Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File:                     2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier:          Tmt0RJkconqGP/ii+R+xOdaIMQHHQEe4b1KF5RbXTPE=
Subject key identifier:   F8:77:15:0C:51:E7:A5:F8:99:26:26:98:9E:16:07:E2:FB:1F:F1:1D
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer:       /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial:       019E1D906D8462AE6F58C8B744BA06194DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 19:01:04 +0000
Manifest this update:     Tue 12 May 2026 19:01:04 +0000
Manifest next update:     Wed 13 May 2026 19:01:04 +0000
Files and hashes:         1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: EMt0ANbxjQehTfO+Vamux/8jpLm6g2xvv4Efl0ngPsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:6d:84:62:ae:6f:58:c8:b7:44:ba:06:19:4d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
        Validity
            Not Before: May 12 19:01:04 2026 GMT
            Not After : May 13 19:01:04 2026 GMT
        Subject: CN=f877150c51e7a5f8992626989e1607e2fb1ff11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:0e:8d:d6:37:92:cb:06:a1:43:d8:92:d0:
                    8c:9e:ab:a4:c0:bd:cc:45:3e:f3:10:bb:bd:df:2b:
                    d9:e4:d1:83:84:c6:81:eb:03:d5:94:36:09:5d:d5:
                    5d:25:af:aa:25:0e:f8:f4:0e:46:b2:b9:70:2a:92:
                    c1:ce:7c:3a:1a:9a:b2:23:24:9c:16:28:8d:85:d6:
                    ae:11:b1:ff:68:51:e9:63:86:63:9c:2b:34:b3:fd:
                    0d:6a:33:23:c1:d8:1b:e4:31:07:7e:d0:16:3b:a0:
                    88:37:97:e6:e0:32:28:fe:b5:32:d2:c3:8c:af:a6:
                    58:e6:63:fd:bb:37:64:e9:1a:21:08:7d:a4:66:17:
                    6f:73:f4:0f:e9:dd:d4:dc:e0:84:b2:19:8e:c3:3e:
                    1f:f5:ab:30:9d:3f:87:c2:64:99:21:a8:c5:00:54:
                    fa:87:a7:cc:46:f4:79:c0:2c:77:c3:a0:61:8d:81:
                    cc:cc:67:bb:53:79:11:4e:a1:26:a2:c2:31:ae:17:
                    91:07:7b:03:63:f0:a6:af:af:e7:d4:64:eb:31:93:
                    ba:e7:f2:9f:63:d4:4d:89:8d:f5:de:4d:ed:a6:5b:
                    7c:82:cd:4f:fc:03:75:65:aa:84:91:ab:ba:4e:ae:
                    ba:8e:ca:87:77:77:15:41:a7:09:21:de:47:fb:2e:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:77:15:0C:51:E7:A5:F8:99:26:26:98:9E:16:07:E2:FB:1F:F1:1D
            X509v3 Authority Key Identifier:
                keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:27:ce:7e:5b:4c:60:cd:37:0f:a3:29:c9:08:69:c7:09:50:
         bb:2b:97:4b:f2:55:c6:f5:3c:ad:ce:c5:c8:dd:57:04:e4:93:
         0c:5f:0e:8a:aa:9e:fb:21:26:8c:ea:74:c0:59:f3:d0:98:24:
         44:e6:5a:f4:56:66:9a:b8:07:38:4a:98:d8:d6:2d:35:d0:b5:
         94:a4:15:1b:bb:1e:8a:4e:5a:58:d9:e2:b4:a6:8c:8f:f4:b2:
         f9:04:f8:38:9c:67:d1:84:0f:1f:da:d1:67:85:3a:3b:4d:18:
         e4:9a:b6:90:5d:ac:b9:43:b8:09:48:08:3b:6e:a5:48:36:99:
         a5:f2:ac:d8:a0:44:2a:02:7c:36:21:0a:d1:b4:d3:d1:17:86:
         9b:e1:52:ee:c7:85:f0:41:f8:37:e8:ea:0f:1a:57:1d:c4:df:
         b6:97:37:8a:98:32:85:8b:39:6a:71:e7:66:63:b3:77:33:55:
         4a:7d:d3:7b:70:47:26:72:5b:c3:47:70:da:47:f9:bb:7b:a0:
         9a:1f:8e:56:ab:fb:ee:61:bf:56:0e:da:90:7b:08:f6:b7:66:
         a9:49:f8:bf:3b:c0:8a:72:62:8f:2c:ed:2d:7d:60:35:7e:7e:
         1b:3b:bd:76:86:18:28:61:1a:60:98:5e:b6:09:b0:59:e0:93:
         6d:bc:36:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkG2EYq5vWMi3RLoGGU3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTkxOWZiNTFhNzA1MTExZDY5OTZlZWMzMGZmYzQ0MmRl
OTdhMmYwHhcNMjYwNTEyMTkwMTA0WhcNMjYwNTEzMTkwMTA0WjAzMTEwLwYDVQQD
EyhmODc3MTUwYzUxZTdhNWY4OTkyNjI2OTg5ZTE2MDdlMmZiMWZmMTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYkOjdY3kssGoUPYktCMnqukwL3M
RT7zELu93yvZ5NGDhMaB6wPVlDYJXdVdJa+qJQ749A5GsrlwKpLBznw6GpqyIySc
FiiNhdauEbH/aFHpY4ZjnCs0s/0NajMjwdgb5DEHftAWO6CIN5fm4DIo/rUy0sOM
r6ZY5mP9uzdk6RohCH2kZhdvc/QP6d3U3OCEshmOwz4f9aswnT+HwmSZIajFAFT6
h6fMRvR5wCx3w6BhjYHMzGe7U3kRTqEmosIxrheRB3sDY/Cmr6/n1GTrMZO65/Kf
Y9RNiY313k3tplt8gs1P/AN1ZaqEkau6Tq66jsqHd3cVQacJId5H+y5CCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh3FQxR56X4mSYmmJ4WB+L7H/EdMB8GA1UdIwQY
MBaAFNiZGftRpwURHWmW7sMP/EQt6XovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMWUyMzItNDU1MS00Y2U4LThjZDgt
N2Q4YjFjOTFlYzdiLzEvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wMWUyMzItNDU1MS00Y2U4LThjZDgtN2Q4YjFjOTFlYzdi
LzEvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyfOfltM
YM03D6MpyQhpxwlQuyuXS/JVxvU8rc7FyN1XBOSTDF8Oiqqe+yEmjOp0wFnz0Jgk
ROZa9FZmmrgHOEqY2NYtNdC1lKQVG7seik5aWNnitKaMj/Sy+QT4OJxn0YQPH9rR
Z4U6O00Y5Jq2kF2suUO4CUgIO26lSDaZpfKs2KBEKgJ8NiEK0bTT0ReGm+FS7seF
8EH4N+jqDxpXHcTftpc3ipgyhYs5anHnZmOzdzNVSn3Te3BHJnJbw0dw2kf5u3ug
mh+OVqv77mG/Vg7akHsI9rdmqUn4vzvAinJijyztLX1gNX5+Gzu9doYYKGEaYJhe
tgmwWeCTbbw2DA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:21:39 2026 by rpki-client