Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File:                     2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier:          LTAm4KhGVrhzQcldp9Ky0rkCtV74Iu32WWJu0FSjadQ=
Subject key identifier:   EB:3E:99:96:18:1B:33:A1:68:5F:9B:4B:A4:A2:28:5B:FE:A6:B0:AB
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer:       /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial:       019EC17F80793167BB77032A5016BD9BC600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number:          13D1
Signing time:             Sat 13 Jun 2026 15:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:19 +0000
Files and hashes:         1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: 31O3jJdWfTnhHIGluJGBE3bpXJTUhYtdW7WRQAs+4LI=)
                          2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:80:79:31:67:bb:77:03:2a:50:16:bd:9b:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
        Validity
            Not Before: Jun 13 15:00:19 2026 GMT
            Not After : Jun 14 15:00:19 2026 GMT
        Subject: CN=eb3e9996181b33a1685f9b4ba4a2285bfea6b0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:ed:4b:35:6c:10:58:c8:1d:25:15:a3:17:
                    8e:6a:0b:b6:85:6d:ea:e2:d4:e1:0a:fc:65:67:9c:
                    9c:9c:2d:f0:98:20:c1:fd:16:94:b3:4a:cd:71:8e:
                    24:a8:60:ed:7b:44:04:41:f6:7d:47:7f:59:57:e1:
                    40:d5:72:75:fa:f4:cf:8f:aa:5a:3a:63:6c:d5:85:
                    68:89:87:f4:8e:4a:f8:85:1b:e0:c1:79:17:0c:70:
                    8c:41:74:da:4f:fb:00:ed:40:62:c5:0d:cf:e7:5e:
                    c3:a8:7e:65:77:3d:68:77:43:8b:cd:e8:7d:97:5b:
                    1f:f0:4c:2d:74:b2:40:1c:c2:df:59:fd:68:fc:ae:
                    d8:9b:3d:ea:64:49:ff:47:aa:0d:d9:68:7d:2f:9a:
                    7a:95:7e:57:a3:1e:a0:c6:a7:58:36:f5:8c:ac:fa:
                    fa:41:bb:79:71:cb:c5:c5:e0:36:e7:06:02:7d:5d:
                    a0:2a:bf:ff:33:b2:80:95:0b:83:59:79:17:54:c5:
                    2d:44:f6:c6:15:61:72:3b:33:d5:f2:bc:86:bc:f3:
                    57:93:c1:90:fc:90:f2:4b:6f:c2:2e:37:e7:dd:ea:
                    7a:0d:0b:0a:fe:85:08:ed:2a:e7:c7:cd:3b:15:4f:
                    95:d6:08:36:61:42:92:01:20:d5:3a:5d:84:6b:ab:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3E:99:96:18:1B:33:A1:68:5F:9B:4B:A4:A2:28:5B:FE:A6:B0:AB
            X509v3 Authority Key Identifier:
                keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:21:f9:3b:48:0d:d4:d4:73:f2:2c:7b:44:fd:4f:30:eb:5c:
         ff:59:80:5a:bb:1b:91:f0:60:84:93:e0:ce:ff:79:a1:b5:c9:
         00:bb:47:72:2e:bc:bb:30:76:e4:ed:5f:fb:1c:95:aa:13:17:
         0a:42:b2:8c:2d:fc:b4:c2:a0:fe:dd:ae:5b:34:3d:20:4c:f2:
         14:0e:a5:60:04:f7:38:52:16:99:05:2c:35:b1:56:60:d2:2e:
         c5:e5:9a:b9:2e:11:78:60:70:c4:77:82:4e:34:0e:40:82:b5:
         6c:ba:cc:6b:be:e2:a7:1e:49:ad:9e:2f:c3:a5:92:c9:e0:0c:
         99:c2:f7:13:65:b3:51:ea:61:6f:31:3c:89:d9:5b:32:78:52:
         2e:58:f1:cc:3e:7a:79:ad:eb:93:ec:ad:1f:12:0b:6a:52:22:
         72:ad:4f:a9:32:33:8b:1b:42:2f:d9:3e:96:c4:97:4b:28:3d:
         24:a4:27:6b:ca:be:75:a4:fd:ec:09:9c:87:b5:16:ba:66:8a:
         d4:0c:76:22:bd:2d:96:7f:96:c9:bb:5b:c1:74:96:73:4c:b1:
         3b:07:b9:32:34:fa:92:56:ef:17:76:f9:f7:35:7c:bb:89:df:
         ed:94:44:58:e2:28:ad:24:6b:52:a0:a9:a0:fd:20:ae:cd:2e:
         b8:81:49:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:43:10 2026 by rpki-client