Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File:                     bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier:          2cj0m8DVJykKakSnu3hVSoQycMYfNiUqrIsqz4Mojg8=
Subject key identifier:   05:2F:AE:16:6E:51:8A:1E:CA:05:7D:CE:1C:ED:2E:34:83:36:22:7B
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer:       /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial:       019EC3A50D9C024A4F468993E942D6598BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number:          1961
Signing time:             Sun 14 Jun 2026 01:00:34 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:34 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:34 +0000
Files and hashes:         1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: knbrROxmmw3N8rkxGIGG6mRQm0nEnKL+OXCM6i8UCSA=)
                          2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:0d:9c:02:4a:4f:46:89:93:e9:42:d6:59:8b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
        Validity
            Not Before: Jun 14 01:00:34 2026 GMT
            Not After : Jun 15 01:00:34 2026 GMT
        Subject: CN=052fae166e518a1eca057dce1ced2e348336227b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5a:0b:26:21:b6:ca:55:ee:ae:78:b2:ea:00:
                    12:b1:77:b6:dd:bd:65:97:e4:e2:1a:1b:4b:17:15:
                    4b:e1:63:1a:ba:a5:b4:1e:41:c2:05:e8:23:db:79:
                    81:4a:4f:ad:25:fa:c1:56:52:d7:9b:02:cb:2d:a7:
                    c7:4f:f9:37:2f:0d:ca:f0:c5:d5:cd:a2:24:0c:24:
                    6a:85:3b:8a:6a:78:77:b8:c7:b0:d8:cc:b5:a8:f8:
                    db:e9:46:01:31:51:89:fc:e2:82:f1:6c:94:f0:c6:
                    75:3a:a6:9e:83:5e:47:3c:17:13:bf:7d:d7:6d:5b:
                    26:f8:6b:af:8e:77:c7:18:3e:70:f6:7f:d1:f5:18:
                    78:ab:a7:96:1d:4b:65:32:b1:b7:3a:86:3e:b7:22:
                    f5:f5:b9:7d:2a:82:bf:d2:91:76:50:42:ac:96:2b:
                    80:66:09:25:55:4a:08:b9:a6:78:c7:a6:f0:a5:30:
                    cc:73:11:75:96:96:62:93:28:fb:fa:81:9d:be:0c:
                    a1:4a:98:e6:84:e5:21:eb:a2:82:02:2c:8c:c1:8f:
                    7e:3f:83:87:2c:fe:d1:d7:18:b6:a5:83:6e:07:ab:
                    0c:eb:0c:21:d2:49:1e:de:9a:bc:4a:04:47:8b:7f:
                    31:f8:5c:d8:e0:ce:1b:8a:fa:93:fe:33:df:5e:ad:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2F:AE:16:6E:51:8A:1E:CA:05:7D:CE:1C:ED:2E:34:83:36:22:7B
            X509v3 Authority Key Identifier:
                keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:70:d0:fd:99:f2:54:b4:23:7f:8a:9f:05:85:33:0f:19:13:
         69:14:91:22:52:17:41:f4:c8:86:41:8d:cb:81:0e:f1:2c:c3:
         f1:03:14:e2:bf:77:7f:65:d0:16:3d:59:29:1a:2e:ee:46:1d:
         27:74:da:5f:93:6c:78:11:89:cc:12:fe:ae:7f:85:96:98:a0:
         37:ec:98:ec:02:eb:18:1b:48:7e:bd:06:8c:91:48:d6:cc:ca:
         65:b4:d1:c5:e4:de:88:12:68:68:4d:97:80:93:77:f5:03:0b:
         df:9f:bb:a3:cd:50:6c:90:d4:aa:2e:53:00:85:45:a3:e4:91:
         ae:07:fe:32:67:35:da:1a:4b:24:58:3e:e9:bc:c8:9d:a6:a2:
         e0:61:ab:a7:5f:96:0f:79:91:59:96:8d:5e:37:68:27:95:39:
         e9:f1:6f:b8:a8:0f:4c:26:74:be:13:b9:d0:82:40:c3:8b:aa:
         62:5a:72:7d:d9:42:40:4a:50:8e:b1:d8:79:e8:37:d4:f4:46:
         79:1d:06:16:33:38:f7:fb:cf:1e:b3:1b:bc:f8:9f:e6:d0:67:
         48:63:dd:e6:2a:f0:06:23:32:6c:6f:d1:cf:36:6a:92:27:23:
         92:61:c3:c9:a0:53:ad:75:ef:54:de:2c:c8:33:17:a0:6d:e4:
         7b:4c:67:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:24:25 2026 by rpki-client