Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File:                     2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier:          wPBNA80CCq6/nLSQaZ1OTDEoeQqDeFjU/HWpYOYbS7c=
Subject key identifier:   7A:CB:97:D1:BD:04:15:B3:5A:32:29:3C:80:82:09:86:6A:FC:84:7A
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer:       /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial:       019E1D224D7E504CFDB58F3F52FF63A174BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number:          1377
Signing time:             Tue 12 May 2026 17:00:47 +0000
Manifest this update:     Tue 12 May 2026 17:00:47 +0000
Manifest next update:     Wed 13 May 2026 17:00:47 +0000
Files and hashes:         1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: ETUNuXZQSjJcV4MdIdyAmHAa0zV+ib+wNv9pPK6+Bbc=)
                          2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:4d:7e:50:4c:fd:b5:8f:3f:52:ff:63:a1:74:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
        Validity
            Not Before: May 12 17:00:47 2026 GMT
            Not After : May 13 17:00:47 2026 GMT
        Subject: CN=7acb97d1bd0415b35a32293c808209866afc847a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:aa:fd:7f:65:63:8f:2a:94:f9:d8:00:87:
                    87:c6:6f:72:d0:df:94:c1:1f:f0:ef:da:72:99:7e:
                    7e:6c:aa:d4:5a:34:eb:a6:31:66:4b:1f:e4:05:ca:
                    64:61:cc:14:15:85:6b:66:d5:23:df:d5:51:5d:35:
                    a9:24:25:1f:c1:0e:a7:b1:72:30:b7:f7:7a:5f:3f:
                    1e:32:67:b0:83:0e:3b:ac:2b:1a:fa:d1:a7:59:6a:
                    f5:e4:04:21:95:d7:ee:2a:eb:e7:b9:b8:28:e0:4a:
                    64:46:c0:bf:95:b0:4d:6e:ef:30:88:74:4d:e9:25:
                    ae:50:3d:62:dd:a7:b4:81:51:0e:5e:2d:cc:81:87:
                    a1:91:11:26:dc:2b:20:e2:b9:d8:46:09:75:7e:19:
                    e2:8e:dc:ad:e3:7c:0e:31:f8:89:90:aa:d7:8c:53:
                    38:66:6d:23:d7:d3:fb:92:b7:9f:af:fc:58:cb:f1:
                    71:f9:91:50:26:50:1a:84:d5:9d:67:41:42:ed:f5:
                    99:f8:95:6f:65:40:5a:43:5e:4e:11:46:0f:95:43:
                    07:af:67:f9:b8:b1:0c:3b:26:e4:de:5b:ac:e6:eb:
                    f2:c4:6d:b8:cf:34:a1:71:5e:24:7a:e8:8a:e7:1f:
                    3b:6b:b0:18:2f:6e:b4:ea:60:6e:9a:7a:73:be:50:
                    07:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:97:D1:BD:04:15:B3:5A:32:29:3C:80:82:09:86:6A:FC:84:7A
            X509v3 Authority Key Identifier:
                keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ac:1d:ad:0a:3b:81:fd:4e:84:f2:65:6c:63:29:9e:f3:b7:
         78:92:40:99:b7:d9:84:d6:95:dd:96:55:20:01:a9:ca:53:99:
         3a:8b:88:c1:9c:59:4f:1f:e4:8b:83:51:e3:db:4d:01:2f:9c:
         f3:a8:2c:01:c1:12:f6:da:fd:03:8b:a7:a5:a7:e7:a9:03:6b:
         3f:b0:c4:a4:e6:36:98:a6:21:5b:0f:f9:90:d8:42:7d:23:4a:
         c7:d9:fb:c9:ee:ed:ee:44:0b:ac:a2:cf:4e:50:f6:8e:d1:d3:
         08:6f:4b:34:9a:dd:82:48:df:ed:57:5e:72:91:22:3f:42:7f:
         0e:36:71:ee:c9:0b:41:48:0a:e2:53:82:d6:43:6c:e3:c3:a0:
         b5:1a:cf:12:bc:24:35:11:19:a7:28:47:1f:72:50:02:c7:ef:
         e1:eb:3b:c2:d8:c2:2a:2a:c1:ea:fc:79:1a:69:38:12:19:21:
         3d:63:d2:51:9e:20:4d:0f:bc:9e:34:83:c0:a8:8a:06:63:a4:
         fe:f9:dd:44:e9:b9:7a:5b:21:82:e5:66:83:a8:b9:47:0a:ad:
         ed:6c:e3:80:36:02:71:a1:80:7d:b2:ed:f7:eb:12:39:c4:cd:
         ad:82:88:3c:71:bc:51:59:33:86:4a:e6:6f:9f:86:51:96:f7:
         83:22:5c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:54 2026 by rpki-client