Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File:                     2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier:          4z8Ja8BluccLLix6XhAOCpEBY0/cdnOkJuwxwf0TREw=
Subject key identifier:   0E:E1:84:04:B0:19:45:B5:E7:CF:63:49:B6:B9:0B:62:64:FE:BD:5B
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer:       /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial:       01A16C118B8DEC2A0EF5E475E6D8E5D1A7F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number:          06C2
Signing time:             Sat 24 Oct 2026 04:00:51 +0000
Manifest this update:     Sat 24 Oct 2026 04:00:51 +0000
Manifest next update:     Sun 25 Oct 2026 04:00:51 +0000
Files and hashes:         1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=)
                          2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: sj2/+6n6F83+dj7yYkJIg5CmxJrfqqA/2cFHA6420Uo=)
                          3: 4hkkLe2dcq377WzDqzkSvMCtsco.roa (hash: z6R8cUSnmMVlMDW9YnWwZZPf73zricPf+TEJ86PN7Ko=)
                          4: 4vxZx7uBqQQ6FyEF2MVBFY1WSaQ.roa (hash: yT8MYmQtVQnTBHZPhbP/WPtpcUBRa3XEcKCSlPgpz98=)
                          5: AfpxLvj3BiyLwMcA6kKVrdFgW6Y.roa (hash: KKSEdsLLrws/RATwLIqwcq742JLEElRzqndIEau2IyI=)
                          6: Kj2mVBpZK5i3xSiOOVydeQMB-K4.roa (hash: 3BF9uGhA0G3sb3UpfLCU/KTehTModommlZcD+YYnZKQ=)
                          7: QxbU9vvhcA75ENS1lZHkpNyfErk.roa (hash: yv8oGh8GGZWvW+9jiR8h6piajHrkuA5egN2MppGfk+w=)
                          8: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=)
                          9: TDn2Si0wredvySS4eb6YcQsXGoA.roa (hash: PViZzYWq9wpVr0Wiz/5xTXadoeHO740enY0H0kd7OSI=)
                          10: Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa (hash: 0/YnvO1iRna/5MI8gBnTd4qBir5DLarEENTjj5s3VEU=)
                          11: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=)
                          12: aNmhMUglIr2giFdXm-cOJi5f7t0.roa (hash: 3MjHDUiU+/7uDICeGLTTAd4NEfz+JjZNSCSY07jxmow=)
                          13: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=)
                          14: jCLt2xm1fkgnOn9HMLPQJTVuVNc.roa (hash: c9YGeeLCkAXiNDBuTkfpy8lAq+y929pm91OusU2TBc0=)
                          15: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=)
                          16: kyRVCGVmasDx6k38w-izwTFSZVI.roa (hash: kfM4cnv70+/otrzSrUgrUJZAq/Yw97sDNJ3BUv5w7l4=)
                          17: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=)
                          18: nmunvZ8NjUAQxyXLc7q3E6asADA.roa (hash: bcuDcNnBDq7F5VI75bQ3a3MYz4yXIjZXvHo8ZRs1H3g=)
                          19: qbUtGSmF4OJDy4q4dlRGp4OciDs.roa (hash: VVCFN7s9B67WrTXffUSFAE1mRjFGjdVcuJGLxmq/AY8=)
                          20: tUYOdiUxF4HxrSVOg847WMoBqws.roa (hash: N6nWp89HDr0pIhLLPi1oB+mkzKMLsBnFNGgdLRBYN30=)
                          21: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=)
                          22: xOtKmGFOQ0Si4ry-DnEnpbMZzfw.roa (hash: uloNgiaPX4XD2hk6wXEnVMKHkzySU+UwLh3IKRIIyAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:11:8b:8d:ec:2a:0e:f5:e4:75:e6:d8:e5:d1:a7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
        Validity
            Not Before: Oct 24 04:00:51 2026 GMT
            Not After : Oct 25 04:00:51 2026 GMT
        Subject: CN=0ee18404b01945b5e7cf6349b6b90b6264febd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:92:87:dc:54:20:11:0a:7b:20:6c:24:1c:
                    ff:eb:fe:f7:8d:a3:64:9c:02:f5:6d:54:a7:d8:a6:
                    04:7b:60:ab:1f:91:a3:c9:85:a4:50:d2:46:a5:19:
                    6d:c3:21:2d:66:3f:a5:44:55:6a:76:8b:00:bd:fb:
                    3f:86:3f:aa:46:9e:e1:89:14:07:bb:e3:54:e4:df:
                    55:17:66:47:75:06:03:c6:03:f0:8f:bc:10:7a:ba:
                    27:77:89:1d:7a:d6:56:d9:0e:4f:4d:5d:80:8b:6c:
                    6c:8b:42:18:12:08:13:a1:dd:c4:d2:0a:0b:e1:0c:
                    35:1b:8b:60:2d:ad:6c:94:ee:1d:31:29:26:f8:82:
                    c3:40:9a:bb:cb:46:99:7b:12:0c:7f:a8:44:96:44:
                    a7:01:b9:52:42:69:f5:d2:ba:9b:58:6c:68:e6:4f:
                    01:03:8c:d4:2c:3a:e2:0b:9c:b7:61:e0:1b:b7:b4:
                    74:52:34:07:b9:18:a7:d3:54:28:67:a9:e2:1f:6a:
                    04:e3:bf:cc:09:27:d8:d7:a6:ea:62:cd:74:18:c6:
                    40:b2:de:3e:c3:e8:92:c1:5e:c2:16:6d:69:de:91:
                    ec:a4:d1:e4:12:95:c5:97:d5:9e:52:9e:af:49:b3:
                    2d:9f:5a:d2:1e:24:c1:61:91:7e:5d:34:a0:4c:4f:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E1:84:04:B0:19:45:B5:E7:CF:63:49:B6:B9:0B:62:64:FE:BD:5B
            X509v3 Authority Key Identifier:
                keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:e1:c0:40:ab:c7:01:db:74:6a:1a:f1:f7:ff:75:2d:77:0a:
         53:29:25:32:24:29:4d:45:67:86:95:64:33:50:17:b7:45:4e:
         bf:ee:d9:0b:ea:eb:9b:92:51:66:69:19:93:1a:16:4f:16:3d:
         53:5f:65:52:5c:48:e2:8b:6b:60:20:04:1c:63:8a:a4:b6:71:
         55:af:18:b9:0c:b9:05:5c:2a:03:d3:a8:ad:e0:10:3a:f0:48:
         99:58:29:16:86:86:07:f5:77:33:02:ce:44:5b:bf:24:d3:b8:
         0d:c6:4c:b6:7c:c4:b9:1b:28:78:5e:15:ca:5c:e1:e9:85:9a:
         ad:57:d6:d3:94:f1:3b:8f:d2:bb:60:4a:f4:fe:9f:19:bd:a1:
         ef:34:88:77:e9:38:b5:78:19:57:5e:fc:0b:3f:c7:de:de:14:
         b6:cc:68:cd:67:d4:9c:77:e3:87:ca:9c:b2:38:69:3a:aa:ce:
         c4:da:7e:c7:61:be:56:b9:5e:84:7a:b7:9b:07:63:e8:ce:47:
         f7:66:74:ee:7c:fc:71:32:12:76:21:7b:be:d5:24:e0:ba:d1:
         62:68:73:5c:7f:a1:f8:d1:bd:d6:1c:b2:82:bd:0d:f6:13:1d:
         1b:ec:4a:b5:a5:92:5b:9f:86:09:d4:1e:24:89:3f:98:65:96:
         20:c5:bc:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFsEYuN7CoO9eR15tjl0af0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx
Yjc0ZGUwHhcNMjYxMDI0MDQwMDUxWhcNMjYxMDI1MDQwMDUxWjAzMTEwLwYDVQQD
EygwZWUxODQwNGIwMTk0NWI1ZTdjZjYzNDliNmI5MGI2MjY0ZmViZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoCSh9xUIBEKeyBsJBz/6/73jaNk
nAL1bVSn2KYEe2CrH5GjyYWkUNJGpRltwyEtZj+lRFVqdosAvfs/hj+qRp7hiRQH
u+NU5N9VF2ZHdQYDxgPwj7wQerond4kdetZW2Q5PTV2Ai2xsi0IYEggTod3E0goL
4Qw1G4tgLa1slO4dMSkm+ILDQJq7y0aZexIMf6hElkSnAblSQmn10rqbWGxo5k8B
A4zULDriC5y3YeAbt7R0UjQHuRin01QoZ6niH2oE47/MCSfY16bqYs10GMZAst4+
w+iSwV7CFm1p3pHspNHkEpXFl9WeUp6vSbMtn1rSHiTBYZF+XTSgTE+p/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7hhASwGUW1589jSba5C2Jk/r1bMB8GA1UdIwQY
MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt
OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx
LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyOHAQKvH
Adt0ahrx9/91LXcKUyklMiQpTUVnhpVkM1AXt0VOv+7ZC+rrm5JRZmkZkxoWTxY9
U19lUlxI4otrYCAEHGOKpLZxVa8YuQy5BVwqA9OoreAQOvBImVgpFoaGB/V3MwLO
RFu/JNO4DcZMtnzEuRsoeF4Vylzh6YWarVfW05TxO4/Su2BK9P6fGb2h7zSId+k4
tXgZV178Cz/H3t4UtsxozWfUnHfjh8qcsjhpOqrOxNp+x2G+VrlehHq3mwdj6M5H
92Z07nz8cTISdiF7vtUk4LrRYmhzXH+h+NG91hyygr0N9hMdG+xKtaWSW5+GCdQe
JIk/mGWWIMW8Yg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:21:56 2026 by rpki-client