Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File:                     2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier:          p3Kghv3zLHC9jkWPsLO71HJMuLuf07M0b1WXZ2yu2GE=
Subject key identifier:   3C:3A:3D:3E:4E:7B:7E:CE:5C:C6:E6:4B:4A:45:C9:2A:BC:A7:F1:40
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer:       /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial:       019E1DFE203308633D08C6BBCA08E0DAC35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number:          0A66
Signing time:             Tue 12 May 2026 21:00:54 +0000
Manifest this update:     Tue 12 May 2026 21:00:54 +0000
Manifest next update:     Wed 13 May 2026 21:00:54 +0000
Files and hashes:         1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: nJ2606xrwGYG7J/S0YFcxs6EWdLjo+Vg9PwX+Fzz0pA=)
                          2: CiAnwNJagjVfieLOx1c1Vix6IOA.roa (hash: zHiUWsj/p9vTBDZQMmYEbPI7k87FTHgR5XEAk1UUQRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:20:33:08:63:3d:08:c6:bb:ca:08:e0:da:c3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
        Validity
            Not Before: May 12 21:00:54 2026 GMT
            Not After : May 13 21:00:54 2026 GMT
        Subject: CN=3c3a3d3e4e7b7ece5cc6e64b4a45c92abca7f140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:95:5a:99:e0:93:d9:a8:71:cf:e2:15:68:
                    e6:13:5d:6e:cc:d9:cb:ed:ab:58:79:64:96:f0:6b:
                    37:b5:e7:c9:83:b5:09:2c:83:eb:3e:6c:34:d4:cc:
                    9b:82:d7:17:57:11:20:1f:fd:42:f5:20:04:fc:ea:
                    c6:57:98:0a:00:ad:d9:61:aa:04:27:c3:dc:e3:93:
                    51:00:54:7c:de:b2:6e:fc:45:47:e0:cb:e9:b0:74:
                    66:41:56:46:9e:11:69:95:6b:a6:25:98:71:aa:aa:
                    11:ad:f6:31:ca:d1:62:78:9b:de:b4:9e:79:1f:a4:
                    9f:3f:f6:d8:56:b8:f9:35:5b:20:f2:b7:2a:0c:27:
                    d5:fb:26:cf:fe:c5:45:4b:42:96:39:1d:a0:c3:97:
                    e9:2e:7e:2c:0c:de:11:56:1d:ef:d7:c4:ef:1c:3c:
                    c4:95:b8:30:55:44:51:b7:de:ab:49:55:db:c8:e0:
                    8a:b4:a9:e9:8b:7b:5c:a6:58:ce:f1:e7:b7:17:a5:
                    a0:f4:95:60:fe:7d:e9:be:05:98:4a:3c:d5:bf:fd:
                    2f:82:4a:da:ef:4a:93:0b:8c:71:f0:5f:bc:b5:e2:
                    c8:02:14:68:00:aa:49:e7:f2:25:c5:48:fe:06:27:
                    ac:42:10:23:19:35:22:1b:45:3f:ec:8b:be:07:dc:
                    5a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3A:3D:3E:4E:7B:7E:CE:5C:C6:E6:4B:4A:45:C9:2A:BC:A7:F1:40
            X509v3 Authority Key Identifier:
                keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:97:e8:11:82:7b:3c:ad:6a:ca:07:8c:75:f7:a3:f4:55:70:
         04:84:ba:06:23:35:9d:ab:45:36:40:db:4d:0c:44:47:ba:59:
         6f:db:7b:3c:a2:e7:42:cf:95:a9:3b:ec:d0:32:b4:f2:62:13:
         d1:fe:eb:12:5d:50:ed:51:91:e4:18:74:35:61:84:14:37:62:
         ad:69:49:dd:93:a8:e1:cb:db:c7:3e:bb:6e:e5:33:57:f6:3a:
         1b:89:f5:7e:f1:e2:9b:d2:00:95:01:09:df:2a:5c:31:1b:c1:
         ce:e6:3d:ee:76:f4:d0:fc:4e:b7:39:e5:aa:3e:20:6d:46:a0:
         94:42:36:b7:7b:e6:7c:c8:87:45:b1:a3:3b:74:ac:41:39:3c:
         30:46:7f:d6:ce:c4:22:88:62:c0:40:68:8f:71:8f:11:9e:64:
         98:4a:fa:95:24:02:e0:e4:32:6a:2f:5e:6a:48:57:c7:b1:51:
         6c:1e:a1:42:0a:35:a7:9d:3a:ad:07:4d:0b:d2:78:b4:d8:38:
         08:73:ff:a5:72:9a:1c:54:2e:49:7b:4d:70:a4:81:85:59:b2:
         4b:a0:eb:b6:8a:aa:48:c8:88:b1:a5:4b:ca:06:3c:32:1e:cc:
         d7:a3:88:67:ab:c2:cd:d1:76:50:f9:d0:99:6b:4d:a9:34:1d:
         4f:06:a3:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/iAzCGM9CMa7ygjg2sNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNmRjNDE5MjY0NWM4NDJhNGZhMmY4ODIzNGYyZTVhMTg0
Yzc2NjQwHhcNMjYwNTEyMjEwMDU0WhcNMjYwNTEzMjEwMDU0WjAzMTEwLwYDVQQD
EygzYzNhM2QzZTRlN2I3ZWNlNWNjNmU2NGI0YTQ1YzkyYWJjYTdmMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAaVWpngk9mocc/iFWjmE11uzNnL
7atYeWSW8Gs3tefJg7UJLIPrPmw01MybgtcXVxEgH/1C9SAE/OrGV5gKAK3ZYaoE
J8Pc45NRAFR83rJu/EVH4MvpsHRmQVZGnhFplWumJZhxqqoRrfYxytFieJvetJ55
H6SfP/bYVrj5NVsg8rcqDCfV+ybP/sVFS0KWOR2gw5fpLn4sDN4RVh3v18TvHDzE
lbgwVURRt96rSVXbyOCKtKnpi3tcpljO8ee3F6Wg9JVg/n3pvgWYSjzVv/0vgkra
70qTC4xx8F+8teLIAhRoAKpJ5/IlxUj+BiesQhAjGTUiG0U/7Iu+B9xadwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw6PT5Oe37OXMbmS0pFySq8p/FAMB8GA1UdIwQY
MBaAFNptxBkmRchCpPoviCNPLloYTHZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUt
ZWVmNzBhYWIwMzVlLzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUtZWVmNzBhYWIwMzVl
LzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZfoEYJ7
PK1qygeMdfej9FVwBIS6BiM1natFNkDbTQxER7pZb9t7PKLnQs+VqTvs0DK08mIT
0f7rEl1Q7VGR5Bh0NWGEFDdirWlJ3ZOo4cvbxz67buUzV/Y6G4n1fvHim9IAlQEJ
3ypcMRvBzuY97nb00PxOtznlqj4gbUaglEI2t3vmfMiHRbGjO3SsQTk8MEZ/1s7E
IohiwEBoj3GPEZ5kmEr6lSQC4OQyai9eakhXx7FRbB6hQgo1p506rQdNC9J4tNg4
CHP/pXKaHFQuSXtNcKSBhVmyS6DrtoqqSMiIsaVLygY8Mh7M16OIZ6vCzdF2UPnQ
mWtNqTQdTwajZQ==
-----END CERTIFICATE-----
Generated at Tue May 12 23:04:49 2026 by rpki-client