Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
File:                     2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft (raw, json)
Hash identifier:          M230fhB5qnY6KhDYMWiFgPizlOjsY4/EAEY2ui3AKLY=
Subject key identifier:   F0:75:1F:93:3B:1E:B9:CF:4D:32:D5:77:6E:93:A5:C5:3D:9C:13:BF
Authority key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Certificate issuer:       /CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Certificate serial:       019EBE7F9E9BF70E18C64799FFFA9CC945B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
Manifest number:          0C3A
Signing time:             Sat 13 Jun 2026 01:01:35 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:35 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:35 +0000
Files and hashes:         1: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl (hash: SHBJOnKFTuzGjdpbqdrzy2TXoLCbJL03KieIxHpxeOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:9e:9b:f7:0e:18:c6:47:99:ff:fa:9c:c9:45:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
        Validity
            Not Before: Jun 13 01:01:35 2026 GMT
            Not After : Jun 14 01:01:35 2026 GMT
        Subject: CN=f0751f933b1eb9cf4d32d5776e93a5c53d9c13bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:52:f3:88:3e:fb:a1:09:9b:17:a0:38:ae:
                    8d:a6:3a:91:80:64:68:1d:3e:2b:20:ca:3e:37:bc:
                    6a:52:65:2d:8d:c8:c8:ed:d2:5d:5a:2b:e6:03:b8:
                    dd:50:26:0d:0a:b8:b2:35:fd:26:0b:03:95:3d:e0:
                    97:c8:b3:5c:4e:3f:d1:5a:c8:ae:58:62:ed:af:69:
                    ed:d8:b0:08:ee:9a:06:30:7c:9c:79:54:7f:f8:00:
                    73:88:b8:49:52:86:4e:57:28:9c:91:be:9f:68:9b:
                    b2:4d:f1:4a:d6:12:10:b1:c7:8f:d2:db:87:80:f1:
                    53:9e:bd:9b:6a:cc:f0:00:c6:79:1e:0c:5a:f5:43:
                    7d:0a:d2:fb:c1:8f:91:1c:f5:9d:a3:c8:6e:56:43:
                    7c:15:19:40:8d:ac:bf:c3:ae:d6:be:56:6a:1b:97:
                    b3:88:e5:41:32:10:f2:91:91:c9:f9:b3:f1:aa:bf:
                    20:f5:64:8a:8e:f7:fb:2f:ae:74:c0:1b:e1:62:9a:
                    a0:ae:87:05:9a:7b:a4:85:99:12:fc:d4:9b:e7:77:
                    0b:49:fb:4d:e2:0d:4c:b2:fb:a8:0b:c5:4e:80:d1:
                    7b:57:af:37:0e:82:3d:1c:ec:29:68:23:cd:2b:af:
                    24:ad:0f:7a:a1:45:34:c8:99:ff:d8:d6:47:7c:10:
                    71:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:75:1F:93:3B:1E:B9:CF:4D:32:D5:77:6E:93:A5:C5:3D:9C:13:BF
            X509v3 Authority Key Identifier:
                keyid:DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:38:dd:5e:66:1b:b1:e3:af:7b:52:cd:e3:44:55:55:f7:1d:
         65:a2:0a:80:2f:c9:46:95:c7:6f:71:87:0c:17:19:66:08:02:
         27:8a:5d:bb:96:9a:19:7c:1e:08:db:ab:5d:c3:9e:c0:c2:00:
         f1:f0:1e:21:16:29:13:05:84:4c:99:f5:b7:a7:cd:c3:e4:3f:
         4f:43:40:70:1c:44:dd:b7:04:31:19:52:a2:5a:8e:6a:d8:2e:
         41:b7:f4:cf:40:c9:d5:cc:22:c5:25:fb:29:a4:3a:12:55:80:
         c4:02:d5:93:5b:d6:3f:d4:9d:88:12:21:02:69:51:11:3d:ad:
         10:72:44:11:63:2e:c1:55:b6:d0:51:17:72:2b:2f:7e:bd:19:
         b7:ed:a0:00:ed:20:2e:a0:4a:58:35:c1:7e:e3:66:c2:df:b9:
         60:79:c3:0a:23:67:49:5a:82:4f:60:1c:93:2d:9b:81:9a:61:
         9c:66:34:3b:dc:1a:53:50:72:e0:42:72:da:e1:9b:61:34:e3:
         38:53:3e:ed:61:34:48:d3:90:5f:d2:b2:0b:8b:4d:a6:3e:f9:
         9d:29:a7:26:eb:a6:d4:45:5a:9d:4f:f6:0b:74:5e:43:7a:d2:
         8a:57:0e:a0:79:a1:c5:69:80:85:8a:76:30:36:cf:a0:00:2b:
         de:39:c9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:19 2026 by rpki-client