Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
File:                     2l7eZe_t7t-MigSyRaOl32OmnoQ.mft (raw, json)
Hash identifier:          zjujgXxQQznuNYlcFk1gKX9rI1B7gAANkeWMN/5/zXk=
Subject key identifier:   96:A8:87:6A:A1:BF:0F:14:2A:57:67:A1:94:C2:E0:52:FE:EC:8E:F8
Authority key identifier: DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
Certificate issuer:       /CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Certificate serial:       019EBE7FC5DF639048224BEE808D6C000419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 01:01:45 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:45 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:45 +0000
Files and hashes:         1: 2l7eZe_t7t-MigSyRaOl32OmnoQ.crl (hash: 8EBMfe/9MJlnd7pRz6Xj+PI4qr9B6HESJifww0Th8Is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:c5:df:63:90:48:22:4b:ee:80:8d:6c:00:04:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
        Validity
            Not Before: Jun 13 01:01:45 2026 GMT
            Not After : Jun 14 01:01:45 2026 GMT
        Subject: CN=96a8876aa1bf0f142a5767a194c2e052feec8ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:1a:ec:1e:df:f0:49:43:ab:55:9e:27:94:
                    a7:ea:02:93:4f:5c:34:ff:4e:71:9a:5c:48:35:b0:
                    5e:be:68:1b:46:d9:41:d2:3e:ea:62:7c:bc:4d:dd:
                    a0:44:37:41:8e:be:a4:e0:a4:83:37:4b:42:d6:8b:
                    4c:7a:5e:d1:f2:ea:34:f0:b8:f7:cd:d5:69:c6:8a:
                    42:74:37:aa:87:b0:c9:1f:9b:55:f6:95:1f:ef:83:
                    b3:be:40:78:33:9a:03:73:7a:1b:ee:be:f2:90:ea:
                    04:ee:c0:5f:5e:b0:62:c3:03:73:21:ed:2c:38:43:
                    e4:4c:9c:ec:06:4c:51:3f:f2:46:df:15:4d:7c:63:
                    71:bc:3b:68:51:09:57:a6:2e:86:91:2a:46:e4:1d:
                    be:4c:e5:49:4b:ef:bb:f1:bf:d6:fd:96:69:9a:c4:
                    f7:e9:e5:0e:a7:5e:4f:aa:c4:33:4e:2e:e1:40:50:
                    0d:7a:4e:52:fd:6f:41:fe:d5:53:e1:10:0c:ff:22:
                    52:d7:87:cf:d7:3d:25:a6:e9:54:f3:d5:ed:71:c2:
                    e4:83:94:87:cf:24:84:69:b7:ff:81:72:e6:3c:69:
                    11:04:c3:f1:4c:57:1b:7c:7f:32:73:98:55:26:d7:
                    d9:b9:a1:87:21:e0:fe:fa:e9:e2:6d:c0:20:ec:ed:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A8:87:6A:A1:BF:0F:14:2A:57:67:A1:94:C2:E0:52:FE:EC:8E:F8
            X509v3 Authority Key Identifier:
                keyid:DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:16:ac:ee:8e:19:a2:7b:2e:1f:3a:66:49:36:31:e8:ea:f3:
         54:25:82:7f:dd:21:51:a1:37:43:c4:78:7b:f7:65:99:94:25:
         08:4e:08:ac:85:6f:eb:91:da:e0:4a:23:5a:ed:b8:a5:9c:3f:
         33:75:c9:f5:d3:4c:40:1a:ee:1e:42:9e:52:23:87:45:57:ac:
         a4:ce:bf:c8:18:77:1c:5c:09:f6:96:fe:92:35:8f:6d:78:13:
         35:0e:dc:1f:0a:84:15:5d:ae:fc:d0:0d:ca:e3:cb:aa:f8:d8:
         43:cf:6d:b6:b6:77:94:30:e7:bf:51:19:7a:96:26:a1:b5:b1:
         4c:c9:0b:89:49:97:92:60:e7:24:cf:c7:f4:6e:14:46:62:df:
         6e:3e:e4:34:f8:3a:95:67:17:3a:13:98:0a:08:61:38:97:4c:
         41:03:2c:18:07:3d:a7:a6:13:66:ed:3e:1e:2c:23:85:8c:65:
         a1:69:ac:0e:3d:6a:f8:a8:94:c8:6c:c5:2e:dd:6d:fc:47:a3:
         76:71:11:2e:03:bc:b9:81:03:31:50:e5:d8:1a:ba:23:c3:b4:
         44:8a:74:6d:e5:01:32:50:d7:1f:2b:a1:22:2f:29:66:89:d1:
         2c:64:9d:c2:25:41:e7:ce:22:a0:04:34:78:d7:15:b1:ba:68:
         21:94:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:25 2026 by rpki-client