27 23:00:54 2026 GMT
            Not After : Oct 28 23:00:54 2026 GMT
        Subject: CN=426db982c536dd2bf38de4abfee30d627aa31582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:57:ed:af:fd:c3:a6:c4:df:4b:ca:8b:16:
                    d7:b5:dd:96:60:0b:c0:63:d8:1b:a0:df:9a:0f:4d:
                    26:7f:5c:84:7c:88:06:b8:cf:40:3a:36:90:42:a8:
                    c9:5d:ab:59:3a:9d:00:8d:78:f0:9c:30:1a:82:e9:
                    da:95:3d:d0:6c:cd:6f:f4:d1:96:ff:bb:42:93:20:
                    e1:03:71:70:14:0b:10:cf:d6:b2:52:a9:e3:28:93:
                    fd:56:35:31:09:6e:1f:b9:3c:13:04:af:b6:de:d1:
                    08:ec:b1:5c:ee:da:e9:d9:1d:9f:7b:9c:5e:c5:2d:
                    48:60:d6:a3:b0:5d:f2:a5:85:c2:83:2c:4f:5b:6f:
                    4e:dd:2a:ad:c8:b1:f6:7e:e0:97:c5:4c:ae:f2:96:
                    28:b5:a5:6d:3d:db:ad:3c:ed:65:f2:39:aa:35:6f:
                    9a:d6:bc:16:2b:55:6a:ef:f1:8e:90:05:19:50:04:
                    50:98:36:e3:61:54:6a:29:cc:b0:99:8a:80:16:14:
                    d7:75:74:d7:9b:80:59:86:6e:38:28:9a:49:e7:8d:
                    21:8e:db:2c:8a:83:13:64:10:90:a2:1d:f9:2b:48:
                    bf:cd:12:45:4a:df:05:79:c2:fb:90:cf:d4:b5:86:
                    a0:ae:34:61:c2:a0:a9:85:c6:30:79:11:f5:ce:78:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6D:B9:82:C5:36:DD:2B:F3:8D:E4:AB:FE:E3:0D:62:7A:A3:15:82
            X509v3 Authority Key Identifier:
                keyid:3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a7:49:39:cf:eb:80:23:3d:a3:85:d8:b2:81:de:26:b3:73:
         6f:40:0d:27:aa:22:52:53:72:04:89:e9:5b:24:cf:14:33:86:
         d0:01:1d:65:09:85:46:df:1b:23:36:cb:54:43:77:0d:fd:4b:
         4a:7c:da:d8:f0:e3:79:c2:5b:f6:b6:20:3d:da:87:a5:dc:50:
         2b:a9:d1:c4:f3:d3:0d:6f:12:c1:85:c2:61:f8:0e:1e:ad:88:
         ed:5d:a8:0b:34:c7:01:42:3d:cb:40:66:13:17:95:9a:96:5b:
         f5:92:27:5b:11:b3:3d:5d:87:ca:56:70:23:8f:f1:16:a7:84:
         4a:32:96:78:2f:f5:12:6e:cb:f9:f2:e6:25:da:22:1a:13:74:
         77:ec:d1:c1:c0:b3:75:bd:d3:ee:e3:ac:ff:fd:4d:13:65:39:
         20:34:79:15:fe:14:ce:c3:7d:f9:cd:bf:ab:c9:b5:b0:ad:67:
         50:ad:cb:61:be:5c:66:dc:f2:a2:fe:a6:af:a8:51:61:75:71:
         e2:a9:df:70:cd:dc:54:37:e1:ae:2c:62:61:5e:7e:4d:70:70:
         7e:db:de:e8:f6:92:9e:45:29:df:fd:ff:90:3b:de:3a:0e:83:
         e9:02:47:b4:13:89:f5:28:69:9b:64:5d:4c:de:65:c4:e9:0f:
         20:59:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:15:37 2026 by rpki-client