Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File:                     2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier:          1sSgXAGM3QVoZ8mtpEhNwOstgAhsBDd0F7MkuaQdYqI=
Subject key identifier:   48:BA:F9:29:27:4A:86:23:FD:03:A5:B2:FB:B2:94:A2:A4:D4:1A:0C
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer:       /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial:       01A13E25A878EEAB27052B3526D3E599CB7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number:          1752
Signing time:             Thu 15 Oct 2026 06:00:17 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:17 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:17 +0000
Files and hashes:         1: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (hash: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM=)
                          2: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: wCNzlacNEw9Gdv+xySHM9iTKFJJHIcA6GukZrtMQvm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:25:a8:78:ee:ab:27:05:2b:35:26:d3:e5:99:cb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
        Validity
            Not Before: Oct 15 06:00:17 2026 GMT
            Not After : Oct 16 06:00:17 2026 GMT
        Subject: CN=48baf929274a8623fd03a5b2fbb294a2a4d41a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e2:ae:35:1a:e9:6c:4e:e7:90:af:5a:9d:90:
                    bd:f7:b5:b0:ed:f5:3f:c0:53:9a:96:0c:17:1a:1d:
                    55:bb:55:38:14:e5:ee:92:de:5c:c2:ae:12:19:06:
                    ce:9f:1a:9e:f9:a8:ea:3e:0b:60:82:69:ba:04:fb:
                    bf:c5:db:fd:79:5d:5a:62:f3:28:5a:89:d2:dc:b6:
                    cb:62:5a:4e:59:3d:42:f7:8f:cc:57:42:f8:46:d6:
                    be:9c:58:ed:0b:d3:e6:13:d2:8c:5e:cb:f2:5a:1a:
                    8e:2d:2d:10:12:ac:d0:d3:a5:f0:c0:49:ea:6b:e8:
                    86:2a:a8:91:e3:75:43:ee:43:52:c1:6d:10:33:8a:
                    fd:67:e3:e6:05:05:26:c0:f9:4e:9b:5c:bc:66:1e:
                    66:72:fa:70:4d:20:5d:0e:43:2d:35:eb:92:06:24:
                    ef:e7:89:45:42:0f:d9:24:f5:a6:31:1e:77:3a:4d:
                    1a:6e:84:45:1f:e2:dc:e1:75:f0:19:3b:ec:39:00:
                    ff:6c:b0:de:f7:d9:77:19:68:38:cd:9e:e4:8c:1f:
                    f1:4a:03:e4:00:05:72:b8:ea:87:6c:80:c5:25:26:
                    9b:b9:84:19:b5:9f:3d:e9:35:04:33:93:a1:79:ce:
                    b5:93:42:17:b3:17:61:18:34:4b:86:15:81:4a:fb:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BA:F9:29:27:4A:86:23:FD:03:A5:B2:FB:B2:94:A2:A4:D4:1A:0C
            X509v3 Authority Key Identifier:
                keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0c:b2:85:f0:5b:53:78:4a:49:db:d0:7f:db:23:76:f7:49:
         d0:38:41:bd:a5:12:34:56:c3:39:3e:b8:41:de:0d:aa:37:6a:
         f6:61:61:e9:69:78:c9:57:1c:c7:b2:39:40:fb:74:42:8f:71:
         13:23:3d:b1:0b:e2:3a:3c:3e:dd:10:1c:e3:fb:c0:08:04:88:
         4a:7c:72:18:40:ce:db:bd:72:c7:ac:db:63:f7:10:26:dd:62:
         0c:a4:23:3c:a3:0e:b0:88:9c:9a:2d:40:15:57:96:0a:72:29:
         c6:56:df:8a:7f:8a:75:b8:4c:a9:12:32:5a:d6:ee:7d:ec:c3:
         6a:4c:77:30:e4:f3:5f:0c:ed:2c:a6:18:b4:b4:a4:6c:66:57:
         5d:96:11:dd:79:55:bb:a0:25:92:2d:1e:65:ac:56:90:02:57:
         a9:d3:e5:2e:3d:90:2f:f7:1d:93:f8:70:36:9d:0b:86:1d:21:
         86:1e:91:17:34:65:bc:40:a3:1e:81:f6:98:44:ff:72:ba:9b:
         4f:b7:d4:90:21:75:d9:62:69:ad:e2:62:91:03:30:66:91:f1:
         7f:c2:46:51:c8:35:98:ea:ae:35:5b:55:b6:ca:fe:c6:d2:42:
         e5:47:e1:32:b5:93:fb:8a:29:4d:62:d2:3e:52:ad:e0:93:bc:
         53:07:3b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:13 2026 by rpki-client