Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File:                     2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier:          5zLnM9wxh67xnoDXhoyu3h/tNms98WGt5p4TgxAQZ20=
Subject key identifier:   0B:6D:01:B0:8C:7E:23:50:24:74:E7:F3:97:94:8A:FF:A2:76:1B:AD
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer:       /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial:       019EBEB618E98270C1E9E28287D0A0CBA45E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number:          122C
Signing time:             Sat 13 Jun 2026 02:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:05 +0000
Files and hashes:         1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: i+e2KutID8nrJauS2vpNAa1UlrEaHztIOr8tLckqwMg=)
                          2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:18:e9:82:70:c1:e9:e2:82:87:d0:a0:cb:a4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
        Validity
            Not Before: Jun 13 02:01:05 2026 GMT
            Not After : Jun 14 02:01:05 2026 GMT
        Subject: CN=0b6d01b08c7e23502474e7f397948affa2761bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:9d:75:2f:39:2f:34:19:10:18:b2:91:a9:
                    bc:df:42:55:2a:b2:dd:4b:f5:be:02:e0:b9:16:34:
                    36:cb:b6:70:e4:0a:5b:89:d7:ea:2a:6c:69:c5:68:
                    8a:63:a2:44:4c:89:9e:85:09:7e:54:43:41:96:c2:
                    eb:ed:3f:28:10:cc:7b:10:c1:8f:83:19:2e:82:a4:
                    36:38:d4:76:47:0f:90:07:81:6c:6a:af:3c:6a:b1:
                    d2:14:22:45:f3:50:63:f0:24:b5:10:00:6e:53:ab:
                    7f:a0:a5:1d:da:39:80:f4:d5:32:28:a5:2f:5d:34:
                    c5:04:e9:5e:2b:5b:85:af:62:d3:af:5e:e5:bc:b9:
                    b7:35:cf:e0:55:ea:19:b0:2e:8b:3c:0c:67:95:e8:
                    d6:09:36:5d:d0:27:07:86:08:88:ff:32:77:d1:7d:
                    ed:41:c3:7f:bf:cb:78:47:7a:5c:84:ab:8d:f0:e8:
                    22:c1:d6:1a:63:78:ec:25:f2:c4:2f:91:8a:ea:2d:
                    45:e0:06:a7:82:16:d7:ac:d2:91:92:be:49:ec:fd:
                    d4:3b:c4:41:fd:42:2c:1c:06:97:b6:9e:4d:82:35:
                    40:4e:1f:71:9a:8c:77:4a:fb:e8:69:30:bf:45:41:
                    75:dc:3f:3e:e0:c4:89:19:83:b3:80:8b:cd:1b:9d:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6D:01:B0:8C:7E:23:50:24:74:E7:F3:97:94:8A:FF:A2:76:1B:AD
            X509v3 Authority Key Identifier:
                keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8c:bb:9f:ef:41:b4:b8:60:e8:77:4a:52:4c:0f:63:98:e2:
         c3:46:b6:61:aa:7e:c9:07:a2:bf:6a:68:a9:96:36:2e:33:52:
         a1:f6:ff:21:34:bd:06:8e:fd:81:bb:04:43:14:6d:ae:04:98:
         cb:79:7e:bb:53:d5:5a:6e:8e:65:20:02:17:c2:d1:e0:fd:af:
         f8:2e:9e:63:b4:a0:cf:43:25:f5:89:41:5f:fc:45:d4:e8:2a:
         1d:21:9f:a6:29:fb:f0:15:fa:fd:cd:4d:15:b2:51:78:b0:a5:
         f4:1b:74:df:c0:82:30:b6:4e:8b:96:03:25:a0:68:1b:3c:ef:
         f6:d1:5e:a8:2e:7f:91:c1:82:7f:7c:17:50:ea:e8:6c:70:56:
         a3:a1:7e:96:4c:cc:bc:f1:89:35:83:de:f3:b0:6c:95:29:3c:
         d3:40:de:0b:76:52:da:01:aa:63:57:70:90:90:24:0d:87:22:
         ad:8e:88:4d:92:cc:85:86:ff:31:93:f3:99:c2:e9:8c:4f:75:
         fc:b0:c2:02:0e:69:89:b2:41:5f:ba:b7:7c:e7:06:a6:c4:48:
         bb:df:26:05:1e:c9:a9:dc:5c:10:e8:79:fb:64:c3:b3:d1:dc:
         1a:2f:a0:c7:ea:f5:07:59:e1:0d:7b:bf:33:d9:ae:c6:aa:5d:
         22:76:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:18 2026 by rpki-client