Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
File:                     2y7CKma1skmGOV_u1_tbkOKMm-Q.mft (raw, json)
Hash identifier:          USrBEmZErJEVs5sVcX6mcdUXsLkCVyXDJI1jE5lEGlM=
Subject key identifier:   5B:FC:24:67:C1:AD:B1:75:C1:2B:53:7C:22:5D:5A:17:AE:C7:C6:30
Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
Certificate issuer:       /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Certificate serial:       019EBF5A5F88F3E09721B5BB61B8F90D8C60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
Manifest number:          0189
Signing time:             Sat 13 Jun 2026 05:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:31 +0000
Files and hashes:         1: 2y7CKma1skmGOV_u1_tbkOKMm-Q.crl (hash: XXt+Lnhvye4iQR/6orPDIgJzUygKP8oOvPKiG06KNhA=)
                          2: 5OcccwQslADzpJ8HL6Y7KqGcVVU.roa (hash: irYRIWXEtiw19tZuoevHJTgjYRjpfkAs2mq69Ns5wSo=)
                          3: 6RGkspdxkAWpYvFpm-8ta5s8IEs.asa (hash: SMkfixcVMM4K7Z6BHPlzlnNfBWBe+ZvLZ06HB1RuIn0=)
                          4: Wc5ljSD5VjkVZd4v1ISBd1k6dNQ.roa (hash: jyDuHZmz8mqWG2X7hHBWucB2QcY/4S07R3yhK3xzlzg=)
                          5: t-YR2UdrGJYsX4ZnfkqO15T5g9I.roa (hash: 21jzaahsgBvVI66l1ZAF+dhUPihnDJv9H/MfKJOkhNs=)
                          6: uOrZo6gF2WVlF4nc6xlIIShI6cM.roa (hash: 4dFwviDJ3qVWkRoE0eY86El9WripywfdZeQ8NNS5Yl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:5f:88:f3:e0:97:21:b5:bb:61:b8:f9:0d:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
        Validity
            Not Before: Jun 13 05:00:31 2026 GMT
            Not After : Jun 14 05:00:31 2026 GMT
        Subject: CN=5bfc2467c1adb175c12b537c225d5a17aec7c630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:a0:d4:f8:c4:86:72:4e:30:7e:20:9f:3f:
                    4e:b8:2c:6f:c0:03:08:25:ab:b7:66:e8:f3:20:3f:
                    b5:fa:43:21:df:19:90:fa:fb:8f:1d:71:fa:c3:68:
                    8d:24:60:84:8f:d2:d4:45:28:a2:16:58:26:df:7f:
                    42:b2:be:88:aa:03:5d:57:9d:e3:63:3d:a2:29:6d:
                    0b:cb:59:6d:03:7c:ee:17:81:b1:55:5d:47:78:93:
                    0a:b5:cd:04:0a:bc:52:e2:1f:0e:18:0c:af:6f:63:
                    7e:d9:fc:99:a4:33:35:f6:ae:14:c8:24:2b:48:fa:
                    ca:4e:38:94:9e:9f:76:f7:8a:05:e2:4a:13:ec:f8:
                    27:5a:d4:42:73:36:68:31:d8:07:68:3f:43:cc:a0:
                    d6:68:90:12:28:a8:b0:3a:f9:b3:f1:8a:d0:a3:5c:
                    46:49:c5:18:7c:d9:f8:1a:69:a2:ef:fa:79:0c:1a:
                    9a:66:ba:3a:d1:80:3c:3d:e3:91:12:a0:a3:6d:37:
                    1a:d1:b6:51:a1:8c:c0:28:fc:10:fd:05:54:d2:36:
                    1c:5f:1d:2d:a9:35:7f:2d:90:c7:98:6f:83:d5:5c:
                    a2:8e:1f:ee:f5:84:be:69:0f:b6:c9:a5:d8:cd:16:
                    4e:70:bc:db:93:a9:1a:75:b6:98:c1:58:01:d9:ed:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FC:24:67:C1:AD:B1:75:C1:2B:53:7C:22:5D:5A:17:AE:C7:C6:30
            X509v3 Authority Key Identifier:
                keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e2:35:d7:b7:67:92:95:2e:e9:d8:ae:bf:a8:4d:a4:f9:27:
         84:d2:40:66:44:a8:d8:f3:68:41:bf:ed:6a:40:ec:09:6e:d4:
         3a:43:8d:b6:6a:ac:bf:3f:af:1b:fe:50:78:e7:55:cd:5e:ea:
         0b:60:e1:c6:45:03:2f:8d:72:3c:f2:65:7e:da:b0:40:f4:62:
         b7:dd:92:bb:f8:58:86:bd:97:a5:93:b1:4d:a3:b4:c4:46:6b:
         d6:0e:b0:8a:dc:44:cd:3c:cc:70:01:69:55:86:93:ca:6f:5f:
         9b:08:28:a3:b0:d5:76:89:51:2a:54:4a:09:ec:9e:a4:68:2e:
         b5:83:45:b7:a6:6e:b3:71:b6:0e:30:ca:85:b1:1b:1f:4a:fe:
         1a:54:4d:1b:94:ef:83:13:fb:c5:af:4c:6b:24:2f:3d:0b:00:
         4c:e6:f3:49:d8:ee:53:9a:c2:0f:f1:d8:b1:63:29:80:5c:26:
         73:03:a0:09:f4:e5:4f:e2:fc:f7:a6:0c:71:fe:16:79:d0:4d:
         04:0f:e7:5c:c0:80:d3:b6:96:ef:06:fe:9f:e6:d8:e3:b5:9c:
         10:a9:a2:70:2c:90:31:e9:77:90:cb:d4:65:7d:60:58:e8:e2:
         dd:41:0c:4b:2d:51:ff:9d:6f:16:bc:84:f6:c2:a0:9a:35:32:
         23:46:4a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:37:00 2026 by rpki-client