Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
File:                     2GeflcqbZWt8oiG-brJPleMosBA.mft (raw, json)
Hash identifier:          mkKjT5VEKqhmKF9YeCB+Hs1+kkYgiUW0sQyhv/UIr/w=
Subject key identifier:   CB:7F:4F:FA:AB:45:E6:4C:2E:86:6A:0B:40:FD:D7:8F:A9:E7:C2:41
Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
Certificate issuer:       /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Certificate serial:       019E1CEBE028BAA914599C6F33B30F8AE739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
Manifest number:          012D
Signing time:             Tue 12 May 2026 16:01:20 +0000
Manifest this update:     Tue 12 May 2026 16:01:20 +0000
Manifest next update:     Wed 13 May 2026 16:01:20 +0000
Files and hashes:         1: 2GeflcqbZWt8oiG-brJPleMosBA.crl (hash: ABMAHo3YRKk8kOYDwpLWUBWg2N4gZ/QMxHsB51JvVMA=)
                          2: BSZLZZU8WnO1HNWxWSVR-o_RsAQ.roa (hash: eIYiIuRaJOxAqm6Szxm9PX2GnxZ6UxTo1qMiKhfknrA=)
                          3: Ko6ayuDYOxyaZR1lB_4YUKhJxd8.roa (hash: Guqjr9wNF8VXnju8V9KS/FQotrR92a30mYmLze8RF50=)
                          4: RvTgs-Ael9U9l-WfMGAnn6bpYas.roa (hash: 92wDEfW/LHrs63qVLF1djhEHy33LjlsoGqzBeCbZbeo=)
                          5: r48UpQfIFT_00L01sN999jQbTcc.roa (hash: B09mf8eaBwNCmIzM3aQ+pzMc7N9vQ8EVkw29KyQzVHc=)
                          6: z0g0oAAZfo552Sh_lukdYrvy7bE.roa (hash: a249LmxihlnLe91HGuM/HylW2FVr4nPvQ2mfBuPcwm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:e0:28:ba:a9:14:59:9c:6f:33:b3:0f:8a:e7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
        Validity
            Not Before: May 12 16:01:20 2026 GMT
            Not After : May 13 16:01:20 2026 GMT
        Subject: CN=cb7f4ffaab45e64c2e866a0b40fdd78fa9e7c241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:59:d5:5b:58:39:b0:aa:72:2b:7a:9e:59:
                    3d:56:ac:d0:89:78:01:1e:bf:3d:9f:aa:97:fe:96:
                    af:20:c1:91:0b:77:6f:0e:47:b2:75:33:58:c1:49:
                    18:41:6c:4a:3a:c3:f6:4e:8b:55:a3:08:a6:95:08:
                    58:1f:c3:c4:27:9d:3e:17:74:c0:ef:94:39:e7:15:
                    ba:56:29:ec:83:a9:0d:62:f3:19:ce:be:a5:59:4f:
                    97:ef:c1:1d:d1:f3:da:ab:08:82:32:5b:6c:2b:18:
                    5b:b0:f0:4e:32:f8:fa:7b:01:87:44:27:e4:3a:f0:
                    86:17:6f:fa:e6:84:e7:e7:51:e3:df:9a:1d:e3:c9:
                    73:46:32:5a:59:49:9f:6e:5e:0e:10:e9:7b:72:db:
                    7a:ff:b6:61:de:26:e7:d3:47:ab:a0:02:cb:af:c0:
                    dc:f0:eb:90:4b:66:47:7c:74:d8:c4:b8:a1:8e:ae:
                    0f:a6:84:d1:d7:99:ab:35:1f:d3:0d:a5:47:20:33:
                    f4:b4:a7:ce:53:6b:2c:01:cf:9d:7e:71:81:88:9c:
                    84:30:16:67:e3:05:77:31:de:42:8f:02:0d:f0:b5:
                    75:02:be:dc:fe:bb:75:b4:de:78:90:8d:51:27:07:
                    5e:d6:36:6a:e9:c9:3e:5c:62:93:f1:9c:f1:03:5a:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7F:4F:FA:AB:45:E6:4C:2E:86:6A:0B:40:FD:D7:8F:A9:E7:C2:41
            X509v3 Authority Key Identifier:
                keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:12:2c:cb:6d:bc:83:19:f9:33:e4:82:2c:f6:7c:ef:3c:f1:
         b6:04:80:07:3d:bd:cd:f6:05:ca:11:45:c0:cb:38:07:c3:87:
         35:e2:9a:12:7e:b5:6d:ef:79:db:7f:1c:47:1c:c8:cf:a0:91:
         ba:ca:bf:f4:19:f4:00:d2:3c:46:f7:f8:a0:98:96:88:76:d3:
         6d:78:cd:87:b3:f2:1a:3b:1c:00:38:6b:8f:9f:a8:fd:b4:88:
         8a:f2:78:cd:32:90:74:89:f5:1b:bd:6a:f7:a2:ac:f6:d4:e4:
         50:89:b5:10:1a:a1:76:ae:89:42:0f:8a:ac:1b:64:57:fd:a4:
         11:bf:7a:95:af:53:1d:12:d3:f1:27:08:d2:9a:7b:9a:e5:36:
         7b:63:9a:eb:65:fb:99:61:e5:83:2c:f1:3d:e1:02:fc:6a:d4:
         0a:42:ff:46:d1:07:43:b3:cb:45:ac:9c:8e:b0:08:9e:9e:f5:
         26:5a:81:e2:d2:e5:60:ee:8c:1b:ac:9a:d1:5e:9d:78:39:fb:
         26:cd:ba:2c:e0:93:f3:10:82:42:c5:fd:89:76:56:ee:c5:25:
         f2:48:3d:61:7c:d3:0e:a1:b0:f0:fc:77:b8:87:25:79:47:1b:
         04:dd:ff:e2:ff:5b:d6:ab:30:ed:2c:f0:4a:f7:f5:13:b4:43:
         7c:20:98:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6+AouqkUWZxvM7MPiuc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Njc5Zjk1Y2E5YjY1NmI3Y2EyMjFiZTZlYjI0Zjk1ZTMy
OGIwMTAwHhcNMjYwNTEyMTYwMTIwWhcNMjYwNTEzMTYwMTIwWjAzMTEwLwYDVQQD
EyhjYjdmNGZmYWFiNDVlNjRjMmU4NjZhMGI0MGZkZDc4ZmE5ZTdjMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz9Z1VtYObCqcit6nlk9VqzQiXgB
Hr89n6qX/pavIMGRC3dvDkeydTNYwUkYQWxKOsP2TotVowimlQhYH8PEJ50+F3TA
75Q55xW6Vinsg6kNYvMZzr6lWU+X78Ed0fPaqwiCMltsKxhbsPBOMvj6ewGHRCfk
OvCGF2/65oTn51Hj35od48lzRjJaWUmfbl4OEOl7ctt6/7Zh3ibn00eroALLr8Dc
8OuQS2ZHfHTYxLihjq4PpoTR15mrNR/TDaVHIDP0tKfOU2ssAc+dfnGBiJyEMBZn
4wV3Md5CjwIN8LV1Ar7c/rt1tN54kI1RJwde1jZq6ck+XGKT8ZzxA1rxjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt/T/qrReZMLoZqC0D914+p58JBMB8GA1UdIwQY
MBaAFNhnn5XKm2VrfKIhvm6yT5XjKLAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzct
ZTUyMjlhZDUyMTRlLzEvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzctZTUyMjlhZDUyMTRl
LzEvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRIsy228
gxn5M+SCLPZ87zzxtgSABz29zfYFyhFFwMs4B8OHNeKaEn61be95238cRxzIz6CR
usq/9Bn0ANI8Rvf4oJiWiHbTbXjNh7PyGjscADhrj5+o/bSIivJ4zTKQdIn1G71q
96Ks9tTkUIm1EBqhdq6JQg+KrBtkV/2kEb96la9THRLT8ScI0pp7muU2e2Oa62X7
mWHlgyzxPeEC/GrUCkL/RtEHQ7PLRaycjrAInp71JlqB4tLlYO6MG6ya0V6deDn7
Js26LOCT8xCCQsX9iXZW7sUl8kg9YXzTDqGw8Px3uIcleUcbBN3/4v9b1qsw7Szw
Svf1E7RDfCCY4g==
-----END CERTIFICATE-----
Generated at Tue May 12 22:31:06 2026 by rpki-client