Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File:                     2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier:          t2tkzZ88eEEWDFO0Qj2xNamFMkfxzFrs/LHFj7ZOeIM=
Subject key identifier:   78:64:7A:9C:3B:E2:A7:05:6F:EA:B5:9F:D9:15:34:09:85:5D:64:59
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer:       /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial:       01A13FDE0071A4AFA2CA0A499A3D7EE6BE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number:          0CB1
Signing time:             Thu 15 Oct 2026 14:01:15 +0000
Manifest this update:     Thu 15 Oct 2026 14:01:15 +0000
Manifest next update:     Fri 16 Oct 2026 14:01:15 +0000
Files and hashes:         1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: WUygpzEex918nQ2gouSz+Msul1lwd6P39FbeQMn2On4=)
                          2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:de:00:71:a4:af:a2:ca:0a:49:9a:3d:7e:e6:be:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
        Validity
            Not Before: Oct 15 14:01:15 2026 GMT
            Not After : Oct 16 14:01:15 2026 GMT
        Subject: CN=78647a9c3be2a7056feab59fd9153409855d6459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:20:c5:c6:47:2c:e3:38:04:85:cb:a9:85:
                    d3:2f:12:61:e3:53:b8:ef:a3:13:d8:a1:74:f9:af:
                    a7:b5:62:b3:ba:7a:6b:0c:0c:fa:44:fc:1d:c6:29:
                    6d:81:11:cf:48:02:12:a5:c7:d7:a7:01:12:3d:f8:
                    be:bf:da:38:b3:13:60:ea:01:e6:df:d8:b1:d4:ee:
                    cc:7b:9a:c5:9a:9f:da:eb:2e:d0:b6:e5:d1:c4:4a:
                    03:6c:98:90:4a:2a:5a:34:22:b7:5c:68:80:4f:0c:
                    f4:df:6d:a7:03:57:04:4f:ba:24:2f:5b:d7:f9:2e:
                    12:9e:f0:c5:37:41:62:d9:98:50:36:d1:5d:78:84:
                    dc:0e:fc:0a:30:96:bf:ac:a6:71:1b:47:99:b1:74:
                    b4:6f:21:8b:a8:e7:95:67:54:59:d9:86:03:7d:06:
                    11:1d:b7:ef:ec:2d:90:d1:37:eb:ba:97:c8:8d:ef:
                    ab:66:3f:90:9a:d2:f8:d0:7d:bc:02:6b:ab:7a:94:
                    15:f4:90:ec:31:d3:d6:d4:ab:65:fd:a4:82:2c:77:
                    6a:a9:18:9b:b8:92:fa:c3:37:2b:47:00:7c:85:da:
                    08:40:d8:e5:ec:af:e0:63:cd:cb:08:2a:b1:e3:3e:
                    a4:7b:34:69:f7:91:b2:1b:d7:c0:28:c3:ed:db:a1:
                    70:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:64:7A:9C:3B:E2:A7:05:6F:EA:B5:9F:D9:15:34:09:85:5D:64:59
            X509v3 Authority Key Identifier:
                keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ca:63:8f:82:09:11:ac:87:bb:7e:19:75:bb:84:23:f0:71:
         f8:b7:86:fb:aa:29:1f:95:31:88:4a:08:c8:ef:cb:dd:d7:54:
         45:c3:e7:13:20:2e:d3:47:c5:64:bc:19:f9:c1:ab:04:5b:08:
         08:b3:77:6d:59:28:f4:40:1c:d7:7d:98:e4:ab:17:81:76:59:
         c0:1d:dd:85:84:b4:1e:b9:5a:5e:29:63:6f:00:45:f7:ea:c2:
         b2:2c:03:6e:3d:45:a5:b0:89:a0:5c:6d:92:92:73:73:ae:24:
         d2:56:0e:9b:37:9a:e5:96:81:7c:e7:a9:92:c9:be:be:25:65:
         ea:ce:90:9a:89:dd:9d:d1:93:12:13:4f:8c:85:4f:96:c4:c5:
         16:1a:d0:5c:f7:44:e8:c4:18:1d:da:7e:12:e9:a8:db:b8:b5:
         8e:37:fe:39:48:d1:04:02:79:2b:2c:2c:12:f1:1c:96:5c:db:
         95:42:be:17:aa:12:74:c9:4d:93:03:2f:d9:7f:c2:85:b6:7c:
         ff:26:b3:b8:f1:2b:56:f7:3b:c0:ec:56:97:77:9c:98:6e:0b:
         e4:a4:0a:a5:a2:33:c1:64:0e:8b:0e:65:fc:c8:b1:fd:6d:f3:
         df:83:9c:e5:22:b4:e5:64:86:9e:54:59:d6:f3:d2:0c:11:7a:
         89:47:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:56 2026 by rpki-client