Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File:                     2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier:          +XjDrnRUzZLaNn18otLZ5sZ92X5rNyTBNVPx1/Ux9Bs=
Subject key identifier:   03:F3:72:75:87:51:BC:49:96:1A:5A:8A:68:54:94:90:97:7D:D8:C0
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer:       /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial:       019E1D2275CB47A3772C250390988DD32B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number:          190D
Signing time:             Tue 12 May 2026 17:00:58 +0000
Manifest this update:     Tue 12 May 2026 17:00:58 +0000
Manifest next update:     Wed 13 May 2026 17:00:58 +0000
Files and hashes:         1: 0LQRzIDRNUdWBd9Dydr2N_iC5jw.roa (hash: JhEvtgcGlQ0ucbJzBQZW4Y2YIF7BmFzYqZx6rOiR+Uc=)
                          2: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: 0rFpdQfZA+FzaT1giBkWny8WsYMuazEQ5lOZNpBjiow=)
                          3: 3wh0CT_8NfW3KeKbg66Zbntk-98.roa (hash: XNvg+YgzCvz98HEiUChpuE5wzEJ7vEAr5EwgyO9TGdU=)
                          4: 5XJ-DEXD7beUVnBEqtMJ7gNlRBw.roa (hash: aC0+p4R1V2InyynQLchWTNU+ke3PRpV6ML3PSthcq44=)
                          5: VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa (hash: Nbg44V0Y4hgBCfwuZPycL8mZRJRdH9RK2S/1UriBDlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:75:cb:47:a3:77:2c:25:03:90:98:8d:d3:2b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d894365b28a082834a751a97771b791124524dec
        Validity
            Not Before: May 12 17:00:58 2026 GMT
            Not After : May 13 17:00:58 2026 GMT
        Subject: CN=03f372758751bc49961a5a8a68549490977dd8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3e:2a:56:d7:f2:4c:bb:b7:b6:9c:06:df:19:
                    2f:cd:ff:d1:20:48:a5:93:d5:36:14:79:5a:cd:72:
                    9c:a8:49:a7:db:21:7c:2f:62:49:65:10:b8:58:f3:
                    ab:d8:cb:62:72:41:13:09:af:33:65:86:79:e6:4b:
                    c8:b7:65:65:61:8f:d9:43:48:f9:89:fe:2f:80:9f:
                    ef:5d:0c:97:f4:67:e9:24:30:4a:4d:46:e3:11:a1:
                    33:61:f8:65:91:56:e4:64:1a:93:8e:99:d5:1b:4f:
                    9c:3c:41:13:5b:90:8d:ff:d6:56:8d:62:a0:22:34:
                    50:f4:5e:9b:07:e2:58:19:85:fe:58:4f:cd:e1:d0:
                    0c:9a:61:d9:34:b7:b0:9e:d2:18:04:c8:10:e3:cf:
                    30:24:14:5e:28:9b:65:40:64:d9:94:de:22:36:3f:
                    a3:a9:f4:5c:45:c4:19:e8:a1:cf:bf:0b:ba:2b:73:
                    8d:c3:80:c4:7f:6b:75:65:54:10:ed:81:3a:a3:e9:
                    05:fb:9a:ff:59:ca:1b:5b:5d:4a:72:23:09:96:67:
                    8d:95:96:87:16:32:75:b3:19:f7:eb:f4:2b:7a:92:
                    14:3b:23:b3:1a:4a:24:dd:47:bb:c9:c1:b3:0e:d4:
                    8c:e0:87:ad:9b:19:06:e6:56:bf:3f:c6:11:98:96:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F3:72:75:87:51:BC:49:96:1A:5A:8A:68:54:94:90:97:7D:D8:C0
            X509v3 Authority Key Identifier:
                keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:73:23:67:5a:b9:67:90:f2:1b:37:bb:0e:b1:7b:63:39:98:
         39:6f:9d:a4:22:ca:19:f2:1e:7c:44:0a:67:9e:e2:2c:49:39:
         35:af:49:05:dd:fa:60:e0:01:46:0b:22:d4:4b:07:06:9e:11:
         a2:5e:c0:e9:7c:5e:df:ef:f6:7e:85:cd:47:6e:e3:03:9f:94:
         ac:1a:4c:1e:a8:cc:b9:21:84:e2:fd:e7:69:a3:04:5d:56:04:
         8e:eb:17:5b:cc:80:3e:c1:21:24:60:59:41:f6:88:eb:d0:11:
         62:10:e5:81:ee:c4:0b:74:45:fe:da:7b:ef:91:84:44:4d:5b:
         60:c6:48:79:71:a1:73:aa:9d:8c:6c:3c:87:08:89:06:77:97:
         b7:21:09:68:b2:10:75:b8:41:6f:6f:24:0c:66:74:8f:d5:cd:
         53:f4:e2:24:5b:f7:61:3e:7c:cf:f6:46:f0:8a:7e:4c:28:28:
         a0:b6:46:d2:3c:f9:80:74:80:73:1b:b4:36:42:3b:29:13:ab:
         4d:02:75:07:82:cd:3c:bc:76:12:9a:76:ff:18:43:68:da:c1:
         be:8f:27:18:02:20:ac:2c:28:71:a4:f2:b8:e6:c0:e6:f3:71:
         90:fa:41:1b:46:62:7a:8c:d0:79:68:c6:cd:0a:90:bd:e7:79:
         49:e2:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:13 2026 by rpki-client