Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File:                     2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier:          ZLUbFOL075twU360rttfpjoQ8yCj6L9D6qoE+CCc6WA=
Subject key identifier:   42:53:62:FE:F0:B6:AD:F5:32:6C:0A:F8:29:48:BC:DF:93:66:00:00
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer:       /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial:       019EBEB598DCA38DC767953758CD9971E3FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 02:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:32 +0000
Files and hashes:         1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: iN3QeXlF3+Cu0mLAJXMHAZ1ZcCjVDkjTopcnNc5vwIU=)
                          2: uxKv6641R5iqpQTk8Wx5aU2aw_o.roa (hash: ehfYkC8w65AmE0jTfN/MiOIrUkpfLNeew7qileDdLUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:98:dc:a3:8d:c7:67:95:37:58:cd:99:71:e3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
        Validity
            Not Before: Jun 13 02:00:32 2026 GMT
            Not After : Jun 14 02:00:32 2026 GMT
        Subject: CN=425362fef0b6adf5326c0af82948bcdf93660000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:75:95:5d:af:fc:2e:19:68:ca:00:94:0d:
                    76:11:9c:87:40:1e:c9:18:5e:f7:a1:91:ef:13:f3:
                    dd:d0:cd:b9:4c:61:ca:d3:14:ea:fc:ba:ef:56:24:
                    1b:e4:1c:b6:be:78:17:2e:14:eb:72:8b:c7:8d:fc:
                    82:af:d5:3c:04:92:34:c2:44:52:94:50:77:fa:9d:
                    d7:48:25:ce:2a:84:16:a5:4d:ed:1b:b5:c8:28:19:
                    09:4e:35:6f:d7:e3:e1:78:51:f5:07:1a:46:3b:77:
                    8c:4f:02:05:61:e6:46:00:e0:a9:b4:51:c2:73:65:
                    77:28:aa:c9:5f:6c:90:c7:fa:a1:52:8d:6d:29:38:
                    d8:99:e2:a3:f7:39:0b:76:07:ca:f7:ff:70:7f:2f:
                    7c:86:35:35:6a:90:95:03:e4:46:94:da:cb:7f:fc:
                    86:bf:b5:f7:b2:12:18:64:c3:cb:46:95:52:55:94:
                    81:6d:66:30:0c:76:7f:af:b6:cf:7b:89:1d:28:df:
                    60:ac:86:6f:c1:8e:02:eb:3d:34:e3:b2:ea:3e:ee:
                    36:6a:d0:2b:5e:68:8e:57:59:3f:2e:90:3f:58:0f:
                    07:48:d4:c8:29:3e:90:db:94:49:64:92:bc:6a:1f:
                    1e:4c:80:b0:25:87:6a:d7:f6:16:f6:dd:e5:2f:4d:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:53:62:FE:F0:B6:AD:F5:32:6C:0A:F8:29:48:BC:DF:93:66:00:00
            X509v3 Authority Key Identifier:
                keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:0c:de:53:90:d5:df:a4:cf:8d:6b:1e:16:86:f3:f1:9f:
         ca:42:c1:37:b6:be:3a:5d:01:0f:bd:fb:a8:d4:cd:24:2d:12:
         ac:f2:5b:17:52:7b:82:fa:93:9f:50:49:23:7d:3c:2e:5b:5f:
         06:6d:6e:1e:79:26:12:8a:c7:38:ff:59:00:1e:56:af:cd:12:
         fe:a3:a2:a1:8a:5a:e9:d9:f2:50:60:f7:05:45:9b:8f:c4:85:
         4e:97:49:76:bd:83:ee:3e:c2:71:14:6d:8c:22:98:70:1f:d2:
         a1:4a:9f:5b:79:73:3a:ef:09:30:c7:3c:a9:b8:c0:1f:5b:e5:
         2b:74:a5:69:e7:ab:4c:e8:a1:4d:c1:34:8d:fd:b1:fe:c8:b5:
         14:94:94:86:4c:0b:58:9d:a4:b5:85:8f:9b:e0:b0:45:fe:c1:
         9b:d2:20:6b:28:ed:a4:f3:f4:16:d6:ba:bd:41:38:2e:6f:b5:
         6e:5f:be:49:29:67:12:5a:55:a7:f5:4b:66:bf:11:9c:bb:6e:
         6b:1e:91:d5:39:eb:b0:b6:a0:37:94:eb:31:fe:a8:25:0b:5a:
         24:a8:aa:2a:dc:72:e1:bf:f6:37:3e:33:7c:1a:3b:d9:da:ca:
         ce:51:fb:04:ae:f6:0c:39:4e:49:1b:35:14:49:2e:17:99:7e:
         03:d6:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:18 2026 by rpki-client