Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
File:                     II3G2-Xnc9eq1wBdbP8m5HFDyng.mft (raw, json)
Hash identifier:          G5/tPM6Fx8AmmocVnoziLwwVIBbnWn8Ksa+j4Jpf2dI=
Subject key identifier:   77:9B:3C:CA:32:15:88:8F:4B:28:C3:BF:DB:75:35:E2:1D:63:D6:CC
Authority key identifier: 20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
Certificate issuer:       /CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Certificate serial:       019E1CB4A7FA6C70024EBCC32540103A2F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
Manifest number:          E5
Signing time:             Tue 12 May 2026 15:01:01 +0000
Manifest this update:     Tue 12 May 2026 15:01:01 +0000
Manifest next update:     Wed 13 May 2026 15:01:01 +0000
Files and hashes:         1: II3G2-Xnc9eq1wBdbP8m5HFDyng.crl (hash: 9FSqWbC0kwwHsKzk8HGJZpF+2YtPkmO4Eda6/sJpeFg=)
                          2: VD6M1TalIBGQDQhDlzk5W__Y3uc.asa (hash: jjpCurqNQ5oMU8caZ7eCROEYaNl81c0Drp5VvZH2RWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:a7:fa:6c:70:02:4e:bc:c3:25:40:10:3a:2f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
        Validity
            Not Before: May 12 15:01:01 2026 GMT
            Not After : May 13 15:01:01 2026 GMT
        Subject: CN=779b3cca3215888f4b28c3bfdb7535e21d63d6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:ed:38:23:f1:85:bb:bd:f3:3e:90:09:da:
                    90:e6:85:f8:db:b1:af:d1:da:11:2f:27:19:13:02:
                    9d:b3:7e:f3:29:ea:6f:b2:52:e2:f7:eb:3a:e1:e3:
                    c8:e8:9b:0b:32:71:dc:e3:dc:5f:3b:d9:0d:4a:fd:
                    68:4c:03:53:60:a0:2b:c5:55:6e:74:a8:d4:f6:79:
                    5b:11:f9:13:6e:60:77:8a:4a:e2:76:96:bd:5a:12:
                    26:6c:52:38:22:b1:f2:2b:58:e0:77:aa:9d:a1:13:
                    96:c4:97:82:e5:da:6b:1a:60:d4:45:96:fd:c4:39:
                    51:e9:42:4f:4c:98:d0:6f:47:9e:34:e5:7a:e8:77:
                    db:05:d5:3a:c4:0b:0b:e6:12:99:50:da:2b:96:c0:
                    f7:c3:f0:89:bd:01:67:f5:a7:12:94:c3:64:0f:40:
                    d7:c1:05:12:9b:c5:09:9d:51:55:01:a1:fa:6f:cb:
                    9a:3d:93:1f:33:11:c8:a8:19:b1:74:21:24:1a:ca:
                    0c:c0:a3:01:c4:83:6c:6e:16:ec:68:02:69:49:78:
                    69:c2:81:17:1d:6d:d4:44:97:56:bc:a4:7d:00:1e:
                    70:eb:f8:68:f6:3a:d1:a7:0e:72:13:fc:b1:50:ab:
                    dc:2c:e4:9a:95:cc:4d:fe:31:f1:4b:bc:9f:e4:4c:
                    c9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9B:3C:CA:32:15:88:8F:4B:28:C3:BF:DB:75:35:E2:1D:63:D6:CC
            X509v3 Authority Key Identifier:
                keyid:20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b7:8a:05:b9:2d:06:e1:88:92:91:d6:78:91:2d:70:47:8c:
         91:c9:89:fe:5e:40:ba:57:5b:aa:06:d4:51:70:19:ea:05:f2:
         e5:fa:2f:b3:c1:e1:fa:38:df:e4:f4:4a:e8:51:b2:6f:5a:5f:
         21:22:62:86:2c:f9:e5:c5:2a:c8:c6:55:90:91:00:cf:9b:9f:
         55:14:98:6a:42:de:7c:dd:a9:b2:67:14:0c:3b:05:7f:b6:89:
         21:e9:d5:fc:35:c7:6e:0e:4a:51:4f:16:42:ae:8c:bc:69:83:
         2c:9a:ba:20:c7:05:1f:b0:13:23:83:44:51:1d:3f:73:97:cd:
         c1:39:d3:32:14:b3:23:82:90:df:a8:05:54:74:5b:21:22:57:
         b4:f7:e7:2e:06:e7:00:b2:69:d7:9e:39:a8:d5:06:b9:67:b8:
         ac:2f:71:37:bd:1a:f5:a2:a1:f2:ad:e0:bd:0d:e3:48:62:db:
         62:5e:2d:d4:15:4a:c2:0b:6f:09:3d:a8:54:0a:eb:ec:40:2e:
         be:7f:61:5b:e9:43:04:71:65:f5:a2:18:7c:67:25:ab:0a:5c:
         4e:f9:f8:d9:6d:b3:b2:11:12:87:3c:fc:41:7b:bb:aa:49:7c:
         e0:0b:18:59:dd:05:6d:9c:54:30:87:07:69:62:4c:2b:22:77:
         a2:a9:cb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:21 2026 by rpki-client