Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
File:                     2y7CKma1skmGOV_u1_tbkOKMm-Q.mft (raw, json)
Hash identifier:          8l+fA4vEkDyeI3JtVWI0IdkRBHredwMHhJW3MFeS/Dk=
Subject key identifier:   62:56:2A:3D:73:E7:D7:CC:80:BA:F3:F5:47:D4:C8:F9:1C:D4:47:69
Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
Certificate issuer:       /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Certificate serial:       01A1464D8053C3FD6DD592563BD2636A9F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
Manifest number:          02D8
Signing time:             Fri 16 Oct 2026 20:00:46 +0000
Manifest this update:     Fri 16 Oct 2026 20:00:46 +0000
Manifest next update:     Sat 17 Oct 2026 20:00:46 +0000
Files and hashes:         1: 2y7CKma1skmGOV_u1_tbkOKMm-Q.crl (hash: K+0634SHoSKeiF5F7M+HilIR6qne1u+D5zXyuy89t20=)
                          2: 5OcccwQslADzpJ8HL6Y7KqGcVVU.roa (hash: irYRIWXEtiw19tZuoevHJTgjYRjpfkAs2mq69Ns5wSo=)
                          3: 6RGkspdxkAWpYvFpm-8ta5s8IEs.asa (hash: SMkfixcVMM4K7Z6BHPlzlnNfBWBe+ZvLZ06HB1RuIn0=)
                          4: Wc5ljSD5VjkVZd4v1ISBd1k6dNQ.roa (hash: jyDuHZmz8mqWG2X7hHBWucB2QcY/4S07R3yhK3xzlzg=)
                          5: t-YR2UdrGJYsX4ZnfkqO15T5g9I.roa (hash: 21jzaahsgBvVI66l1ZAF+dhUPihnDJv9H/MfKJOkhNs=)
                          6: uOrZo6gF2WVlF4nc6xlIIShI6cM.roa (hash: 4dFwviDJ3qVWkRoE0eY86El9WripywfdZeQ8NNS5Yl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:4d:80:53:c3:fd:6d:d5:92:56:3b:d2:63:6a:9f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
        Validity
            Not Before: Oct 16 20:00:46 2026 GMT
            Not After : Oct 17 20:00:46 2026 GMT
        Subject: CN=62562a3d73e7d7cc80baf3f547d4c8f91cd44769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:29:60:50:e8:83:6d:ed:7c:d6:a6:30:98:
                    f4:2e:f9:a5:a8:2b:d3:f0:1a:92:57:bf:2a:f6:d5:
                    0d:d6:9a:1b:f1:cc:98:0f:50:ec:23:a0:37:b3:44:
                    79:69:e6:e5:3c:40:d1:de:fe:57:64:e3:fe:00:14:
                    c9:d3:d5:2c:83:1d:fd:13:8d:c9:44:41:c1:ad:3e:
                    f1:60:c5:c8:63:16:3b:4e:a0:fc:97:e1:ad:c8:a7:
                    f9:a3:85:50:2e:91:a0:e5:ed:70:13:e8:2e:04:52:
                    7f:ed:a7:81:c0:a1:49:f1:78:d5:df:e3:9d:d5:bc:
                    ea:e8:12:07:c3:c2:9f:aa:77:2b:fd:17:44:10:e7:
                    e3:57:49:b8:a8:6a:75:e2:c2:2a:05:a0:fe:ec:dc:
                    97:59:70:9b:77:ed:eb:92:69:a6:95:35:93:12:ad:
                    5b:df:8e:7b:51:73:9a:a8:56:d3:31:5d:0f:a2:28:
                    18:f7:95:6c:37:48:61:ce:cc:33:4a:d4:0e:c3:0a:
                    67:fd:dc:b1:0e:e5:42:5c:f8:b3:4f:07:a3:3e:02:
                    6e:79:1b:b0:57:e2:0d:23:09:e3:1c:61:68:0c:94:
                    cf:e6:e5:d5:40:67:e9:b8:e2:a6:98:ae:29:bd:65:
                    ff:07:9d:4d:02:db:bd:b0:b6:6e:af:32:a0:cf:1b:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:56:2A:3D:73:E7:D7:CC:80:BA:F3:F5:47:D4:C8:F9:1C:D4:47:69
            X509v3 Authority Key Identifier:
                keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:5d:af:9c:3f:29:6c:66:37:41:63:3d:eb:45:a3:36:81:b5:
         a5:15:29:20:7a:fb:c4:fb:cb:94:40:78:41:b0:d6:08:6d:dc:
         f8:3f:8f:66:d2:42:e8:c6:0f:53:ac:80:17:d3:3e:8d:8c:99:
         86:4e:1c:04:10:b7:ea:fc:fd:e8:06:ed:5d:aa:ba:28:18:fc:
         6d:89:7c:a7:62:46:3d:e9:84:02:be:ea:ae:f5:2e:40:fa:a2:
         f5:28:92:76:11:e9:19:00:40:6e:ef:09:98:14:03:93:c5:6a:
         b8:80:2b:ba:78:a3:f5:96:fe:b2:5a:17:a4:d7:af:69:17:70:
         3d:81:f6:5c:27:bc:64:81:a9:09:fb:54:25:d4:0d:d8:ac:14:
         08:39:86:3b:09:60:38:91:30:58:cf:f8:5f:da:17:0e:b5:a5:
         c1:75:de:5b:e7:ac:a4:3c:2a:47:6b:cc:99:7f:2d:8f:fc:2b:
         32:65:39:da:0a:15:75:60:84:31:c9:4a:e2:87:f7:b5:8e:32:
         89:19:1b:08:f8:f2:b5:a0:75:a5:06:24:d9:da:9b:22:14:cd:
         7e:af:cc:a1:1e:86:ad:a4:ba:20:27:62:23:82:6a:57:19:5a:
         28:f2:a7:69:51:18:39:3b:a0:a6:10:b5:65:51:26:f3:18:94:
         91:37:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:50:27 2026 by rpki-client