Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File:                     2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier:          /vCFp1CEpL62VxoSW1xV//a0fsvuZJF92B8B901NRPo=
Subject key identifier:   33:17:11:6F:2C:E6:A1:03:10:C6:74:61:C6:1E:C1:21:B3:48:34:68
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer:       /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial:       019EC14942A75311646C81515E01952BAC81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number:          1124
Signing time:             Sat 13 Jun 2026 14:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:04 +0000
Files and hashes:         1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: lZGI/yTydNJsiIsxA2kQshX9Pt3LASgzppgaTs8uStk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:42:a7:53:11:64:6c:81:51:5e:01:95:2b:ac:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
        Validity
            Not Before: Jun 13 14:01:04 2026 GMT
            Not After : Jun 14 14:01:04 2026 GMT
        Subject: CN=3317116f2ce6a10310c67461c61ec121b3483468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:18:9a:01:22:03:ff:d2:7a:b2:f9:91:48:
                    d2:0c:71:be:6c:71:e3:6c:0d:92:cf:4d:63:15:71:
                    01:eb:4c:9d:bb:c2:78:80:ba:32:58:ee:7a:1a:1d:
                    ca:3d:26:0c:d5:99:02:8d:a1:b8:a3:1e:6d:a3:bb:
                    d7:9f:3e:9c:d5:3f:b6:c4:a2:7f:d6:62:e3:f1:a4:
                    86:aa:6c:37:ea:99:25:34:56:52:f0:74:ff:45:a4:
                    c2:bf:e1:fc:9c:c5:66:b9:98:08:c5:c7:22:a8:30:
                    23:86:49:d0:b3:71:8c:1a:1f:b5:c4:7f:b5:98:f1:
                    80:c7:b8:ed:43:5e:f9:00:15:36:05:ee:65:38:e0:
                    c1:3f:78:7f:45:3f:f0:00:54:be:2c:e7:0d:c8:31:
                    eb:6d:7d:87:47:82:ab:62:07:b7:bf:af:64:7a:5f:
                    0d:ed:8b:3f:bd:17:6a:6b:48:41:78:c4:af:f3:c5:
                    2a:1a:dd:66:b9:14:9a:3a:64:5f:a8:6e:71:ce:0c:
                    e6:aa:09:c5:39:18:0b:7a:6c:52:36:1e:ce:10:a9:
                    a6:a8:e3:45:1f:ca:04:c6:ab:d5:74:62:4a:67:d7:
                    df:15:f3:fd:38:ce:e6:2f:ca:24:08:8f:a1:ba:ba:
                    96:f5:b2:36:b0:a2:c9:f1:fa:73:62:fd:99:68:33:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:17:11:6F:2C:E6:A1:03:10:C6:74:61:C6:1E:C1:21:B3:48:34:68
            X509v3 Authority Key Identifier:
                keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:12:f8:1f:ec:a9:6a:6a:91:77:a0:3c:e0:5a:8a:90:c6:eb:
         dc:88:aa:a2:81:2d:2f:18:59:90:9f:1f:6d:dd:82:72:92:10:
         8b:12:c2:df:bf:15:b4:31:c5:7d:9c:fc:ea:6b:39:10:0b:d8:
         de:c6:45:d8:39:20:22:37:c3:7e:d8:9f:ef:69:74:f0:cc:50:
         d5:50:64:8c:0c:2f:a9:61:db:a6:94:0e:6f:55:a1:58:f4:7c:
         d6:c7:39:73:67:26:5a:4d:cc:02:60:35:d7:fa:dd:2b:bc:97:
         2b:93:2a:82:a6:83:45:60:38:05:f7:17:76:3d:ae:37:4e:51:
         da:1e:ad:5e:b7:4b:0c:19:59:b9:a2:cf:97:4b:ba:de:de:f5:
         0a:85:19:b6:b3:d3:6c:45:56:6a:8e:7e:bf:28:e6:4d:d4:5c:
         b8:52:6d:6d:9a:80:88:ca:e8:c1:66:bb:79:59:98:92:02:0c:
         8f:26:d8:3e:74:bf:6f:ac:b8:99:1d:3a:6e:e3:39:19:9e:00:
         99:2f:ee:e0:e1:50:89:d6:b4:22:a1:bc:79:e8:c8:f8:6a:2a:
         68:05:9d:a8:99:2b:a6:1e:e5:b9:7b:34:ce:4a:25:bc:77:44:
         25:99:e5:af:1d:56:a5:09:8f:73:1b:14:0d:bc:3b:78:a8:60:
         5d:fe:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:34:29 2026 by rpki-client