Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File:                     2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier:          sgS5BCvoO1HOtrdvaVZdTtnTtQO3DxAokGd75+3V0mA=
Subject key identifier:   94:44:2E:42:29:BC:F9:79:D1:BC:23:D7:C4:4A:A8:FF:0C:6C:35:AC
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer:       /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial:       019EBE7F1406F07E9FF6AB1FE625D2A6CCBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 01:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:59 +0000
Files and hashes:         1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: 0VvDgM4ab1f+ze66Echap67ufO563Q/7Ikdeyuim0iA=)
                          2: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (hash: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:14:06:f0:7e:9f:f6:ab:1f:e6:25:d2:a6:cc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
        Validity
            Not Before: Jun 13 01:00:59 2026 GMT
            Not After : Jun 14 01:00:59 2026 GMT
        Subject: CN=94442e4229bcf979d1bc23d7c44aa8ff0c6c35ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:78:ac:86:98:b3:43:c2:c8:51:f6:20:a9:
                    44:5d:c8:62:6f:1f:4a:15:1f:09:a4:e3:09:15:02:
                    03:80:d4:2b:d1:27:fc:21:20:7c:78:a8:87:19:7e:
                    bf:cb:3d:d4:f6:1e:61:c7:c7:c4:cd:cf:c5:4a:14:
                    9e:de:00:26:44:6d:d8:b0:bc:96:26:d9:15:0c:d4:
                    34:cc:47:a6:54:de:d1:5f:9a:94:15:ba:60:02:a5:
                    1d:01:52:fd:a0:ec:a7:23:e2:ca:dd:dc:72:57:8f:
                    72:0f:1b:78:47:00:9b:c0:5b:92:70:d2:2c:a4:e8:
                    26:ba:cb:fc:59:31:81:87:9b:f0:b6:38:bf:16:af:
                    0b:9c:5b:7f:ba:ea:89:d8:a4:e9:08:95:a7:e2:a2:
                    1b:32:20:96:92:aa:9e:8c:cc:f4:ee:99:6c:f4:c2:
                    9f:41:85:1a:58:03:bc:23:79:d6:20:98:db:c0:c6:
                    50:7f:ac:6e:7e:61:3b:70:76:e9:bc:14:6f:40:09:
                    f0:3c:dc:0c:ce:4f:0a:93:a1:02:f7:84:5a:e4:33:
                    93:6f:d7:e6:f7:88:e3:6e:16:b7:99:5a:27:6e:7e:
                    f6:32:3f:a9:ba:ff:74:61:99:a9:6a:57:fe:7e:88:
                    7d:59:4f:cb:ce:b3:95:f7:38:12:a7:8e:8d:b2:d5:
                    5d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:44:2E:42:29:BC:F9:79:D1:BC:23:D7:C4:4A:A8:FF:0C:6C:35:AC
            X509v3 Authority Key Identifier:
                keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1f:3b:99:5e:0e:f8:6f:87:5f:1c:33:f9:33:0a:4a:7f:de:
         16:61:e3:26:a9:a0:84:a1:0d:a5:b4:b4:9a:8b:4b:0d:28:58:
         00:73:88:90:1e:d5:ee:0c:9c:0c:03:7a:8b:0a:a5:b9:7d:11:
         31:5e:5e:4c:2a:08:c9:08:d4:1f:71:2d:ce:c6:5a:e6:2e:a2:
         c2:9f:b0:0e:cd:57:9b:c8:54:64:82:d6:b8:fd:91:f0:10:9d:
         9a:be:db:59:97:52:14:0c:11:50:3c:6c:a8:a1:55:58:bf:a7:
         6b:4f:b0:08:4f:de:cb:03:4d:97:1d:b8:f2:4e:1d:e6:21:a5:
         f9:be:9e:97:84:ed:73:60:62:d2:b5:b2:b0:9c:70:57:96:57:
         c3:d2:ef:79:f7:47:b6:54:87:a0:f6:47:b1:d0:2b:bc:2a:ef:
         d0:cb:f2:3b:28:f6:e2:c4:4f:90:c6:6a:43:50:b0:c2:32:df:
         ca:a4:82:d6:c5:97:25:f7:d0:86:b4:bd:7b:5f:5d:d0:ad:9f:
         30:dc:f7:00:59:58:ac:4f:9b:ac:fa:dd:aa:f7:a8:8c:a1:3b:
         cb:44:c4:30:9a:ce:23:3c:92:84:34:84:81:63:57:17:bc:d3:
         8e:05:00:d6:d1:e5:95:ec:f8:13:03:58:f1:28:4a:88:34:01:
         7f:ca:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:16:57 2026 by rpki-client