Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File:                     L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier:          XlWjcoPEoix2Uump3j9YrSGX6YPE4eSgtNg9WGhO9Mg=
Subject key identifier:   DF:5B:0B:64:8D:42:4E:0F:9E:16:8F:0D:4D:AD:8E:41:74:C9:3C:A8
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer:       /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial:       019EC2C93919BAEF16507CA5BCBF5D1C4250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number:          1168
Signing time:             Sat 13 Jun 2026 21:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:27 +0000
Files and hashes:         1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: SFLIbnvHP/fm8HCr1mDEUuVpK/UX1P6+GWEvMycSQ/U=)
                          2: VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa (hash: 4yjY0Y/5nyei1ONwFqlQ/gYOuf/J9WjX6PHuI2NreOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:39:19:ba:ef:16:50:7c:a5:bc:bf:5d:1c:42:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
        Validity
            Not Before: Jun 13 21:00:27 2026 GMT
            Not After : Jun 14 21:00:27 2026 GMT
        Subject: CN=df5b0b648d424e0f9e168f0d4dad8e4174c93ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:42:1b:47:05:69:03:4c:15:0f:47:74:e0:ca:
                    fc:40:ca:55:46:4c:1b:01:d3:04:1f:d0:2f:7f:33:
                    a3:8e:56:31:eb:70:23:07:7d:f7:d5:3a:9a:3d:67:
                    3a:4f:aa:17:06:74:63:9e:9a:59:7c:dd:c8:61:5e:
                    41:30:41:c4:4c:8c:f7:f0:12:5a:85:31:60:b5:d4:
                    12:ba:2a:f2:40:eb:51:5d:fb:4c:75:28:3b:2c:82:
                    db:89:a2:d2:9b:e5:ee:14:77:04:e8:fe:7b:f0:c0:
                    94:0e:0c:88:81:25:58:6b:b2:f2:9a:45:60:81:78:
                    04:9c:1a:71:af:5b:ee:e5:e0:2f:ed:c4:83:de:05:
                    f8:d9:92:f3:47:00:db:a5:7d:4d:c2:e6:70:ce:05:
                    2c:52:13:30:14:e3:e4:37:e8:90:98:87:55:67:dd:
                    da:66:9e:4b:5b:1a:21:f0:66:92:40:5f:83:29:24:
                    84:72:b9:7a:25:eb:51:45:ac:89:5b:77:8a:08:03:
                    0e:9c:de:e6:26:97:06:09:cb:c7:eb:50:8a:9e:9e:
                    6c:e9:92:20:7d:bf:d4:58:7a:db:ba:47:3f:04:55:
                    2d:6b:8e:9d:27:e7:84:62:9f:36:e5:e1:29:ee:3e:
                    17:c4:92:be:c3:48:a9:bb:1b:9c:b4:89:04:cf:17:
                    62:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:0B:64:8D:42:4E:0F:9E:16:8F:0D:4D:AD:8E:41:74:C9:3C:A8
            X509v3 Authority Key Identifier:
                keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:95:4f:59:2d:9c:6a:ec:9b:3f:fd:ed:bc:e3:06:d8:01:68:
         02:f5:08:a2:4e:42:41:c9:e0:51:02:ba:77:84:64:00:f8:e2:
         f2:49:68:1a:ad:f2:54:df:ad:39:bc:4d:e8:c9:52:2d:6b:1d:
         b8:4d:a1:c9:b7:b8:2d:8b:7d:bf:dd:0c:fd:19:f4:ca:27:54:
         27:50:f7:47:2b:c8:9a:18:72:1e:25:df:21:1d:56:0a:2b:15:
         24:fc:1a:66:83:1e:5d:6e:e2:fc:5b:6b:ab:e1:e2:48:f5:ae:
         84:5f:7c:3e:60:67:d5:7b:5d:83:62:e2:4c:ed:22:a8:41:01:
         9c:a8:78:90:a7:59:5b:da:b3:b5:1a:83:2e:5d:88:c7:41:e2:
         98:b9:c0:74:7b:f3:2c:a6:cb:4a:10:8e:c8:42:b2:59:b4:75:
         40:cf:9d:78:36:01:4d:3f:e3:2e:3e:b1:9a:19:81:5d:35:49:
         22:75:8f:a5:04:a2:79:c8:0a:80:41:49:c9:43:b6:49:0f:c3:
         72:75:f3:3e:13:c8:f0:ee:9d:a8:ed:87:9d:6e:94:02:01:eb:
         e8:3d:b8:da:02:ae:fe:4e:14:9e:96:09:e8:2e:0c:81:f6:36:
         2b:c9:af:17:64:ae:08:67:65:c8:3f:e2:2a:de:2e:4f:13:94:
         78:20:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:19 2026 by rpki-client