Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
File:                     P2TX2Py26n88U-wAJA2Owcl3Zqc.mft (raw, json)
Hash identifier:          vVCXnPQJjBWFAMosQu5SMfTCRXeZwlBdP634++FFyiE=
Subject key identifier:   27:C1:98:90:C6:F4:5C:5A:7A:5F:5A:E4:6A:E5:9F:4D:58:FE:0B:24
Authority key identifier: 3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7
Certificate issuer:       /CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
Certificate serial:       019EBEB5F1B83A445E4CC934266886FB7519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
Manifest number:          0121
Signing time:             Sat 13 Jun 2026 02:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:55 +0000
Files and hashes:         1: P2TX2Py26n88U-wAJA2Owcl3Zqc.crl (hash: YG12IDbsdxAqisZu/IqJDYjVXqOVTApqxCZM+cVNp2s=)
                          2: sSJSF0Ef5iNGBXgop50-6zZdD2k.asa (hash: 2H0jdgMOud4+cQqq8gHUDsGfxxUMnvX/NXbs1EyPhbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:f1:b8:3a:44:5e:4c:c9:34:26:68:86:fb:75:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
        Validity
            Not Before: Jun 13 02:00:55 2026 GMT
            Not After : Jun 14 02:00:55 2026 GMT
        Subject: CN=27c19890c6f45c5a7a5f5ae46ae59f4d58fe0b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:13:ae:97:25:83:28:4d:ed:e2:be:61:0c:
                    b3:bb:06:d8:dd:24:5b:9a:c2:2d:3a:1a:a6:a8:fc:
                    f7:bd:35:80:8c:47:10:00:49:cd:63:4a:45:7d:b4:
                    2a:68:66:46:31:76:ab:c3:70:9b:a4:42:7a:fc:e5:
                    63:fb:59:be:35:46:0d:a7:17:86:93:7f:ec:f2:47:
                    91:ab:86:0a:16:76:4d:37:f1:69:fb:52:a0:db:46:
                    ba:15:14:49:db:01:0f:85:75:90:01:2e:ea:22:72:
                    e1:fb:b3:d9:ef:68:79:ea:82:4c:8d:d4:f3:5c:67:
                    64:28:be:44:e5:14:6c:f1:08:66:20:1c:a0:e6:cc:
                    ef:2d:4c:2e:a6:c9:3d:ee:ca:93:56:43:4a:ae:00:
                    dc:9a:40:3c:d2:b4:e0:29:00:7d:58:ae:8d:b3:89:
                    39:ca:22:bf:61:32:7c:00:e3:37:ac:6d:74:0d:9c:
                    44:86:74:8c:3c:d7:33:26:7e:41:36:3d:2d:45:5e:
                    46:09:ab:a4:2f:65:cc:14:05:d2:1b:e5:cf:30:20:
                    7b:b6:0f:1f:f1:dd:04:34:1f:88:04:de:a3:6d:02:
                    88:ab:8a:95:98:4c:85:56:59:c4:22:3a:b4:8d:ba:
                    0f:91:58:57:a1:62:44:f0:bc:03:10:d3:f3:78:44:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C1:98:90:C6:F4:5C:5A:7A:5F:5A:E4:6A:E5:9F:4D:58:FE:0B:24
            X509v3 Authority Key Identifier:
                keyid:3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:89:42:ff:ea:c5:3c:cd:47:03:3a:df:9b:52:45:f1:34:bd:
         a6:dd:88:23:ca:5c:b4:48:8a:c3:89:85:f5:36:55:6f:63:82:
         e3:a0:c6:8b:02:f5:9b:68:d0:ed:d3:68:35:54:76:34:02:9a:
         fd:c2:da:4c:da:d7:75:49:4a:f7:e7:73:4a:66:56:ba:12:dd:
         38:52:0e:dc:eb:a0:6b:16:fd:2e:1a:81:e1:1c:e5:e5:f0:60:
         75:a7:8e:4e:cd:9b:25:41:13:a3:65:4e:99:88:f5:e6:b3:a8:
         ba:47:bc:2c:d3:43:92:fa:87:2f:1b:2b:b6:35:3d:15:53:ff:
         70:d6:ae:cb:86:53:ac:1f:83:3a:d1:0c:5f:ab:43:b5:ce:ba:
         67:75:e6:15:ae:12:8d:dd:f1:b5:ba:32:f1:85:b3:50:dd:bc:
         f6:76:ba:0f:bf:d9:a0:d6:b7:72:7c:a0:2d:a5:d2:6d:e5:81:
         02:39:ea:0a:7f:c8:2d:24:a5:2c:ce:34:ab:00:42:ff:20:44:
         7a:b2:20:61:b8:9b:88:dd:7b:b7:14:6a:88:7c:bf:d4:5d:cc:
         b8:92:43:3d:3c:69:38:0c:37:45:36:b4:3e:4f:2d:0a:e0:d8:
         21:9e:0b:57:b1:6d:e6:fc:cd:fc:21:ba:8a:f6:f7:6e:4f:c2:
         2e:af:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:34 2026 by rpki-client