Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File:                     2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier:          RdPbX2hhH1OMqwew/oXMK8S3LMquls7ir7wdK+l9cCg=
Subject key identifier:   39:8F:44:88:4D:D3:54:29:44:FA:84:98:4E:47:DB:34:6A:D6:65:14
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer:       /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial:       019E1D59B3F9A11AD219F810FA1BE66F81F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number:          17F4
Signing time:             Tue 12 May 2026 18:01:18 +0000
Manifest this update:     Tue 12 May 2026 18:01:18 +0000
Manifest next update:     Wed 13 May 2026 18:01:18 +0000
Files and hashes:         1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: 82lFrVzKh4o7OkDBDFe6IDnnLi/jKNmLAHPa+9K8liI=)
                          2: NkvybtyieeqcXDjHG9gHl_XAsMQ.roa (hash: 00Ye2JJrLJ1zMVpdd8DivfPeXqrw+enAIn41E191EYk=)
                          3: WYvB7z2E3X738_d9cgopMgPJk5I.roa (hash: u5beh3Tb2byL/rGs3HaRRLRbrFXqSXUDof4rFMurirU=)
                          4: gLFfimILtrvNmLCqHHnLyf5HeDQ.roa (hash: Au61gdy9n9KoeOHWn+nWGKr6a14kosDrZi3ajbtwzn8=)
                          5: zNk-M0VG943BmxksL9suzBVm4vQ.roa (hash: UUWX1bpaoMZzwXQx5EXEi0bI53+v8tYUcjIfVRmZCYY=)
                          6: znK95_JFl0pNvLfj6OXmewYJypk.roa (hash: KuT2Fb0+p87DW0EC5Dzu5qZfHaXjG7VpnPReGDVhA8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:b3:f9:a1:1a:d2:19:f8:10:fa:1b:e6:6f:81:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
        Validity
            Not Before: May 12 18:01:18 2026 GMT
            Not After : May 13 18:01:18 2026 GMT
        Subject: CN=398f44884dd3542944fa84984e47db346ad66514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:4b:fc:23:49:9e:52:97:0e:09:aa:9d:bc:
                    32:2f:f3:37:80:be:54:3c:f6:1f:78:56:0e:94:2f:
                    41:ee:6d:16:6c:b0:0b:08:48:70:a1:e5:a9:ad:29:
                    55:61:6f:7e:99:30:cf:ef:e0:3f:8b:69:4c:27:0b:
                    23:ea:c3:20:60:46:85:98:23:90:f4:b2:63:bb:43:
                    92:56:ed:b5:3f:41:dd:5b:b5:8b:41:25:d7:d4:34:
                    79:b2:ef:44:e1:2a:12:d6:bc:61:cd:8e:8d:15:d5:
                    52:47:ba:2c:b2:e6:dc:39:29:0c:45:07:6b:e3:27:
                    e8:04:bb:be:96:e6:32:33:7a:03:37:dd:f9:3e:11:
                    60:b3:3b:ab:fe:83:a0:82:d6:5e:3c:82:03:38:03:
                    10:e7:6b:f8:1b:d9:3a:2d:12:c6:03:17:ed:7b:ba:
                    e1:42:39:b0:c4:e3:8d:93:7b:7f:dc:ad:8c:4b:8d:
                    4d:cc:da:68:8d:ba:c6:9b:da:5d:a9:19:da:85:e2:
                    c7:fb:11:85:d9:45:c0:cd:0c:89:d2:b1:02:5d:75:
                    bb:3e:5e:01:19:dd:52:cf:65:83:39:7b:68:6d:45:
                    e4:02:bf:f7:ae:e1:9b:40:21:a8:d8:34:9f:4d:32:
                    e3:24:27:c2:fe:8c:63:9b:1b:8e:14:4e:b3:96:68:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8F:44:88:4D:D3:54:29:44:FA:84:98:4E:47:DB:34:6A:D6:65:14
            X509v3 Authority Key Identifier:
                keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:4e:d6:7f:57:e6:bc:e4:10:6d:4e:c3:5d:7a:7c:f5:54:e3:
         95:ba:8f:75:fd:a2:57:c2:1a:b9:73:c3:76:09:03:24:0e:1c:
         32:f6:b6:e6:15:e8:23:f5:41:5f:57:cb:08:67:a6:04:08:6f:
         e8:55:57:4f:71:45:57:25:90:67:12:ea:13:80:07:c2:ff:55:
         19:69:5d:ca:7c:bb:26:87:4e:db:35:e2:9b:c2:62:2b:b8:20:
         e1:22:8d:fa:98:9a:04:99:d0:43:92:a6:aa:fd:47:9f:f6:56:
         4f:55:9f:83:48:d2:46:48:eb:17:a6:e2:cf:b3:a5:f1:64:eb:
         89:96:42:e5:b5:6e:5b:95:61:73:82:46:98:66:72:3d:02:32:
         59:66:d8:50:50:5c:96:52:72:0d:07:b8:5e:99:10:e9:95:45:
         84:c9:2d:d3:fb:73:8f:4d:9c:ee:4b:50:d8:0c:6a:16:c2:5d:
         52:aa:52:4f:cf:27:74:d7:76:bb:94:0a:57:c9:02:fa:a1:27:
         b6:2b:d5:41:e3:41:89:46:16:5b:fa:f3:bc:00:86:18:34:b8:
         22:62:01:2c:15:41:32:5c:b4:0c:93:46:ee:3c:19:ae:b6:e8:
         86:ac:4a:b7:aa:fd:58:7e:d6:31:1b:32:15:03:cf:a8:da:c3:
         b0:38:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:42 2026 by rpki-client