Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File:                     2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier:          RL+FGc0buknLPurrj0nyt1rK++LJ/2VwRfViPYFgT+U=
Subject key identifier:   81:43:AC:02:CB:69:70:36:1D:B1:D5:5D:93:50:7A:87:96:27:51:40
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer:       /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial:       019E1EA2D5D0484DCBA88A1860A123CDEEDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number:          0E11
Signing time:             Wed 13 May 2026 00:00:48 +0000
Manifest this update:     Wed 13 May 2026 00:00:48 +0000
Manifest next update:     Thu 14 May 2026 00:00:48 +0000
Files and hashes:         1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: n72//4e9zPn9bK+OGlO7ukMJGpZgTq71hgOuwIEwj0g=)
                          2: HWmWJflODDxV52vIx6-epHRasJA.roa (hash: f4KecipuBIXANDLC3dbZ4NbJfpK+r2CZ/EO3t/X4kJk=)
                          3: MFAY7_OLyA4recGDb-cluDo0Fy4.roa (hash: gbxISH9PotemB1t2Fhr1XbKqizGCUJkHo7eezE3JciE=)
                          4: XgNu2RkWIrg-dXAuiT5cDAoRcao.roa (hash: YfBiHj8EXpBukiSHpuqnvbNrk3kYEDe/L+q9obAeqiA=)
                          5: cP1lvMExnryf8cpW14P-YTW6oFM.roa (hash: 1i/eVOAe4LzQ+ZGAHO4PSAx1yAI1zK27WYnYn0/9SC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:d5:d0:48:4d:cb:a8:8a:18:60:a1:23:cd:ee:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
        Validity
            Not Before: May 13 00:00:48 2026 GMT
            Not After : May 14 00:00:48 2026 GMT
        Subject: CN=8143ac02cb6970361db1d55d93507a8796275140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:7a:34:3f:62:d4:8a:60:6b:90:21:e9:c7:
                    e9:8d:18:0f:ad:79:a0:05:7d:52:0d:32:5d:41:df:
                    14:36:c2:1c:fc:c4:da:ac:ac:cb:ae:62:8e:35:75:
                    73:60:57:bb:84:0a:3f:31:d1:2a:68:e6:6d:8b:77:
                    b5:f5:92:d8:28:48:8b:f8:57:d1:d5:4c:c3:5d:46:
                    cc:bf:31:0f:d1:27:6e:cb:58:35:50:c2:f8:cd:9c:
                    7c:ca:c9:bb:94:32:66:eb:0d:8d:1b:13:70:ee:a7:
                    56:20:0b:b5:60:9d:4b:c4:c1:92:ef:20:da:71:6d:
                    40:eb:57:ea:61:bb:e5:d0:df:34:9b:3d:ae:a0:8d:
                    7c:01:d0:0d:9f:cd:cc:7d:6f:f0:b6:c5:26:46:52:
                    3b:d3:10:2a:23:c1:34:98:cc:7f:97:17:d5:ed:74:
                    9e:4e:b0:65:56:a0:83:5f:22:6d:e4:5c:2d:57:b5:
                    97:c3:41:7a:f7:e5:f2:10:39:bb:1c:00:f3:95:66:
                    9d:e4:d2:c3:14:a9:4b:11:0f:49:35:38:f2:8c:9f:
                    1a:2b:7e:c4:33:25:9b:51:bf:f8:f3:ea:6e:3d:5c:
                    50:90:69:6f:73:0b:6f:e0:b9:26:cb:2f:ab:5e:d5:
                    a8:43:c8:11:8f:33:ca:8c:e1:34:71:a2:5d:70:4a:
                    b5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:43:AC:02:CB:69:70:36:1D:B1:D5:5D:93:50:7A:87:96:27:51:40
            X509v3 Authority Key Identifier:
                keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5b:ae:67:87:ad:22:1b:89:31:fa:93:63:df:8b:bf:8b:00:
         e9:d6:45:69:87:68:40:56:64:9e:51:0e:a1:9e:6a:6c:73:c0:
         a7:b3:68:4a:64:85:40:46:9f:0d:1c:fc:0b:95:d1:bf:28:e1:
         6e:1a:85:9c:b3:b6:ca:b6:68:3f:9b:03:f4:86:98:3a:b2:69:
         e0:5f:82:fd:66:e2:e5:de:b6:e4:b6:be:60:1d:50:6a:62:42:
         f5:7b:c7:ba:1f:34:03:90:21:d8:26:aa:44:d7:5e:13:c7:e3:
         23:06:cd:22:7b:2f:13:4c:d8:f3:0b:f6:7f:91:b8:97:75:37:
         41:1a:5e:81:39:40:a1:dd:b4:2b:86:fb:b0:a5:5a:93:0c:72:
         42:fa:fe:90:73:1a:20:cd:f6:8e:ba:61:e5:ab:bb:26:33:69:
         3b:0d:ed:0e:6c:f1:a9:b7:2e:a4:c8:8a:6f:8b:8c:f8:b4:ac:
         7a:84:22:71:de:8c:b7:07:3c:49:4d:31:3f:42:6e:0d:30:a3:
         39:51:9d:6a:5c:c5:42:20:3e:2e:45:ca:89:a1:4e:37:f9:4a:
         41:68:5b:0a:c3:c8:f2:46:ed:00:53:63:64:25:13:35:17:1e:
         31:1f:6d:a5:cd:4c:45:28:30:b8:5c:71:84:45:5b:ef:dd:e9:
         d9:39:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:28:31 2026 by rpki-client