Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File:                     2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier:          b47QG3YFtKqwLPL65Giwypgvp3ggWORdPKlSUj3+GX0=
Subject key identifier:   44:56:46:0D:47:F1:3D:D3:CB:7B:82:BC:1A:52:5E:0E:EC:6C:DE:F2
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer:       /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial:       019EBD6C32BE71BB2722625970647FD90142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number:          1960
Signing time:             Fri 12 Jun 2026 20:00:45 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:45 +0000
Manifest next update:     Sat 13 Jun 2026 20:00:45 +0000
Files and hashes:         1: 0LQRzIDRNUdWBd9Dydr2N_iC5jw.roa (hash: JhEvtgcGlQ0ucbJzBQZW4Y2YIF7BmFzYqZx6rOiR+Uc=)
                          2: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: NZMAZmHdBdwEk04XfUXSvM3JmHtgwmOpHkpF3PC25dE=)
                          3: 3wh0CT_8NfW3KeKbg66Zbntk-98.roa (hash: XNvg+YgzCvz98HEiUChpuE5wzEJ7vEAr5EwgyO9TGdU=)
                          4: 5XJ-DEXD7beUVnBEqtMJ7gNlRBw.roa (hash: aC0+p4R1V2InyynQLchWTNU+ke3PRpV6ML3PSthcq44=)
                          5: VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa (hash: Nbg44V0Y4hgBCfwuZPycL8mZRJRdH9RK2S/1UriBDlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:32:be:71:bb:27:22:62:59:70:64:7f:d9:01:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d894365b28a082834a751a97771b791124524dec
        Validity
            Not Before: Jun 12 20:00:45 2026 GMT
            Not After : Jun 13 20:00:45 2026 GMT
        Subject: CN=4456460d47f13dd3cb7b82bc1a525e0eec6cdef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:89:57:60:13:3c:6e:31:cd:ed:b6:d0:8e:
                    f8:51:4b:00:a1:b1:b9:ca:c8:e2:61:c8:45:70:87:
                    9f:2e:90:7e:d8:7b:4e:40:21:d6:36:22:42:45:a9:
                    bc:5e:e9:bd:28:e7:a6:b7:5c:1d:29:82:0a:73:dd:
                    a6:9c:c9:ec:f1:4a:8b:88:59:80:08:89:86:c0:81:
                    25:7b:1f:6e:4b:78:6e:36:97:0e:b2:3d:59:89:3a:
                    18:3b:c3:03:04:79:b9:dd:20:4e:fe:e9:90:6a:59:
                    81:c3:8e:c9:4c:85:e7:f4:ae:5b:9a:94:d7:bb:96:
                    2d:08:1e:b5:34:00:48:fd:f7:41:28:c6:ae:e9:23:
                    e6:2e:89:8c:ee:e1:da:de:14:9d:90:1f:6d:ff:1c:
                    61:43:e5:90:ce:7c:59:fe:19:01:9e:77:53:05:53:
                    36:7d:0d:c4:9c:79:20:e9:21:e6:c2:e3:8c:e9:56:
                    66:38:fa:5a:ed:da:61:08:1f:45:2e:43:5d:b3:90:
                    3c:75:0c:dc:24:69:82:c5:ae:cd:48:eb:da:5f:02:
                    22:80:c1:db:63:42:38:7d:60:4c:b4:07:61:14:b2:
                    82:68:3f:17:81:4b:72:a6:16:bc:b6:54:37:2a:c6:
                    8d:63:ec:c1:2a:8c:47:e2:6f:46:fe:a0:c4:cd:62:
                    f7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:56:46:0D:47:F1:3D:D3:CB:7B:82:BC:1A:52:5E:0E:EC:6C:DE:F2
            X509v3 Authority Key Identifier:
                keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:04:63:59:cd:77:9f:00:f7:49:3c:2b:12:6b:09:9c:00:73:
         d9:8f:9b:a8:d2:22:91:c4:f6:de:ff:e9:b2:5b:50:e1:03:59:
         1e:1f:cc:77:cd:af:2d:4b:45:70:8a:d4:06:a6:bc:49:e4:c5:
         35:32:89:4b:84:5c:59:17:ec:0a:22:2d:cf:06:70:30:6b:31:
         b6:12:03:5c:ca:ee:b9:20:0c:c5:bd:e5:59:0b:0a:f8:77:53:
         f0:86:b2:bf:80:22:08:91:97:5d:9a:7d:71:2e:4a:bc:a7:df:
         7c:a2:33:a6:7a:08:36:77:f5:57:84:47:92:69:9d:be:25:da:
         52:0d:82:09:4a:28:dd:9d:3a:3a:9a:55:6f:51:1c:86:74:e8:
         7b:ed:24:99:64:71:a0:ce:50:95:7b:8b:07:13:6e:25:d9:65:
         df:65:d9:26:48:49:37:cc:0a:69:e9:4b:3d:89:b6:b8:40:17:
         cd:9d:63:14:ef:f3:46:e0:24:f4:64:5d:b2:44:27:c2:8e:8f:
         12:e8:95:49:57:e1:90:58:39:89:75:04:f5:59:f9:1d:8b:4b:
         7e:38:a2:42:8d:1d:be:c5:dd:2e:79:49:d7:82:f1:10:0f:31:
         37:f0:4c:d1:81:35:ed:ff:fe:5e:c9:e9:f3:f9:65:1f:b2:c1:
         98:82:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:04 2026 by rpki-client