Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File:                     B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier:          WMhFh011UEuSSji3Fa3LD8Dfuxht4oeVOZBwHBx7TOE=
Subject key identifier:   2E:BC:0D:8F:FB:30:F4:50:3E:58:DB:75:38:54:AA:B0:6A:5F:1C:7A
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer:       /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial:       019FA975ABC010C9E2F064CE728992107C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number:          0B2E
Signing time:             Tue 28 Jul 2026 16:01:28 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:28 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:28 +0000
Files and hashes:         1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: vs6vSwfbQeKRT+PaDfpHFllDb5/3lhXlKU2oviZFQfw=)
                          2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:ab:c0:10:c9:e2:f0:64:ce:72:89:92:10:7c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
        Validity
            Not Before: Jul 28 16:01:28 2026 GMT
            Not After : Jul 29 16:01:28 2026 GMT
        Subject: CN=2ebc0d8ffb30f4503e58db753854aab06a5f1c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:3a:20:83:b8:71:34:87:ad:11:d5:20:93:
                    7c:40:0e:ee:08:b4:af:8d:08:b5:c8:07:a6:99:97:
                    8f:08:5e:cb:04:dc:40:f7:dd:66:0b:3f:a6:80:4b:
                    8f:2d:0f:85:69:0f:16:ef:d9:25:9b:09:98:76:9f:
                    2e:11:68:de:08:7d:6c:ce:4e:6a:9d:66:5a:d3:e6:
                    10:d2:a5:09:8d:21:7a:07:06:c5:84:c1:2a:13:39:
                    d4:62:42:13:df:b9:c6:84:a0:75:70:f5:ac:36:0d:
                    55:c7:b1:18:e6:41:cd:a3:4b:67:7f:26:95:fc:50:
                    82:0d:50:b3:2f:b5:5c:96:81:b1:7c:fc:2a:5a:06:
                    d3:39:b4:ef:51:10:2b:2c:d6:b9:23:8e:78:c9:47:
                    1a:f9:20:ea:82:2c:0c:7d:aa:99:e0:6d:66:39:05:
                    6b:e8:dd:94:b3:7b:be:19:26:e6:25:3c:e6:96:40:
                    d3:72:cb:1d:3a:b6:29:0d:39:fc:ab:8d:1b:05:0e:
                    ec:cb:55:7b:b1:54:26:50:18:68:dd:fb:cf:50:1b:
                    dc:c8:3e:e3:8c:85:49:3e:d9:de:35:3a:ef:ff:12:
                    6b:11:12:2b:b4:b2:c2:68:9e:f4:c2:5f:f7:5a:2e:
                    69:04:51:6d:f6:9e:08:47:dd:ad:ff:2c:72:44:39:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BC:0D:8F:FB:30:F4:50:3E:58:DB:75:38:54:AA:B0:6A:5F:1C:7A
            X509v3 Authority Key Identifier:
                keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9b:9d:f4:6e:59:bf:67:8e:1c:89:14:f1:88:43:60:25:74:
         7a:37:86:77:51:e9:a2:6b:b4:d6:dd:1f:6f:88:3c:0a:48:9b:
         34:94:1b:5f:ee:2e:0f:55:60:01:5c:e9:1a:88:0c:06:71:3c:
         48:9d:3c:54:77:2f:c6:b0:92:12:e8:5d:e8:cd:1f:5c:d2:8b:
         de:4e:89:e0:26:e2:46:42:17:db:79:21:2b:7e:6f:3d:4b:87:
         af:a5:a3:ab:40:4f:ce:5f:e3:28:d9:1c:99:0e:4a:fb:a6:f8:
         92:f4:95:18:da:2c:61:e0:1c:50:e2:93:82:85:81:95:97:7a:
         7f:84:44:3f:a5:27:25:d8:cb:46:04:21:fa:fb:6b:50:b9:a4:
         1a:06:cf:1b:d2:fe:f9:b7:59:b9:51:4d:50:cf:0e:e1:55:64:
         df:b7:11:5f:d0:f8:eb:e2:ae:51:46:97:b1:ab:41:bd:39:6c:
         8d:68:f7:2d:0e:52:6e:36:b0:2b:aa:fc:e2:ec:f2:2c:cc:0b:
         ca:fa:b6:c6:99:a1:b9:ee:c9:ce:27:79:13:1d:89:20:ad:2f:
         a9:af:7b:b9:d2:9d:41:a3:52:73:58:b5:ed:04:f7:2f:8f:17:
         9c:a5:38:67:3b:b2:da:03:b1:50:8a:27:99:c8:1e:fd:3e:63:
         b5:fc:29:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdavAEMni8GTOcomSEHwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl
NTc0NDUwHhcNMjYwNzI4MTYwMTI4WhcNMjYwNzI5MTYwMTI4WjAzMTEwLwYDVQQD
EygyZWJjMGQ4ZmZiMzBmNDUwM2U1OGRiNzUzODU0YWFiMDZhNWYxYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gk6IIO4cTSHrRHVIJN8QA7uCLSv
jQi1yAemmZePCF7LBNxA991mCz+mgEuPLQ+FaQ8W79klmwmYdp8uEWjeCH1szk5q
nWZa0+YQ0qUJjSF6BwbFhMEqEznUYkIT37nGhKB1cPWsNg1Vx7EY5kHNo0tnfyaV
/FCCDVCzL7VcloGxfPwqWgbTObTvURArLNa5I454yUca+SDqgiwMfaqZ4G1mOQVr
6N2Us3u+GSbmJTzmlkDTcssdOrYpDTn8q40bBQ7sy1V7sVQmUBho3fvPUBvcyD7j
jIVJPtneNTrv/xJrERIrtLLCaJ70wl/3Wi5pBFFt9p4IR92t/yxyRDlleQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC68DY/7MPRQPljbdThUqrBqXxx6MB8GA1UdIwQY
MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt
ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw
LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJud9G5Z
v2eOHIkU8YhDYCV0ejeGd1Hpomu01t0fb4g8CkibNJQbX+4uD1VgAVzpGogMBnE8
SJ08VHcvxrCSEuhd6M0fXNKL3k6J4CbiRkIX23khK35vPUuHr6Wjq0BPzl/jKNkc
mQ5K+6b4kvSVGNosYeAcUOKTgoWBlZd6f4REP6UnJdjLRgQh+vtrULmkGgbPG9L+
+bdZuVFNUM8O4VVk37cRX9D46+KuUUaXsatBvTlsjWj3LQ5SbjawK6r84uzyLMwL
yvq2xpmhue7Jzid5Ex2JIK0vqa97udKdQaNSc1i17QT3L48XnKU4Zzuy2gOxUIon
mcge/T5jtfwpnA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:29 2026 by rpki-client