Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File:                     2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier:          4QrUnZ96pnNE9cozHAUBOdRdlXb3M+1vdT1dkVQYoQc=
Subject key identifier:   EE:52:42:D0:1C:5E:98:D2:21:10:64:02:8F:07:9E:F2:2C:58:A0:D7
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer:       /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial:       019E1D595ABAF0C5E46F879512F4E6DCA8E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number:          156D
Signing time:             Tue 12 May 2026 18:00:55 +0000
Manifest this update:     Tue 12 May 2026 18:00:55 +0000
Manifest next update:     Wed 13 May 2026 18:00:55 +0000
Files and hashes:         1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: 5wZHyPIM3VMymx2WBlknq/9iT5cf48mgkBmUlAybAdI=)
                          2: Mvg3Mo5WSYjcX-Icj2bidj2_crQ.roa (hash: vVq/Mz8wGpzyBjkk9cQ+W/VRqd2BvaRyhDgc817bfY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:5a:ba:f0:c5:e4:6f:87:95:12:f4:e6:dc:a8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
        Validity
            Not Before: May 12 18:00:55 2026 GMT
            Not After : May 13 18:00:55 2026 GMT
        Subject: CN=ee5242d01c5e98d2211064028f079ef22c58a0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:f2:47:fd:e5:09:42:39:c9:39:55:4a:29:
                    eb:b4:d8:10:ea:eb:6c:7f:2a:52:9f:fd:77:78:25:
                    fc:cf:63:96:4b:7e:54:01:d1:68:44:a1:17:f8:f2:
                    0c:6f:b3:5b:d0:30:6b:80:65:21:a6:1b:8b:d6:8a:
                    aa:b8:d1:83:d7:35:a4:c4:49:9f:62:4f:8d:15:11:
                    64:2c:cb:25:f0:b0:8d:0e:3c:5c:72:e2:8a:34:ff:
                    d2:ff:d9:70:62:96:e6:9a:da:b6:c4:29:5b:71:09:
                    6b:2b:87:d5:c6:c4:90:f4:66:e1:4d:5d:b8:7f:44:
                    62:c1:ab:af:69:b3:0e:ae:8b:7e:7f:af:d8:76:33:
                    1c:45:53:6e:f5:2e:22:a5:f0:1d:1c:77:5a:04:b8:
                    9d:df:b0:c7:b7:0c:bc:23:ca:3d:f6:1c:84:2c:4c:
                    48:8b:64:dc:ba:b2:62:c6:52:8c:a7:35:70:ef:e3:
                    f4:4e:90:e7:9b:17:67:da:8f:b6:22:25:fa:88:a6:
                    16:77:76:b9:69:2d:8e:cb:fa:06:ce:6e:7f:09:d1:
                    a6:49:f3:37:17:30:ce:a5:9f:8a:56:9e:b6:f1:0f:
                    98:55:81:14:9a:ac:51:58:0e:ea:72:62:ac:dc:2e:
                    2c:3f:b2:5c:e8:92:67:b8:d3:ae:22:f9:63:07:f4:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:52:42:D0:1C:5E:98:D2:21:10:64:02:8F:07:9E:F2:2C:58:A0:D7
            X509v3 Authority Key Identifier:
                keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:24:c8:28:f3:2e:68:cf:58:f8:88:0f:2b:c7:55:01:12:9c:
         b9:b9:f2:31:d0:98:81:a4:cb:d0:1f:06:97:59:a6:cc:c0:0f:
         eb:8b:a7:62:d7:8d:cd:93:3d:2e:ea:31:e5:51:94:b1:1a:f8:
         0a:1c:77:da:e0:f8:14:9e:e5:98:a6:02:67:77:f5:87:14:cc:
         aa:da:55:35:8f:14:82:04:82:ac:30:dd:d8:03:c5:53:d0:d6:
         10:92:8c:f8:42:d0:5e:e5:d0:99:1f:09:e2:8a:6a:6b:e7:d2:
         f2:4f:9b:d7:f4:38:ea:a0:3f:0c:b3:bf:94:bd:36:30:6e:c0:
         1b:52:14:49:2c:5d:c4:6d:6f:e7:03:ef:2e:70:c9:77:7a:11:
         58:5c:5f:cd:5f:78:ec:06:ed:8d:4c:b3:9b:49:1e:94:6c:0b:
         9b:ba:ae:4f:d2:07:2b:c0:14:af:2a:3e:fb:3c:07:ff:34:8e:
         b2:0b:01:63:b5:5d:07:0e:fa:6f:c2:62:5e:2f:17:fe:c8:d2:
         0a:8d:c1:54:cc:ca:d1:e5:b0:12:51:02:44:6c:e8:3d:cf:cd:
         49:ef:3c:4b:fa:77:b2:de:38:ac:fb:68:b3:fc:72:14:1e:0a:
         15:9b:b5:d9:1d:1d:16:ed:db:06:8e:06:d2:4d:23:5c:07:77:
         18:36:7e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:25 2026 by rpki-client