Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
File:                     2QqBMQKSV7_3YURI5va1A8Ersp0.mft (raw, json)
Hash identifier:          O3C0EbJ4ITKfIktYoZttiK0wKcv5JwBMt8IH+Ofa3aI=
Subject key identifier:   99:11:D9:D3:90:B0:F8:76:51:7A:CD:9A:99:F0:78:F6:6E:7E:A6:D9
Authority key identifier: D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
Certificate issuer:       /CN=d90a8131029257bff7614448e6f6b503c12bb29d
Certificate serial:       019E1DC75844C8B52693462E76339A76DBF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
Manifest number:          05D7
Signing time:             Tue 12 May 2026 20:01:03 +0000
Manifest this update:     Tue 12 May 2026 20:01:03 +0000
Manifest next update:     Wed 13 May 2026 20:01:03 +0000
Files and hashes:         1: 2QqBMQKSV7_3YURI5va1A8Ersp0.crl (hash: +iRjJpHGG7FS8FVUa+qPrWqGWpHIA3QeuESGgqp2xVA=)
                          2: qTa7UU6Qri1LNslfL1VV2t1o7uE.roa (hash: 2xhVFcGKtML/9CwTX6mgniStIE2RskPbIQ6SKVau5AA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:58:44:c8:b5:26:93:46:2e:76:33:9a:76:db:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90a8131029257bff7614448e6f6b503c12bb29d
        Validity
            Not Before: May 12 20:01:03 2026 GMT
            Not After : May 13 20:01:03 2026 GMT
        Subject: CN=9911d9d390b0f876517acd9a99f078f66e7ea6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:f8:10:2e:2b:cf:5a:41:cc:7f:e9:ce:15:
                    68:a9:8a:b0:a1:92:9d:f4:8b:bf:56:2e:6c:35:55:
                    8b:7f:4d:1b:22:57:b5:b4:69:cd:8e:3d:0d:8d:ac:
                    18:51:e5:d2:32:ee:41:5b:b8:5a:bc:c2:0c:97:b9:
                    9a:a8:95:a9:db:65:a6:66:50:55:b5:63:6a:73:9b:
                    8d:61:7b:45:03:b2:e7:22:3c:e3:49:7c:ef:12:9c:
                    97:bc:b3:49:15:ee:fe:f1:e6:ca:ba:36:e4:66:84:
                    61:40:43:79:a9:24:ee:68:18:6d:c4:e4:28:ed:99:
                    76:bc:94:ff:8e:97:82:0b:c2:74:4c:76:fb:15:c2:
                    cc:86:ab:08:83:ab:86:45:87:df:b9:6c:f1:06:95:
                    6c:71:03:d6:7d:00:89:07:b1:ef:5a:b8:86:f8:3a:
                    61:b1:ac:63:2a:80:bf:98:b4:56:70:82:4b:74:43:
                    e5:0a:ea:74:bc:56:98:59:62:1b:40:54:7a:67:ac:
                    b4:47:b1:0f:65:58:d6:61:49:73:c6:fc:83:22:d7:
                    e0:bb:13:35:17:e8:8b:cd:9a:79:90:a0:37:25:f4:
                    b3:7c:a8:a9:52:9b:1b:31:78:fb:2e:72:75:e5:8f:
                    b7:7e:a2:e0:e9:e9:58:8a:c3:f2:f5:f3:df:f1:d5:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:11:D9:D3:90:B0:F8:76:51:7A:CD:9A:99:F0:78:F6:6E:7E:A6:D9
            X509v3 Authority Key Identifier:
                keyid:D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8d:76:2f:08:3d:86:93:64:e9:49:a2:84:ca:76:09:22:57:
         ad:eb:5f:55:28:03:69:1b:ed:a1:61:ab:00:f7:be:59:81:13:
         88:ba:cf:32:b7:87:7e:69:bb:d4:0d:4c:58:c8:a4:16:29:57:
         bd:55:67:19:62:49:2f:10:5a:59:4b:ae:b6:54:2a:75:9b:51:
         18:a9:2b:ab:46:6b:46:81:d5:ad:10:a5:73:c9:de:30:d6:c8:
         9c:eb:f9:f5:00:54:da:da:75:66:98:42:a1:dd:64:c1:5a:e4:
         72:2d:8e:20:e1:e1:1c:6d:4d:71:e2:4a:ca:0e:8f:eb:ed:c1:
         87:bf:f4:2d:cf:b3:8d:25:70:2c:12:ec:e6:04:3f:87:90:78:
         85:28:13:6d:6e:b0:4f:8c:7f:d5:2d:82:45:39:f3:9d:df:33:
         b5:70:78:10:18:72:8d:e6:1d:08:b9:eb:47:40:4a:37:cc:22:
         88:e1:33:9d:26:e4:10:a0:4a:5e:0c:d6:5c:7b:67:f6:c4:bf:
         c0:8b:07:c4:08:f2:3a:e2:6c:54:a9:4d:67:25:47:24:ea:57:
         cb:e1:06:4b:1d:d1:43:d6:cd:ed:25:a5:47:17:d5:ce:55:ed:
         35:87:72:95:1d:17:52:58:06:42:de:6b:0f:70:60:90:ee:16:
         7e:f8:82:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:30:31 2026 by rpki-client