Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File:                     2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier:          4Iu1c/+NHne+WL81uX31O8SJdeGUhDlHt+0Lg867pb4=
Subject key identifier:   9B:94:FA:00:24:87:37:F8:06:FE:07:9E:5B:E6:8F:26:A8:36:5F:46
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer:       /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial:       019E1EA2D2D612E241B57C04CDF8F72A0775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number:          1902
Signing time:             Wed 13 May 2026 00:00:47 +0000
Manifest this update:     Wed 13 May 2026 00:00:47 +0000
Manifest next update:     Thu 14 May 2026 00:00:47 +0000
Files and hashes:         1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: vUffdXrMuhBMVxu/AFyLxta2LnZ5ruxJhdjqUt0HfHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:d2:d6:12:e2:41:b5:7c:04:cd:f8:f7:2a:07:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
        Validity
            Not Before: May 13 00:00:47 2026 GMT
            Not After : May 14 00:00:47 2026 GMT
        Subject: CN=9b94fa00248737f806fe079e5be68f26a8365f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:42:1c:b9:91:c5:65:3f:86:62:28:a6:8e:
                    97:98:4c:0f:40:a2:04:74:4f:c3:b1:13:2f:78:e0:
                    a6:20:ab:6d:2b:c8:d9:5e:22:5e:33:6e:83:19:15:
                    80:4f:28:e0:37:94:80:1b:4e:8e:c3:81:8d:96:83:
                    a2:bb:f2:6f:7f:7a:11:9e:8a:a3:99:d8:70:8c:f7:
                    74:9b:d8:74:e7:00:40:eb:3e:bc:ae:8a:ce:56:35:
                    a4:9e:4a:85:06:8d:bb:8e:ff:83:09:53:4e:5f:d8:
                    4a:77:9a:98:c3:0f:34:34:99:5b:18:5e:ac:00:09:
                    e8:00:5e:82:9a:69:3e:c9:c0:46:e3:79:5d:42:4b:
                    d9:66:34:e3:af:84:ad:17:d6:cc:8e:fd:9c:7b:a9:
                    2a:05:e7:76:76:03:61:0f:d5:9a:21:34:35:9c:10:
                    71:95:d5:f5:f1:7d:07:fd:dd:7e:4b:aa:b4:d4:37:
                    c8:62:4a:ed:9f:76:6f:c9:b5:d8:82:65:50:12:d1:
                    97:2d:ab:c8:aa:3c:45:d7:08:75:c4:e3:63:08:e5:
                    08:7f:3f:63:dc:83:34:c3:2e:4b:8d:ef:b4:4f:af:
                    58:fd:62:b1:22:94:d6:b3:cc:87:c1:44:e4:0e:7d:
                    8e:34:e8:82:41:79:1c:2b:f2:06:b4:e3:24:c9:17:
                    2d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:94:FA:00:24:87:37:F8:06:FE:07:9E:5B:E6:8F:26:A8:36:5F:46
            X509v3 Authority Key Identifier:
                keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:22:d5:07:6e:f3:2f:6b:68:58:d0:ea:42:ef:8b:22:ae:56:
         58:20:fc:f1:a3:15:26:d8:91:db:ea:27:81:9d:19:7f:56:df:
         11:cf:7c:0b:64:f8:05:22:18:87:56:14:2b:80:37:13:99:90:
         0c:1a:30:60:05:87:aa:83:f0:e5:83:d8:69:07:a0:42:d4:d0:
         96:69:28:d8:83:6c:0d:6c:bf:72:cc:7c:49:1b:59:12:a6:66:
         4e:f7:cf:19:48:04:56:b8:d5:fd:fb:4c:70:d9:fc:7c:4c:d0:
         69:a4:d5:81:9e:ab:0b:77:7f:34:52:c3:79:e9:e2:5d:2c:c2:
         9d:1e:b3:b9:3e:ff:0a:f6:a4:87:71:52:85:e5:e1:00:d5:04:
         2b:28:8f:23:a1:83:6f:a5:7c:98:65:a9:eb:32:08:83:1a:67:
         4b:53:91:c6:78:a3:d8:a7:23:a2:47:e1:b2:98:46:c9:6e:7f:
         6c:88:57:01:5c:53:c3:b7:dc:62:df:e7:09:21:ff:82:c7:9a:
         29:36:1f:e7:a7:c3:91:3f:5b:76:54:f2:6b:a5:d6:58:03:ad:
         a3:69:dc:5e:40:6e:be:24:25:3e:00:b9:a6:a4:d1:70:e5:09:
         b5:d0:73:be:89:1e:e2:ea:3f:3c:e2:e4:1e:b2:32:89:b3:96:
         e9:e0:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:08 2026 by rpki-client