Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File:                     K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier:          V7Dtx8yW49d2uzmlxeE+7STtKpiBPJZ5wt2/yDz/ZaA=
Subject key identifier:   73:08:E4:9B:63:38:A5:81:28:17:79:07:0B:69:8A:54:60:18:B9:64
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer:       /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial:       01A06EA8214DF773B498B78E8FD1D004AC2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number:          1218
Signing time:             Fri 04 Sep 2026 23:01:47 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:47 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:47 +0000
Files and hashes:         1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: tdTzT+FXD4ZTEVuUc9X9jsoLbpFsZX5dMtGQAMhSH68=)
                          2: dbilkSZsjUibJ1NutZ76qJvy820.roa (hash: /oJpuqHaWi4ouiqRZTNCC/b0oRgbkGtlYtRLMPSUMXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a8:21:4d:f7:73:b4:98:b7:8e:8f:d1:d0:04:ac:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
        Validity
            Not Before: Sep  4 23:01:47 2026 GMT
            Not After : Sep  5 23:01:47 2026 GMT
        Subject: CN=7308e49b6338a581281779070b698a546018b964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:71:bd:98:6c:ae:da:b0:47:bb:af:af:be:
                    05:e8:8c:9f:ae:fe:c3:27:d8:4b:eb:76:78:90:c9:
                    82:3c:ec:52:5e:5e:d6:d8:2b:ab:29:ea:fb:8b:88:
                    ef:b5:d1:3e:f4:f0:15:3a:00:f7:78:0b:24:f2:9e:
                    fe:a3:34:07:5f:02:c8:4a:dd:1b:f3:5b:d9:8e:d2:
                    ea:e3:15:78:d7:7f:ba:e0:ea:42:12:c5:57:52:c4:
                    6d:52:b2:64:5e:60:85:da:c2:f7:06:3e:61:28:82:
                    74:c5:70:09:e7:e8:d5:61:9c:e7:65:02:15:e3:37:
                    cd:61:0f:3e:37:2f:9a:50:2c:a6:e6:ce:4d:40:be:
                    f3:27:d3:79:ec:a3:69:e6:a2:e6:83:8c:04:d4:15:
                    b5:ce:c9:b9:68:5f:8e:eb:87:23:dc:20:16:9c:8c:
                    0d:c1:81:55:5d:7b:2f:46:aa:fc:e8:e9:fb:7d:d7:
                    46:7e:22:30:90:b4:b8:49:e6:50:4c:9d:2c:4c:90:
                    1b:87:4c:36:12:65:fe:84:f7:90:46:cd:8e:17:c6:
                    b3:97:bd:1f:37:46:3e:24:49:21:7b:58:ed:66:58:
                    6f:6b:39:df:4c:0f:04:8f:9c:f9:fa:8a:29:ba:ea:
                    48:52:fc:72:eb:c3:eb:27:a9:6b:93:4c:66:02:bc:
                    e6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:08:E4:9B:63:38:A5:81:28:17:79:07:0B:69:8A:54:60:18:B9:64
            X509v3 Authority Key Identifier:
                keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:52:5b:09:26:83:d2:90:28:ca:62:9f:74:15:d2:2d:1c:e7:
         90:c9:9f:df:c1:a7:28:aa:b4:e4:d9:7a:17:6e:c5:68:43:58:
         fa:a7:e9:d3:fc:dc:92:b5:3a:36:18:b8:74:5b:9f:a0:03:17:
         4a:4e:33:1e:1c:3e:7a:83:7d:aa:c0:fd:48:73:71:69:b9:10:
         dc:4c:ce:4b:3b:8e:6a:0b:43:d5:68:11:7a:d1:8e:62:b4:2f:
         4b:5a:4c:f5:95:70:6c:ea:70:ba:9e:f7:17:bf:c5:07:51:c1:
         1a:7e:42:5d:37:04:65:2f:b0:33:e3:c3:72:f5:98:68:97:6e:
         3d:c7:5d:f2:b8:e6:78:49:91:89:41:51:f8:84:5f:86:50:7b:
         56:d0:0c:23:2a:1b:2b:fe:76:57:f6:18:94:f6:a9:06:41:d1:
         6d:95:f1:26:84:29:32:2a:ec:5a:7e:ec:70:2c:50:3a:52:44:
         4d:7b:16:68:e8:ec:d1:91:52:5b:88:23:89:3c:7a:39:84:c5:
         f4:95:11:be:9d:b4:b9:e7:fa:0d:ae:32:0a:e9:12:70:b5:7e:
         ef:2c:fc:09:1f:42:59:f7:80:ef:8c:87:e5:84:c8:00:2a:d6:
         0d:2b:c0:9b:01:8a:63:a2:95:37:6a:cc:2a:9d:99:20:8d:f6:
         d2:e8:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:09:10 2026 by rpki-client