Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File:                     2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier:          2vWpd3FuPh7fpS/iUeIOCVRfWUUBzPa1mbCqBzm6eAs=
Subject key identifier:   FC:F7:55:1B:44:25:CF:E2:AF:AB:6D:C3:23:50:4A:68:5A:74:21:DE
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer:       /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial:       019EC2C907FDF0D87A38FEE48E4D2ED5E8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number:          0D25
Signing time:             Sat 13 Jun 2026 21:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:14 +0000
Files and hashes:         1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: IdPPaaZsxtCfw7RDUPaR6kxJaAxBIsofGzTdH/od5HA=)
                          2: gLKO-UIGW_gCxR-OI2PZJ-xRRpI.roa (hash: KIwOCLOD8KTk0yxpwdVbtYEy7fLmawzgHCD120WM+0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:07:fd:f0:d8:7a:38:fe:e4:8e:4d:2e:d5:e8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
        Validity
            Not Before: Jun 13 21:00:14 2026 GMT
            Not After : Jun 14 21:00:14 2026 GMT
        Subject: CN=fcf7551b4425cfe2afab6dc323504a685a7421de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:4b:5a:f6:3f:08:ca:08:05:fd:ed:45:8c:
                    d7:ea:96:c6:97:b1:52:9b:97:27:ee:18:cc:b0:5a:
                    14:fa:96:99:a5:f9:8a:9b:75:9b:25:f1:11:a7:88:
                    f7:1c:02:45:b7:65:1b:62:a9:8b:cb:09:09:64:87:
                    a6:d1:89:57:77:2d:00:ab:d8:32:96:9e:e1:72:7f:
                    4c:a3:2b:79:fa:33:02:fb:7c:d7:cd:68:43:7a:f9:
                    a2:a2:39:e1:e1:fa:f6:b7:54:55:2f:00:77:a9:2a:
                    18:f2:fb:6c:0e:4a:d0:89:3b:63:ed:c1:65:7d:23:
                    3e:28:6f:fa:08:1a:f1:0f:74:51:5b:14:e7:68:74:
                    06:fd:98:dd:53:c3:00:09:be:3e:28:ab:67:49:21:
                    ce:bd:d5:0e:ec:11:7e:3c:36:24:94:e0:a6:4e:91:
                    42:3f:c9:ce:0c:98:fa:21:03:17:1e:d7:b2:c7:21:
                    69:65:e9:89:79:a0:dc:e3:0c:30:50:d2:4e:b3:f0:
                    10:2f:fe:72:eb:fe:fe:fe:81:5a:58:37:15:d0:b1:
                    f6:ea:ec:32:5a:0a:9c:4a:a9:97:38:43:38:fe:b9:
                    c9:16:1b:25:a5:38:6d:c6:d2:c8:3b:cd:86:77:8c:
                    6e:76:d3:71:fb:14:f7:fc:4e:3b:5b:75:2c:0a:0e:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:55:1B:44:25:CF:E2:AF:AB:6D:C3:23:50:4A:68:5A:74:21:DE
            X509v3 Authority Key Identifier:
                keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e5:4c:1f:cb:7c:a0:59:77:89:4f:58:2a:06:d4:db:43:76:
         e6:27:e4:94:0d:7d:c7:c7:f2:ef:46:a9:3b:44:a7:29:5c:91:
         d3:0d:9b:f1:3a:f6:d3:d3:1f:a5:3a:be:ed:5f:4a:c5:1a:97:
         5c:96:07:02:21:87:c7:b0:8b:d8:ee:19:f0:15:55:97:16:03:
         f7:a9:69:b5:ca:fc:47:4f:67:42:f8:4d:b7:8a:a8:e9:4e:f2:
         de:01:36:40:e7:13:58:67:c4:49:18:da:d7:f4:25:4e:94:6e:
         73:ea:73:53:9a:33:31:2f:fa:49:7b:98:f8:d1:a3:9e:96:15:
         f0:f4:9b:8c:bc:cb:a9:e1:8a:c7:e5:57:28:5b:73:f5:fb:bf:
         0c:5a:e9:12:75:e0:83:22:11:c8:34:e0:6c:1c:98:db:9d:06:
         0d:e5:26:2f:8f:91:3d:fa:09:5b:2e:f3:ac:3c:b0:b8:e5:f8:
         e9:ff:21:56:99:96:f1:f7:63:02:83:9d:c5:e6:47:15:6e:0d:
         b4:25:d2:96:44:6d:b3:ad:b8:a1:ee:da:ca:99:e7:cf:70:6b:
         33:fa:c9:3c:9c:66:d3:d1:e6:f7:12:59:a7:e7:6f:ab:e8:54:
         9a:2c:63:70:4e:f6:fa:94:11:51:ec:15:91:d9:7f:49:bc:79:
         b2:e1:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:10:37 2026 by rpki-client