Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File:                     2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier:          bI4xChqRx32jYiyLcT0PJSUKzPXQ+eMuEwLv9ISiOBU=
Subject key identifier:   27:25:D2:F4:03:3A:27:17:A7:37:34:B1:A0:13:78:18:08:27:E6:C5
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer:       /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial:       019EBF233F86DAA99D41BC2391FBC8C742AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 04:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:18 +0000
Files and hashes:         1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: 2wFulkxJkpEQl10vRW9yqwp0fAj8IrymHhDumeaZMA8=)
                          2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:3f:86:da:a9:9d:41:bc:23:91:fb:c8:c7:42:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
        Validity
            Not Before: Jun 13 04:00:18 2026 GMT
            Not After : Jun 14 04:00:18 2026 GMT
        Subject: CN=2725d2f4033a2717a73734b1a01378180827e6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:f8:69:50:84:36:b6:5c:e7:55:32:94:55:
                    fb:4a:30:0e:75:3f:90:2a:2b:8e:3b:09:3b:90:e2:
                    da:bd:9c:01:e3:87:8c:c6:a5:9a:29:55:c3:fd:29:
                    18:31:a4:76:88:58:3e:cb:5f:59:ab:34:5b:25:06:
                    03:9c:53:8e:bc:d8:a9:db:b8:2e:eb:61:f9:5a:70:
                    65:b7:00:3a:70:d4:b1:0e:82:ea:f3:59:e1:a4:09:
                    11:4c:49:95:d4:21:f2:fd:03:82:8e:b8:e0:33:6d:
                    2d:38:3d:d0:f5:b4:9e:3a:78:33:2e:01:c3:14:7d:
                    8a:2e:ec:86:82:48:50:5d:24:af:2b:a8:64:9f:7e:
                    fc:80:fc:c6:9b:9f:e7:2f:b7:62:85:d5:23:10:90:
                    ec:f5:11:b9:66:40:87:58:b2:cf:12:a8:c4:4e:dc:
                    d9:c0:94:77:79:f1:08:55:27:bd:0f:54:d3:49:63:
                    ee:ba:83:c0:60:b6:a1:8e:89:aa:4a:2e:39:18:7a:
                    fc:1a:f8:58:75:e1:57:0a:97:94:9d:58:50:34:94:
                    69:f0:d9:43:d9:a7:6a:fc:ff:b0:de:a7:75:9d:e8:
                    ab:c2:d7:56:c5:f4:93:32:23:64:e2:b5:6c:94:ac:
                    03:cf:41:be:93:e4:30:60:5f:0c:b2:52:f1:d0:f5:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:25:D2:F4:03:3A:27:17:A7:37:34:B1:A0:13:78:18:08:27:E6:C5
            X509v3 Authority Key Identifier:
                keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:50:cc:58:91:3d:55:be:d3:55:a5:a6:9b:c5:98:e3:d4:6f:
         a6:1d:ef:5d:fb:9f:58:6e:6d:ff:df:f9:b5:31:a7:f1:9c:a2:
         f0:a9:b5:1e:f6:1d:b4:6b:d1:d0:7c:f8:0a:4b:a3:74:dd:c5:
         37:a8:bb:d1:a4:d9:5f:2f:c0:d5:cd:05:2f:a5:80:9e:28:6f:
         10:6d:bc:46:48:8c:ed:6f:a4:e2:49:94:c5:05:2e:59:1e:36:
         fb:93:83:b4:43:ec:13:1b:c3:27:42:57:82:47:c8:a9:b3:0e:
         da:24:c4:1f:30:eb:92:eb:13:55:d5:e7:9c:f8:d4:5c:ee:0a:
         2b:b4:c2:20:c7:68:e0:92:7a:7a:2a:e1:63:72:fa:48:ec:b0:
         02:89:9f:72:db:49:a8:de:d9:17:9c:49:53:bc:3a:b6:c8:28:
         3f:65:02:22:e0:53:db:df:93:6e:12:71:ed:9d:44:11:81:bc:
         39:21:ee:f5:ee:80:f4:39:2e:f5:ac:16:40:ad:ff:a8:c9:23:
         9c:dc:c1:44:8c:99:77:8c:d7:f3:d8:04:50:74:12:4e:6d:a4:
         3e:9d:17:02:a5:a7:b9:a4:ee:79:b4:aa:b7:4f:90:29:96:93:
         77:af:da:13:b3:ca:69:fc:09:51:6c:dd:4f:29:97:e6:96:1a:
         ba:6c:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:16:51 2026 by rpki-client