Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File:                     2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier:          +bflooKGZ5ryI1noPkL/LQGyE6qz0m/FT+9T1BXm8ug=
Subject key identifier:   72:8D:FE:29:5A:1C:2E:7E:2F:C7:7F:8D:1C:8E:2D:BD:58:84:A0:92
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer:       /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial:       01A14B3D89F40D9C25FF0E3C2567A5300ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number:          0694
Signing time:             Sat 17 Oct 2026 19:01:26 +0000
Manifest this update:     Sat 17 Oct 2026 19:01:26 +0000
Manifest next update:     Sun 18 Oct 2026 19:01:26 +0000
Files and hashes:         1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: aCgNE4+yT9HKTePPR4Pl38XhFBM7BSy/4MOlF6GLn94=)
                          2: w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa (hash: X6/QclUhRxI/QNNJjqFf+pxHUaHW1PpD7IKrBpkxN4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:3d:89:f4:0d:9c:25:ff:0e:3c:25:67:a5:30:0e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
        Validity
            Not Before: Oct 17 19:01:26 2026 GMT
            Not After : Oct 18 19:01:26 2026 GMT
        Subject: CN=728dfe295a1c2e7e2fc77f8d1c8e2dbd5884a092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:e8:9e:db:4e:b8:55:86:51:51:a4:55:b0:
                    dd:08:94:7b:09:56:42:2b:fa:c0:e5:82:37:2e:03:
                    e8:ac:63:3f:2b:46:be:8e:93:b1:93:2e:5f:34:71:
                    ca:03:34:e3:23:eb:f7:fe:75:8c:98:4f:66:09:7a:
                    b7:89:05:59:7e:6a:48:7d:16:8d:94:c6:d6:cd:81:
                    76:eb:b1:34:35:85:ae:c6:3d:89:1b:d4:bf:42:f9:
                    86:49:e0:88:4e:06:f5:f0:9c:b5:f5:5a:75:49:07:
                    4d:f3:a8:ca:4b:61:84:f0:d7:6c:e4:82:76:5e:7c:
                    37:02:ba:e0:b6:54:9e:51:5d:65:9e:3e:14:5b:33:
                    6a:0e:fe:49:3f:64:06:c8:ca:c4:30:26:aa:ce:99:
                    b7:3f:f3:75:8b:bc:de:89:95:b1:03:09:ce:7f:c5:
                    35:75:89:2b:61:14:01:28:95:9a:92:b8:e0:2b:ff:
                    b4:c2:c7:8b:bb:aa:4b:c3:76:87:11:1f:e5:f7:05:
                    78:06:d6:c3:b3:39:71:2e:2f:92:5b:15:5a:92:6f:
                    4e:53:21:4f:57:7f:66:5c:18:9d:c8:28:2e:ca:d8:
                    e6:30:88:55:d0:1b:2c:cd:66:4f:41:e8:f2:ff:cf:
                    ee:b7:3e:e5:cf:a5:6c:d2:32:5e:9d:de:be:c5:10:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8D:FE:29:5A:1C:2E:7E:2F:C7:7F:8D:1C:8E:2D:BD:58:84:A0:92
            X509v3 Authority Key Identifier:
                keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:52:24:b9:21:b2:59:1b:19:2a:1a:68:1e:d9:41:40:27:dc:
         c7:5d:5c:1e:fd:ff:64:00:15:66:76:1e:19:7b:6e:19:9a:10:
         cb:f0:a6:9b:be:8b:bc:3a:38:bd:20:d8:89:d2:a2:48:db:ac:
         63:5d:29:c5:cb:b8:f4:25:52:1b:b8:db:de:94:94:f0:44:51:
         83:b3:5a:1a:9c:6e:63:37:2a:b0:a5:18:69:c4:02:c6:74:7d:
         05:03:95:c3:18:e6:fe:64:12:99:9f:91:31:4e:a2:94:3c:f1:
         db:c3:e0:e4:70:13:8a:26:3a:78:ac:3b:ce:02:22:c2:10:4e:
         eb:e9:75:af:57:d4:a7:7b:fe:01:b4:9c:a5:26:d3:1c:56:8a:
         5f:53:cc:95:04:d8:34:f5:3a:ec:d5:49:ed:88:6b:71:bb:41:
         2f:d3:54:9d:e9:25:55:cc:5a:e5:a3:b2:c5:a0:82:e2:c4:b4:
         19:cc:37:d2:71:a6:d1:d0:9d:b1:b5:44:29:9e:1f:23:c3:ec:
         b9:87:0e:52:f7:09:9f:01:66:b4:83:57:0f:fc:f3:cd:3d:03:
         73:ff:8f:6b:b0:29:74:20:e0:03:03:19:26:31:0b:e0:8b:67:
         0f:c8:04:a8:1a:ae:02:2a:47:2e:64:e1:0b:be:63:81:b0:54:
         73:19:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:16:47 2026 by rpki-client