Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          9YCEbe6qCCSN6d61XiLAwrh/EnRK72YfxzG0q0P5rHk=
Subject key identifier:   48:A0:D5:6A:73:A1:5D:E9:4D:DD:F3:93:BC:32:4C:76:53:0C:5C:EC
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019EBDA2F9D08121A00A8E441EFF82173CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          195B
Signing time:             Fri 12 Jun 2026 21:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:35 +0000
Files and hashes:         1: 1-X9f31YmOI6sGDiMsygwz3v06EQ.roa (hash: lBKrn9OkfPE6uE/SW8MJqqSzuyUTtFebuy/HpzOS5Gw=)
                          2: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: fw4IpcQ0s47bJXJvn2ATnxBuN3gTCZDtG0BqsFJ3bvc=)
                          3: FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa (hash: HY7azWr+1lDIeYP4uBd4A0p2MAT8AwHdslPwrQq6vgY=)
                          4: SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa (hash: r7gescwog8g3OhaT+uiQpA9jU7IQngckD+CGfZrI6kY=)
                          5: dr0WTbKAOdZCmM023BVBdPDWRk8.roa (hash: QpYxSWr/vVLdYe2PKpH5AUkh/HBsOurm0FmWy5lE2hA=)
                          6: sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa (hash: mG9f/0+7q2d/QWjgfY6kLzwp92/dXDDFf1IO0cmQvoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:f9:d0:81:21:a0:0a:8e:44:1e:ff:82:17:3c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Jun 12 21:00:35 2026 GMT
            Not After : Jun 13 21:00:35 2026 GMT
        Subject: CN=48a0d56a73a15de94dddf393bc324c76530c5cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:f3:09:b2:70:d4:73:f7:8b:c0:c7:67:20:
                    30:5c:8d:73:68:a5:e4:93:9a:e0:65:bf:64:0b:84:
                    64:52:21:c5:c6:f3:11:65:a8:d8:e3:a2:aa:0e:ec:
                    41:e3:24:a1:c6:2d:7a:e9:9b:be:8c:75:72:42:4e:
                    86:fb:2d:c9:fa:10:73:0a:d2:db:5f:bb:19:7a:cd:
                    19:5f:cb:a0:2f:5e:fd:86:2b:01:48:b0:5a:ab:5e:
                    6b:2d:46:be:ec:16:d0:1c:e4:8d:fc:05:88:2f:af:
                    9d:6c:f3:f2:03:81:6c:61:e0:05:b5:8a:4b:e3:85:
                    57:e8:f0:2d:d9:9b:b0:69:2d:8e:65:78:f3:a8:7a:
                    5f:62:2d:70:b4:b3:45:db:ff:92:04:29:37:86:60:
                    1d:4f:f9:ba:a4:89:a2:b6:1b:e4:8b:24:d5:74:e8:
                    f1:8c:02:ac:6d:03:45:b7:9b:50:65:a1:ab:b1:ee:
                    fb:ec:a3:fc:2c:6a:f5:23:28:c2:c5:91:58:b9:37:
                    d4:b6:a2:53:82:d1:1b:24:65:95:35:9d:d2:84:9b:
                    f5:2d:af:df:4d:1c:00:bc:65:6e:33:f1:32:f8:0d:
                    2c:05:ed:47:cf:1d:30:4c:ef:3b:ed:e7:38:8a:5d:
                    7b:26:41:49:cc:f5:6b:0f:70:40:02:e1:86:49:25:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A0:D5:6A:73:A1:5D:E9:4D:DD:F3:93:BC:32:4C:76:53:0C:5C:EC
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:db:51:b5:4e:ef:9d:79:fd:49:8d:71:0c:0a:6c:52:5a:56:
         0c:2a:f3:e3:ee:74:b8:c7:0e:73:c6:e2:7f:8a:89:ca:92:bc:
         82:51:cd:ce:5e:b6:e2:6d:33:42:4e:57:a1:59:94:6e:f6:b4:
         be:6f:af:d3:b2:d9:88:32:12:0a:9a:6f:51:0a:fe:47:eb:f6:
         9b:ee:a6:f0:7f:03:3c:ce:48:eb:b1:6e:06:e6:90:5e:17:0d:
         f3:7f:c8:7c:b3:4e:7b:ad:4a:63:a3:aa:7f:a3:42:b9:ca:1e:
         75:b1:e2:ee:a6:4f:49:2b:cc:3a:35:33:1f:06:c3:a9:f4:05:
         db:70:8c:cf:f6:a4:a3:af:eb:60:da:01:6c:6d:e7:35:46:83:
         f6:26:46:41:72:bb:66:65:be:f3:dd:89:09:76:14:ca:6c:48:
         52:a9:8b:d5:8e:93:7e:5a:90:39:0b:2a:c8:04:d5:25:e7:e8:
         90:53:f2:b5:da:02:4a:0c:a7:93:6b:85:3b:d5:c9:3b:21:50:
         b9:7b:fe:6f:4d:30:bc:29:d2:bd:3f:70:64:a9:d4:9b:29:56:
         8b:bd:6c:13:ba:aa:8f:0c:88:2c:23:ff:d2:8c:fe:fb:8c:bb:
         d6:ec:3b:21:f0:bd:7e:d5:f4:c4:a7:56:e9:73:13:47:7f:07:
         52:bc:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:05 2026 by rpki-client