Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
File:                     2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json)
Hash identifier:          6RP0yA+amOZAgz+CXEPw/5rkCfFimvzWlgx9DmLQ5SI=
Subject key identifier:   B3:EE:C9:6D:17:7B:1F:A9:3D:8C:FD:C9:2A:CC:0C:3E:B2:F3:F8:C7
Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF
Certificate issuer:       /CN=d82b2846f093bc9416041be68a2c783161eb04df
Certificate serial:       019EBF5B29A3E4C37E1DD63AC5536719CCDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
Manifest number:          0B02
Signing time:             Sat 13 Jun 2026 05:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:23 +0000
Files and hashes:         1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: fRnIDnfMei+ahxe8Yn5IEIqVLE5Bug1lXAT/FUS4mCY=)
                          2: xvjr_8JqIZkbED7GUsRWo_s5EPY.roa (hash: FiH4mjXZzCr8o0pEvyEmejvpAQkDbsQib4uDB3k7p1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:29:a3:e4:c3:7e:1d:d6:3a:c5:53:67:19:cc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df
        Validity
            Not Before: Jun 13 05:01:23 2026 GMT
            Not After : Jun 14 05:01:23 2026 GMT
        Subject: CN=b3eec96d177b1fa93d8cfdc92acc0c3eb2f3f8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:ca:00:09:e6:73:5c:77:ae:75:93:de:64:
                    a3:9a:21:76:51:aa:ef:1d:47:e7:ef:1f:86:f5:fe:
                    80:ac:09:45:d7:48:cb:ff:37:c9:0d:f6:f4:e5:6d:
                    16:20:08:d1:ac:11:75:8c:9c:01:c7:48:70:b6:7c:
                    1c:4e:64:0c:8a:61:d7:53:92:6b:78:c2:56:9d:6f:
                    95:26:85:c8:8c:90:f7:87:c0:67:e2:41:6f:73:00:
                    53:b1:e5:5d:b7:9a:42:15:a5:d0:b8:97:a5:5d:ed:
                    da:9f:27:02:f0:10:4b:05:8a:12:b4:b1:cf:5d:57:
                    42:9d:7d:b5:4e:91:e3:42:a8:1e:75:ff:94:61:87:
                    6e:18:39:d7:f2:b0:32:75:d0:81:c9:bd:6c:93:dd:
                    98:25:a9:f4:65:58:b3:88:91:75:8d:2d:10:c5:79:
                    14:17:77:b7:cd:ea:09:20:d3:23:ff:da:08:06:13:
                    9a:bd:e4:d5:48:f3:61:1f:36:68:0f:75:fe:78:56:
                    84:b3:f3:87:ce:49:30:96:ce:f7:a1:2c:10:00:d0:
                    7f:ee:87:ed:7e:a7:a8:d4:e0:51:41:09:43:ae:07:
                    b1:57:89:81:93:eb:c3:0b:3f:3c:70:66:79:e0:7c:
                    fb:19:6d:16:29:d0:51:cf:88:df:a7:c8:9e:95:66:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EE:C9:6D:17:7B:1F:A9:3D:8C:FD:C9:2A:CC:0C:3E:B2:F3:F8:C7
            X509v3 Authority Key Identifier:
                keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8d:74:c2:92:3a:14:f2:1d:7e:4d:b4:2d:72:f7:2f:6b:74:
         46:4d:87:e2:9e:03:4b:bf:24:2a:cd:9b:23:fd:58:fa:3d:21:
         85:f1:73:97:99:13:34:61:1b:9c:b0:0d:66:f8:89:b9:ae:b5:
         13:c5:22:63:85:9c:c5:7e:9f:9d:4b:88:24:58:ad:4c:1e:61:
         77:bd:46:91:0f:cd:5a:54:73:89:4c:b5:58:14:20:63:13:5a:
         48:bd:31:d3:fb:90:45:fc:96:b0:22:18:c5:df:98:c1:76:69:
         e6:ea:ba:6d:00:ef:e0:c2:e1:83:86:55:f4:9b:bf:72:83:bf:
         8f:d4:5b:db:80:c2:ee:43:71:f3:63:10:c7:23:5a:a3:58:37:
         c7:0e:f0:29:7d:d3:fc:3c:98:c1:da:e6:53:b3:bf:bf:84:22:
         ae:a9:d3:55:f2:c3:b1:5e:1e:36:92:e8:a7:70:0e:a0:50:42:
         57:5d:da:0e:a6:ad:53:74:31:b7:58:43:a2:3f:78:b5:bd:38:
         d3:df:71:4e:ec:41:d6:d3:cf:53:00:90:cd:be:3f:60:26:60:
         6d:1b:bb:43:92:89:8c:b4:b5:3d:91:3d:93:3c:fa:df:ec:d8:
         b7:9a:7f:0b:67:84:14:19:0c:b5:c1:6d:97:e2:d2:7a:47:c8:
         71:6a:2f:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wymj5MN+HdY6xVNnGczcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmIyODQ2ZjA5M2JjOTQxNjA0MWJlNjhhMmM3ODMxNjFl
YjA0ZGYwHhcNMjYwNjEzMDUwMTIzWhcNMjYwNjE0MDUwMTIzWjAzMTEwLwYDVQQD
EyhiM2VlYzk2ZDE3N2IxZmE5M2Q4Y2ZkYzkyYWNjMGMzZWIyZjNmOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBLKAAnmc1x3rnWT3mSjmiF2Uarv
HUfn7x+G9f6ArAlF10jL/zfJDfb05W0WIAjRrBF1jJwBx0hwtnwcTmQMimHXU5Jr
eMJWnW+VJoXIjJD3h8Bn4kFvcwBTseVdt5pCFaXQuJelXe3anycC8BBLBYoStLHP
XVdCnX21TpHjQqgedf+UYYduGDnX8rAyddCByb1sk92YJan0ZViziJF1jS0QxXkU
F3e3zeoJINMj/9oIBhOaveTVSPNhHzZoD3X+eFaEs/OHzkkwls73oSwQANB/7oft
fqeo1OBRQQlDrgexV4mBk+vDCz88cGZ54Hz7GW0WKdBRz4jfp8ielWauVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPuyW0Xex+pPYz9ySrMDD6y8/jHMB8GA1UdIwQY
MBaAFNgrKEbwk7yUFgQb5ooseDFh6wTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgt
NTQ3M2VlMWRhYTliLzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgtNTQ3M2VlMWRhYTli
LzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJo10wpI6
FPIdfk20LXL3L2t0Rk2H4p4DS78kKs2bI/1Y+j0hhfFzl5kTNGEbnLANZviJua61
E8UiY4WcxX6fnUuIJFitTB5hd71GkQ/NWlRziUy1WBQgYxNaSL0x0/uQRfyWsCIY
xd+YwXZp5uq6bQDv4MLhg4ZV9Ju/coO/j9Rb24DC7kNx82MQxyNao1g3xw7wKX3T
/DyYwdrmU7O/v4QirqnTVfLDsV4eNpLop3AOoFBCV13aDqatU3Qxt1hDoj94tb04
099xTuxB1tPPUwCQzb4/YCZgbRu7Q5KJjLS1PZE9kzz63+zYt5p/C2eEFBkMtcFt
l+LSekfIcWovSA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:40 2026 by rpki-client