Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File:                     2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier:          yGw3YS1Log/QUFScNvZsjz1GP+7DveR1n1EGEtRYFK4=
Subject key identifier:   84:31:02:61:FA:BC:E9:D8:8B:98:AA:3E:E0:05:87:90:D3:CD:C5:6A
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer:       /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial:       019E1E6C580D1F64C4049DB43F90F3EAFFF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number:          1898
Signing time:             Tue 12 May 2026 23:01:17 +0000
Manifest this update:     Tue 12 May 2026 23:01:17 +0000
Manifest next update:     Wed 13 May 2026 23:01:17 +0000
Files and hashes:         1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: Rb7hW163M+PE2yFKUXYiFhT4f2xpuVF4C8izVNjNObg=)
                          2: uxKv6641R5iqpQTk8Wx5aU2aw_o.roa (hash: ehfYkC8w65AmE0jTfN/MiOIrUkpfLNeew7qileDdLUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:58:0d:1f:64:c4:04:9d:b4:3f:90:f3:ea:ff:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
        Validity
            Not Before: May 12 23:01:17 2026 GMT
            Not After : May 13 23:01:17 2026 GMT
        Subject: CN=84310261fabce9d88b98aa3ee0058790d3cdc56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:cf:a2:6b:3d:d7:18:9a:dc:8a:b6:bd:fb:
                    ce:09:b3:d7:74:34:24:bb:1b:6b:39:1e:a3:1b:fd:
                    71:96:10:88:a9:6c:17:69:cb:c1:8a:dd:5f:e6:5c:
                    ab:6d:73:74:8b:4f:07:b3:1b:3d:1b:24:72:e0:ac:
                    f7:25:53:a1:d7:7d:ad:d5:f8:48:cb:09:15:d6:13:
                    57:15:f4:cd:82:fb:9b:e4:68:12:f5:58:6c:73:6f:
                    6d:44:c8:02:64:bc:3f:31:f6:81:f3:54:e7:54:77:
                    ff:c5:dc:2e:81:c5:4e:ea:61:f6:41:17:b8:6f:b6:
                    ab:01:d6:74:ae:7d:38:02:92:dd:b0:e5:f2:75:0f:
                    59:35:fa:de:23:e2:64:13:b7:ac:b1:2d:68:64:03:
                    39:ba:04:bc:2d:ff:02:d5:47:ca:71:0d:4d:01:1d:
                    48:c5:5f:90:f7:d6:59:74:de:99:26:f2:ef:4a:fc:
                    47:7d:1f:b5:99:3d:8c:ab:26:21:25:ef:5a:af:25:
                    2a:86:8b:40:cb:e6:6c:b1:d7:8d:b9:69:c7:e2:cf:
                    23:75:cf:35:c7:19:a6:cd:dc:11:7e:a7:de:a1:0b:
                    39:74:d2:33:8e:3c:24:b3:57:3a:4f:a5:98:a6:3e:
                    c2:98:4d:0d:bc:3d:8b:ac:d4:0a:b6:f6:d0:da:af:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:31:02:61:FA:BC:E9:D8:8B:98:AA:3E:E0:05:87:90:D3:CD:C5:6A
            X509v3 Authority Key Identifier:
                keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:2d:41:f0:46:13:23:8e:9c:88:2f:c0:8c:80:35:59:6c:60:
         8b:e7:61:84:52:d1:9c:ff:56:47:e4:94:42:18:45:fc:15:aa:
         e6:e3:66:b4:7e:bf:d0:dc:ea:fd:26:64:b5:0e:08:f5:5c:18:
         9c:4f:ba:44:48:65:44:6e:38:59:ab:e8:b9:fd:7a:45:d6:60:
         b7:73:08:d5:cf:11:ae:00:7c:6c:b8:b8:e5:84:dd:47:73:e2:
         c3:cd:7f:3f:2a:ac:60:f1:f0:17:62:bb:4c:2a:92:31:b8:a6:
         1e:0a:e3:81:c4:8c:48:c6:c4:aa:da:1b:17:55:8d:69:c3:0c:
         c7:32:91:59:cc:01:5a:f5:12:b0:bc:e3:bf:25:34:10:bf:1c:
         3b:eb:0b:1c:cc:19:4c:92:07:8a:a5:2c:5d:06:b6:d9:12:2e:
         51:b9:0a:3a:a4:79:cc:29:90:ac:d9:93:b8:bb:15:00:8e:d0:
         9a:97:7f:2d:8a:6f:3b:1a:fa:39:bd:7c:ad:34:2e:95:a8:bf:
         2d:bc:8b:c2:85:67:da:fd:26:fa:d9:05:83:eb:a7:92:44:59:
         fa:87:8a:57:d3:08:25:ff:dd:f6:05:fa:9d:0a:b4:c8:f2:1a:
         00:98:2a:cc:20:95:ae:01:3f:21:36:d8:7b:b9:fc:fd:88:41:
         c5:78:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:31:26 2026 by rpki-client