Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
File:                     2y7CKma1skmGOV_u1_tbkOKMm-Q.mft (raw, json)
Hash identifier:          6BhU9Ke3dbI3km87LgrhkQryzlBTj/hvRc7YTZkWcus=
Subject key identifier:   DE:E7:E0:20:DC:D0:7E:79:30:D5:FC:B0:84:DF:17:ED:39:C5:37:91
Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
Certificate issuer:       /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Certificate serial:       019E1F11562C60411B70A6CC660B7B9AA892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
Manifest number:          0136
Signing time:             Wed 13 May 2026 02:01:30 +0000
Manifest this update:     Wed 13 May 2026 02:01:30 +0000
Manifest next update:     Thu 14 May 2026 02:01:30 +0000
Files and hashes:         1: 2y7CKma1skmGOV_u1_tbkOKMm-Q.crl (hash: MqYC5KFFqIWiPzwceilYcFlWu6NeQpoeut88YfpEBeY=)
                          2: 5OcccwQslADzpJ8HL6Y7KqGcVVU.roa (hash: irYRIWXEtiw19tZuoevHJTgjYRjpfkAs2mq69Ns5wSo=)
                          3: 6RGkspdxkAWpYvFpm-8ta5s8IEs.asa (hash: SMkfixcVMM4K7Z6BHPlzlnNfBWBe+ZvLZ06HB1RuIn0=)
                          4: Wc5ljSD5VjkVZd4v1ISBd1k6dNQ.roa (hash: jyDuHZmz8mqWG2X7hHBWucB2QcY/4S07R3yhK3xzlzg=)
                          5: t-YR2UdrGJYsX4ZnfkqO15T5g9I.roa (hash: 21jzaahsgBvVI66l1ZAF+dhUPihnDJv9H/MfKJOkhNs=)
                          6: uOrZo6gF2WVlF4nc6xlIIShI6cM.roa (hash: 4dFwviDJ3qVWkRoE0eY86El9WripywfdZeQ8NNS5Yl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:56:2c:60:41:1b:70:a6:cc:66:0b:7b:9a:a8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
        Validity
            Not Before: May 13 02:01:30 2026 GMT
            Not After : May 14 02:01:30 2026 GMT
        Subject: CN=dee7e020dcd07e7930d5fcb084df17ed39c53791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0c:81:eb:36:6f:b8:9c:10:0e:d7:d6:1a:28:
                    5c:61:1c:aa:55:85:89:15:be:60:bb:2b:f9:66:37:
                    cd:69:89:85:69:1a:9b:84:57:88:b2:50:bd:94:bc:
                    b8:bb:04:4a:0e:ad:f3:77:dd:4d:54:21:e3:c8:62:
                    42:8e:5b:cd:11:b1:0e:f9:8e:e0:e3:ce:6f:a4:1b:
                    6f:dc:20:a4:8b:9b:61:d9:7a:50:85:e2:45:de:1e:
                    ae:f6:33:bd:04:c0:c7:e3:7f:4b:da:3d:65:be:0b:
                    50:0b:ad:fb:e0:f7:40:6a:a1:37:8f:b5:1f:c4:52:
                    28:e6:13:3f:e5:97:13:7d:e6:33:00:e8:13:69:95:
                    fe:a2:b2:32:39:bd:25:ad:d5:ae:e0:93:19:dc:4e:
                    dc:a0:ea:39:21:19:92:1b:19:7b:ca:31:48:52:ab:
                    d9:ee:8d:8d:02:b2:7c:78:47:70:29:2e:ad:1b:93:
                    2e:af:b5:b3:82:8e:b2:10:a1:c5:86:14:c4:23:39:
                    df:7d:ab:2d:3e:70:d3:df:a3:59:bd:f1:f9:01:fe:
                    8f:31:36:3c:b8:12:b5:f2:5d:59:90:cd:81:01:2d:
                    e0:31:00:10:7e:f0:9f:d9:93:5f:0c:45:22:49:11:
                    ea:4c:80:f0:84:18:67:29:98:44:15:a2:d2:fc:79:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E7:E0:20:DC:D0:7E:79:30:D5:FC:B0:84:DF:17:ED:39:C5:37:91
            X509v3 Authority Key Identifier:
                keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:dc:8b:2c:d6:f9:02:c0:22:28:7f:02:c2:c3:41:eb:e8:e0:
         95:24:be:a8:2e:d9:27:25:f5:11:1b:31:2b:35:83:fd:5c:ee:
         ec:ed:38:93:2e:37:3d:a7:d9:0f:73:be:41:f1:a3:91:e7:72:
         3d:4d:ed:1f:96:76:39:ae:b5:30:20:f7:f0:ac:e9:96:f8:53:
         c1:ae:d2:2c:d1:c5:09:05:83:9b:ba:3e:21:92:0c:2d:8a:ba:
         ac:a2:dd:41:2e:7f:3a:96:ff:97:95:71:4e:d2:a8:78:36:69:
         0a:3c:9c:3e:c7:00:12:fd:95:33:05:a4:ec:a4:b1:d5:51:28:
         c2:94:39:02:84:8c:57:bd:5a:4f:2d:6f:b6:4c:14:9a:6e:fc:
         93:84:8f:e2:f8:8d:49:e1:c1:fd:e1:fb:23:43:24:5d:89:00:
         d1:92:a1:dd:5a:6c:c6:e3:68:41:7a:54:24:dc:34:2e:02:b8:
         b0:63:75:1e:9f:80:cd:00:9b:94:eb:31:fe:a7:a9:3c:44:49:
         f5:f0:d4:93:26:6c:a1:25:a6:4b:24:ee:ac:a0:83:d7:3b:22:
         68:34:74:10:b6:07:99:e2:4e:82:a3:3e:3b:0f:1e:b1:4b:6b:
         ab:83:c9:9c:36:6b:65:1e:b8:93:f1:c3:39:1d:a2:66:1f:71:
         51:73:45:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEVYsYEEbcKbMZgt7mqiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMmVjMjJhNjZiNWIyNDk4NjM5NWZlZWQ3ZmI1YjkwZTI4
YzliZTQwHhcNMjYwNTEzMDIwMTMwWhcNMjYwNTE0MDIwMTMwWjAzMTEwLwYDVQQD
EyhkZWU3ZTAyMGRjZDA3ZTc5MzBkNWZjYjA4NGRmMTdlZDM5YzUzNzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AyB6zZvuJwQDtfWGihcYRyqVYWJ
Fb5guyv5ZjfNaYmFaRqbhFeIslC9lLy4uwRKDq3zd91NVCHjyGJCjlvNEbEO+Y7g
485vpBtv3CCki5th2XpQheJF3h6u9jO9BMDH439L2j1lvgtQC6374PdAaqE3j7Uf
xFIo5hM/5ZcTfeYzAOgTaZX+orIyOb0lrdWu4JMZ3E7coOo5IRmSGxl7yjFIUqvZ
7o2NArJ8eEdwKS6tG5Mur7Wzgo6yEKHFhhTEIznffastPnDT36NZvfH5Af6PMTY8
uBK18l1ZkM2BAS3gMQAQfvCf2ZNfDEUiSRHqTIDwhBhnKZhEFaLS/HlMDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7n4CDc0H55MNX8sITfF+05xTeRMB8GA1UdIwQY
MBaAFNsuwipmtbJJhjlf7tf7W5DijJvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnk3Q0ttYTFza21HT1ZfdTFfdGJrT0tNbS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZmJjYmYtMzU4ZS00OTI4LTlhODQt
Y2U3OGQ0YzA2NDJmLzEvMnk3Q0ttYTFza21HT1ZfdTFfdGJrT0tNbS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZmJjYmYtMzU4ZS00OTI4LTlhODQtY2U3OGQ0YzA2NDJm
LzEvMnk3Q0ttYTFza21HT1ZfdTFfdGJrT0tNbS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9yLLNb5
AsAiKH8CwsNB6+jglSS+qC7ZJyX1ERsxKzWD/Vzu7O04ky43PafZD3O+QfGjkedy
PU3tH5Z2Oa61MCD38KzplvhTwa7SLNHFCQWDm7o+IZIMLYq6rKLdQS5/Opb/l5Vx
TtKoeDZpCjycPscAEv2VMwWk7KSx1VEowpQ5AoSMV71aTy1vtkwUmm78k4SP4viN
SeHB/eH7I0MkXYkA0ZKh3VpsxuNoQXpUJNw0LgK4sGN1Hp+AzQCblOsx/qepPERJ
9fDUkyZsoSWmSyTurKCD1zsiaDR0ELYHmeJOgqM+Ow8esUtrq4PJnDZrZR64k/HD
OR2iZh9xUXNFJw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:17:59 2026 by rpki-client