Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File:                     2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier:          JmVr67bSJrM79j0HFHbBrv5xaBCo8n7Ic7gQHNObnqA=
Subject key identifier:   7A:4F:82:CB:85:32:CA:EA:6B:09:12:44:01:6D:EA:90:6C:0D:7D:CD
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer:       /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial:       019EBF91C688BD676A024A0E3DD54FEFCDA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number:          196B
Signing time:             Sat 13 Jun 2026 06:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 06:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 06:01:02 +0000
Files and hashes:         1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
                          2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: GjdAYqyEjE6yvmaBuos78AscnfziQoPtkq/f3HEzSTQ=)
                          3: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
                          4: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
                          5: N3iKduG1KyGp7acBh2WOJ0MD0zU.roa (hash: jQXzbIYq6Zxo8qPqawC1/jXuZoeWXKzx3rtmVr5KlSs=)
                          6: ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa (hash: wqIirvJk9KhRbYG9hrmkySthdI26YxcHRINCM7935BQ=)
                          7: dh_dM1Q__KObsaKsgasBYaz1gyo.roa (hash: GY7xesyfU+gqGkJYAJ4MHZlVcXESZ6jYpENdGF3wOCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:c6:88:bd:67:6a:02:4a:0e:3d:d5:4f:ef:cd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
        Validity
            Not Before: Jun 13 06:01:02 2026 GMT
            Not After : Jun 14 06:01:02 2026 GMT
        Subject: CN=7a4f82cb8532caea6b091244016dea906c0d7dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:67:36:2c:7e:63:be:2f:14:83:25:3f:7a:8f:
                    74:a6:83:43:e2:02:6e:de:b3:32:bd:4a:b9:d7:31:
                    13:f4:59:3f:d0:29:38:29:a7:86:39:c9:e9:d3:84:
                    59:83:55:7f:eb:8a:be:1a:ba:11:54:4e:58:55:a7:
                    f8:33:7d:54:43:4d:f7:dd:4f:d0:1b:13:d4:a4:3a:
                    b4:3a:36:de:60:5e:27:24:6f:a1:bd:a3:92:be:24:
                    50:56:c2:38:f0:e7:98:47:a8:06:06:e3:52:26:7e:
                    a8:79:a4:0b:15:89:fb:fd:5f:26:be:e5:bb:05:cf:
                    7e:16:99:62:13:09:6a:57:d2:2b:98:11:ce:3c:b6:
                    18:dc:1b:3d:05:f5:97:6a:8e:15:2e:68:ea:8f:95:
                    da:68:ac:92:69:dd:67:58:3c:13:2c:08:0d:59:9f:
                    62:16:91:21:76:e5:cb:2c:f5:3d:72:30:2d:83:a9:
                    4d:28:53:0e:f2:07:aa:02:41:dc:1d:d3:a7:b0:3b:
                    e0:7e:7d:37:f8:fc:f1:8c:c9:f3:fa:2b:3e:e7:b3:
                    ea:ef:f7:d3:65:13:bd:5b:0e:9c:42:75:43:54:1a:
                    d9:ec:6d:00:d2:b1:b4:55:7c:e3:36:d5:1e:b4:ae:
                    c2:ad:43:cd:1f:cf:84:d3:7d:fe:56:c6:bb:d7:8f:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4F:82:CB:85:32:CA:EA:6B:09:12:44:01:6D:EA:90:6C:0D:7D:CD
            X509v3 Authority Key Identifier:
                keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:ee:53:fb:e5:42:a9:d4:77:c1:5e:af:fd:11:31:f1:91:d6:
         d7:ef:62:96:06:3d:8f:8e:27:93:ea:49:a0:39:c9:0d:56:9d:
         24:94:c5:d4:06:93:a5:58:f3:f8:5c:84:38:80:a6:b9:04:bf:
         e5:19:c7:4c:16:d9:57:5e:15:df:a7:a5:e8:bd:eb:55:34:9a:
         61:22:23:fb:cf:92:0b:03:83:4a:5a:67:ec:f3:3e:32:14:88:
         af:7a:83:92:cf:01:03:d3:ca:de:7c:af:2f:59:c5:5b:df:58:
         e8:70:91:51:2b:da:5c:4e:f8:44:ac:cc:64:01:9d:1d:3f:e2:
         40:2c:22:3c:29:fe:3e:da:ee:31:02:e0:65:a3:fc:e2:5d:42:
         84:c0:45:a0:18:f5:25:0c:30:d1:24:16:c7:45:4a:26:89:89:
         58:cb:d1:41:46:a2:73:fe:01:67:4f:9d:e7:e2:e8:e8:1d:92:
         82:bd:13:39:50:da:ce:58:f2:41:60:c2:65:70:83:73:4d:37:
         37:89:6c:2c:81:f3:38:b7:44:2f:5d:4c:92:63:45:a7:67:ec:
         53:1d:f5:f2:88:9f:2e:d0:24:f1:a9:e6:61:98:91:c1:fe:e2:
         ba:0a:68:67:0f:67:20:93:dc:91:c0:9b:27:fd:4b:e1:f9:07:
         6c:a5:5b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:39 2026 by rpki-client