Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File:                     2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier:          1PUxIq9x0Nc708A8KXLO8lrjj2kF82IIhn4nfL6kI5A=
Subject key identifier:   04:D2:2D:A3:A3:7C:57:E1:68:43:C2:5D:45:7A:FF:48:FB:91:0F:83
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer:       /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial:       019E1D90C74EFCDF141BD58FAA1CBFB4BFF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number:          085D
Signing time:             Tue 12 May 2026 19:01:27 +0000
Manifest this update:     Tue 12 May 2026 19:01:27 +0000
Manifest next update:     Wed 13 May 2026 19:01:27 +0000
Files and hashes:         1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: iErQknDvSscKjdr/6V31ZJ9cLY93gskRmaQPfyDNb4Q=)
                          2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:c7:4e:fc:df:14:1b:d5:8f:aa:1c:bf:b4:bf:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
        Validity
            Not Before: May 12 19:01:27 2026 GMT
            Not After : May 13 19:01:27 2026 GMT
        Subject: CN=04d22da3a37c57e16843c25d457aff48fb910f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:25:24:9c:ed:18:1e:ab:18:b4:fd:dc:aa:
                    f5:22:2a:ae:6e:08:ec:75:14:ec:af:b6:47:df:8b:
                    8a:3b:f2:99:2b:93:d1:ab:99:82:2d:ee:0e:d9:a7:
                    d6:9a:60:4a:de:d7:fa:b5:97:60:03:55:8d:4d:a3:
                    dc:58:73:87:35:1e:ab:da:88:e8:c6:cc:b6:84:f2:
                    28:af:66:55:5d:a5:a4:d6:43:e1:fc:6e:e9:24:9d:
                    a1:06:68:9f:6b:4a:c2:26:a6:9f:88:c5:13:1e:7b:
                    1d:af:5a:56:fc:60:48:84:e5:f9:26:c0:4b:c1:4a:
                    df:3c:c6:db:26:d4:b3:de:d3:bb:ed:45:c4:dc:f5:
                    5f:c4:2e:32:d2:73:3a:84:84:d1:a7:7c:8a:d4:ce:
                    55:a5:d3:f9:e8:5d:73:1a:e5:b9:83:c0:78:d4:d8:
                    f8:11:cb:1e:ae:37:75:31:de:53:b8:4a:fa:a1:d5:
                    6e:25:47:b6:81:fa:ce:8a:fc:0f:9c:b1:c7:b6:59:
                    bd:94:c1:50:1d:18:f8:3e:8e:5f:64:78:3f:00:2b:
                    5d:86:e2:50:46:4d:a8:ac:8e:52:2b:e7:a3:a2:7b:
                    36:a6:c2:d9:e3:48:2b:92:ea:b1:68:24:d6:0e:0e:
                    70:51:e4:61:25:e3:dd:bc:6f:cb:c9:65:7a:71:6e:
                    33:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D2:2D:A3:A3:7C:57:E1:68:43:C2:5D:45:7A:FF:48:FB:91:0F:83
            X509v3 Authority Key Identifier:
                keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fe:3c:4c:e2:0d:d4:a2:10:07:a0:52:61:0d:d7:71:ca:27:
         05:ef:fd:f5:30:ad:44:09:59:92:d4:d1:fd:d3:3b:90:0a:19:
         40:c2:42:c0:d7:85:52:c1:3e:5e:2c:96:fa:83:67:0a:cc:ec:
         95:af:2e:fc:7b:36:22:7a:cc:5f:2c:5e:e8:a0:9c:5a:e8:9c:
         cd:5c:2c:7a:da:8c:40:5c:09:0b:a4:66:29:82:56:c7:a4:a2:
         5e:0d:d2:3e:ae:c3:83:06:56:fb:04:37:31:9b:51:e8:2b:34:
         73:68:97:46:b9:b2:27:b9:5c:24:4a:17:05:d1:a3:95:5a:05:
         d2:3b:3e:c2:0a:e9:1b:7a:74:d1:64:21:dc:01:d9:3f:3b:e7:
         25:b5:c9:f0:1d:ad:24:34:f9:eb:76:52:2b:c9:bf:ad:28:4d:
         9b:70:94:32:33:0d:60:b9:c7:53:a1:25:1c:b0:42:ce:97:ed:
         11:a3:91:b9:73:04:3f:d5:6f:9d:af:19:e1:98:54:9a:d7:69:
         81:95:56:ab:fc:5b:93:f2:83:70:98:07:31:fb:88:2d:26:9b:
         90:f3:01:c8:09:04:a5:50:f9:bf:6f:2e:b3:a9:fa:c1:d0:ad:
         8a:fa:b8:5e:f3:40:ed:b0:e8:55:0c:fd:80:7c:d4:91:5a:cb:
         60:4f:a3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:01 2026 by rpki-client