Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File:                     2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier:          vUFF+Hd1YibKv9o91CbkTWmReFdgtzag6VS10Tg1Pf4=
Subject key identifier:   57:98:17:E9:95:33:BC:89:CE:6C:86:D8:EB:FD:69:B0:BA:48:58:D9
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer:       /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial:       019E1DC77C1AC22464F5347480B169A79164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number:          0D38
Signing time:             Tue 12 May 2026 20:01:13 +0000
Manifest this update:     Tue 12 May 2026 20:01:13 +0000
Manifest next update:     Wed 13 May 2026 20:01:13 +0000
Files and hashes:         1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: e1Ctxgcglwh4ULAfhBIZCv209ll45SVQIP0VGvkQv2w=)
                          2: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (hash: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA=)
                          3: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (hash: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE=)
                          4: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (hash: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:7c:1a:c2:24:64:f5:34:74:80:b1:69:a7:91:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
        Validity
            Not Before: May 12 20:01:13 2026 GMT
            Not After : May 13 20:01:13 2026 GMT
        Subject: CN=579817e99533bc89ce6c86d8ebfd69b0ba4858d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9d:97:28:0b:f2:7e:48:7b:fb:eb:6c:09:5c:
                    b6:05:88:b0:1c:8a:d7:9d:d0:ff:61:ae:19:5c:ce:
                    e2:72:89:83:3c:71:b9:49:3d:01:6a:49:ee:2d:8b:
                    8b:77:8c:38:15:5c:61:b7:63:52:39:fb:32:55:f1:
                    c3:7d:df:f8:77:cf:e7:a1:12:85:f6:1f:2f:a7:86:
                    22:c2:79:e3:fe:88:27:f5:14:07:26:c4:0f:4e:cf:
                    c0:cc:0f:3c:19:62:2c:72:cf:aa:70:f4:10:a2:cb:
                    b6:92:4b:f0:a3:1c:bd:71:4a:a5:b4:fb:ac:99:64:
                    bd:ab:6e:db:6d:ad:39:cb:ae:4b:a1:f8:9a:3f:18:
                    56:3b:f0:85:30:cc:c9:ce:0b:c6:01:ae:c1:e6:e4:
                    27:d8:89:1b:07:bb:8e:03:e6:5f:ac:68:86:d8:37:
                    2c:a8:e4:65:15:8e:15:91:61:3d:7b:13:c7:01:35:
                    48:48:59:d2:5b:76:c2:6c:33:ae:b8:e5:51:c2:43:
                    59:f6:43:d1:2f:d1:77:b4:fb:51:c8:05:99:07:de:
                    5c:20:38:c9:6e:8b:74:f4:b3:07:ca:96:ea:67:32:
                    78:14:f7:bf:bf:85:23:03:95:14:2d:a1:05:62:96:
                    fd:47:23:cd:ad:c6:93:85:ff:84:b2:8a:e1:d5:ba:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:98:17:E9:95:33:BC:89:CE:6C:86:D8:EB:FD:69:B0:BA:48:58:D9
            X509v3 Authority Key Identifier:
                keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:df:d3:0f:cb:30:11:ef:aa:7a:1a:0b:9f:2b:36:6a:44:
         b3:82:4c:3b:0d:f7:ed:e3:c4:6f:29:00:8c:90:54:d8:0a:c7:
         d9:e5:f2:40:9f:f2:15:11:b3:f2:9a:e4:61:8d:1f:c7:e6:70:
         2e:22:0b:db:d1:3a:d5:e0:6e:0e:7e:7b:04:3a:32:90:8c:5c:
         41:35:23:6d:ed:04:ea:a3:92:89:f1:f2:0a:15:0f:cd:be:59:
         82:d6:11:13:d1:a3:2c:8b:2c:7b:e0:1a:be:a6:ec:83:0f:ac:
         db:56:74:b2:a8:c4:13:08:54:86:b9:f7:be:d9:9b:1d:43:fc:
         ff:e6:4f:57:a4:99:15:61:23:ed:64:f2:ce:36:30:ff:5a:4b:
         fc:b6:82:a7:fd:d9:d9:30:49:05:23:e8:f0:f5:d8:a5:3e:db:
         86:1d:ef:87:f5:d9:5b:b5:d5:da:09:e2:3a:65:a6:fc:6e:a6:
         81:38:9e:b6:71:66:1e:42:d1:58:52:54:20:2d:91:9b:94:0f:
         af:41:68:f3:6b:b0:50:54:9b:43:ad:6e:06:5b:3f:78:a4:bc:
         c2:6c:e0:1b:20:74:ae:06:a8:2d:ea:9c:82:3b:19:52:d2:0c:
         7f:0b:07:c3:9e:1e:34:92:e7:44:4c:3f:38:ae:3f:62:ad:3c:
         a2:4a:08:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:08:39 2026 by rpki-client