Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File:                     2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier:          h3E4vvUEK2GVjdl29BxXc43R44FMu9dhSMlhru4p0qs=
Subject key identifier:   63:5E:10:89:D5:24:E6:9E:94:49:F0:E8:1C:38:EC:3B:47:44:9D:82
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer:       /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial:       019EC111ADCFAF1ECAD9D3FAC54227580321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number:          10A1
Signing time:             Sat 13 Jun 2026 13:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:21 +0000
Files and hashes:         1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: 7d6kCj6BTdvMhoPuATecp0kY+tUaxmSqybeY/HFwVsI=)
                          2: Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa (hash: zEpFycfVYnZq5Lv9INkh/ljd5iU1KyImwbjPqDc/m94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:ad:cf:af:1e:ca:d9:d3:fa:c5:42:27:58:03:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
        Validity
            Not Before: Jun 13 13:00:21 2026 GMT
            Not After : Jun 14 13:00:21 2026 GMT
        Subject: CN=635e1089d524e69e9449f0e81c38ec3b47449d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:41:f1:a1:04:ab:53:b9:5f:3c:2e:34:80:46:
                    df:8f:89:9e:fd:fc:fb:86:88:5e:5b:1f:f7:1e:67:
                    ba:0f:0f:f9:3e:a8:ed:e3:e5:33:97:c8:ce:48:93:
                    75:ee:2c:58:62:5d:41:1d:bb:28:ca:e8:0e:37:d6:
                    2c:99:bf:32:6a:12:52:3b:64:6d:11:69:b0:f0:60:
                    10:cb:be:f9:7f:7d:64:fc:42:9a:83:34:77:cf:93:
                    7e:fb:a6:cf:7b:15:6e:36:26:5c:79:41:f2:af:97:
                    ae:1d:ea:91:d9:a1:a0:1e:43:ff:59:7b:3d:4c:71:
                    c0:7c:11:a2:04:b6:ee:d2:2c:8f:a3:4a:6f:f8:20:
                    4d:74:2f:b5:bb:d6:32:2b:64:aa:53:fc:e1:f2:03:
                    9a:be:de:02:26:b7:9b:a3:e2:aa:2b:83:f7:1a:0f:
                    11:ab:be:78:10:ad:86:91:5c:13:70:89:a3:5d:0c:
                    a5:91:b5:41:c7:a4:fc:f0:af:68:6e:e7:1d:42:de:
                    56:98:72:a3:ef:f6:90:1f:c0:9d:08:8b:41:13:17:
                    b5:a4:b9:62:eb:2e:d1:37:69:92:b5:6f:f8:5c:7d:
                    56:a7:58:cb:39:8b:e9:f1:4d:fd:3b:7c:08:1d:dd:
                    10:fc:59:ce:22:05:57:8f:71:c8:e0:56:db:b1:19:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5E:10:89:D5:24:E6:9E:94:49:F0:E8:1C:38:EC:3B:47:44:9D:82
            X509v3 Authority Key Identifier:
                keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5c:b7:30:04:06:5a:a1:12:05:be:b1:e1:00:ed:38:57:97:
         93:9f:52:3e:47:96:ed:50:6e:3d:6e:78:76:ab:33:12:ec:44:
         36:15:98:2a:25:44:1f:30:42:f3:69:d2:df:b8:4e:a8:9f:8b:
         b4:0c:9c:50:36:44:ec:9a:78:3d:e8:50:3e:27:01:b5:6a:c2:
         8b:a7:ab:24:a8:ee:64:c3:b6:42:44:e2:41:60:22:53:03:38:
         1b:36:84:bc:bf:6e:66:b4:a0:e2:38:81:6a:81:5a:a5:6e:a3:
         f3:fa:cd:e2:8a:d7:18:43:7c:78:a1:4f:54:bd:f0:7b:ea:2b:
         14:20:22:b1:00:79:0e:3a:e6:b4:73:72:bc:cf:4d:ee:c2:4b:
         11:f4:1c:91:3c:a2:80:c1:30:94:2d:16:e9:5a:1f:8c:a8:0f:
         c5:28:ea:6e:c4:3c:2b:90:94:9a:b3:f5:0d:af:23:49:19:b5:
         1f:09:93:43:8f:f3:47:d7:64:b4:56:8d:b9:11:f1:9a:0f:37:
         1e:24:03:84:8e:b0:83:07:1c:bd:c6:85:41:a1:24:83:1e:6e:
         42:77:fc:f0:aa:ce:c3:00:df:83:2a:3c:97:47:57:a7:69:39:
         59:50:ff:dd:c2:3a:74:1f:4d:71:e1:64:cf:f4:0b:f5:20:6d:
         c5:31:af:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEa3Prx7K2dP6xUInWAMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWM3OTYyNDMzYzJmZTBiZjYyYjhjMzg4MzkyOTk1Zjk0
MmIxNGMwHhcNMjYwNjEzMTMwMDIxWhcNMjYwNjE0MTMwMDIxWjAzMTEwLwYDVQQD
Eyg2MzVlMTA4OWQ1MjRlNjllOTQ0OWYwZTgxYzM4ZWMzYjQ3NDQ5ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80HxoQSrU7lfPC40gEbfj4me/fz7
hoheWx/3Hme6Dw/5Pqjt4+Uzl8jOSJN17ixYYl1BHbsoyugON9Ysmb8yahJSO2Rt
EWmw8GAQy775f31k/EKagzR3z5N++6bPexVuNiZceUHyr5euHeqR2aGgHkP/WXs9
THHAfBGiBLbu0iyPo0pv+CBNdC+1u9YyK2SqU/zh8gOavt4CJrebo+KqK4P3Gg8R
q754EK2GkVwTcImjXQylkbVBx6T88K9obucdQt5WmHKj7/aQH8CdCItBExe1pLli
6y7RN2mStW/4XH1Wp1jLOYvp8U39O3wIHd0Q/FnOIgVXj3HI4FbbsRlCDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNeEInVJOaelEnw6Bw47DtHRJ2CMB8GA1UdIwQY
MBaAFNgceWJDPC/gv2K4w4g5KZX5QrFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2Et
M2QzNDRjOWMyNmI2LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2EtM2QzNDRjOWMyNmI2
LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1y3MAQG
WqESBb6x4QDtOFeXk59SPkeW7VBuPW54dqszEuxENhWYKiVEHzBC82nS37hOqJ+L
tAycUDZE7Jp4PehQPicBtWrCi6erJKjuZMO2QkTiQWAiUwM4GzaEvL9uZrSg4jiB
aoFapW6j8/rN4orXGEN8eKFPVL3we+orFCAisQB5DjrmtHNyvM9N7sJLEfQckTyi
gMEwlC0W6VofjKgPxSjqbsQ8K5CUmrP1Da8jSRm1HwmTQ4/zR9dktFaNuRHxmg83
HiQDhI6wgwccvcaFQaEkgx5uQnf88KrOwwDfgyo8l0dXp2k5WVD/3cI6dB9NceFk
z/QL9SBtxTGvBA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:43 2026 by rpki-client