Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File:                     2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier:          aruEqNPZZLMyfPSWF7e1sEkDo1UnAbopITXHyTFSdgw=
Subject key identifier:   2C:E3:AD:9F:D1:07:A2:9D:11:16:56:15:AE:B3:74:0F:17:77:43:27
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer:       /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial:       019E1D908C467686D380E1C7B872C0758890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number:          137E
Signing time:             Tue 12 May 2026 19:01:12 +0000
Manifest this update:     Tue 12 May 2026 19:01:12 +0000
Manifest next update:     Wed 13 May 2026 19:01:12 +0000
Files and hashes:         1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: CylEaRiUyiucbSOTC1qdZ0SAJ3U+48E6FT3NpqBMSo8=)
                          2: ah_59veV9YghWbpFZMyNLGkp8ws.roa (hash: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:8c:46:76:86:d3:80:e1:c7:b8:72:c0:75:88:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
        Validity
            Not Before: May 12 19:01:12 2026 GMT
            Not After : May 13 19:01:12 2026 GMT
        Subject: CN=2ce3ad9fd107a29d11165615aeb3740f17774327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6d:92:a3:4a:45:d6:a4:0a:37:8c:eb:95:c1:
                    b7:63:60:1b:3d:4e:cf:b1:16:af:55:a4:7b:23:35:
                    06:d4:f5:1a:bc:11:43:38:a1:59:14:f3:fd:5a:2b:
                    26:f0:f0:5a:ed:cb:0e:fb:8a:09:6e:ad:aa:08:9b:
                    71:c3:e1:04:ee:03:3d:67:66:d0:ec:f6:f7:d8:6c:
                    0b:91:6b:93:80:74:6c:0e:ff:d3:f5:ea:fe:d7:9f:
                    7f:db:13:89:60:9e:bf:d2:f0:fe:ac:b0:54:84:e4:
                    57:71:6f:cc:d1:8f:3c:11:3a:00:84:c7:f1:c0:d0:
                    c6:68:17:4c:31:56:58:39:02:89:80:f3:43:6a:73:
                    cb:7a:c6:e3:a6:37:ca:d7:98:6e:d2:b6:eb:26:0f:
                    c6:18:65:c4:75:55:59:f3:dc:5b:68:ec:8c:1a:93:
                    a3:31:a5:7e:11:60:8e:96:99:16:02:84:36:84:05:
                    73:41:37:3a:62:9b:b3:d7:dd:52:1d:17:0c:71:be:
                    85:c5:e3:e4:e9:11:32:52:d0:53:1d:85:5e:4e:00:
                    c9:1b:e2:76:b2:8a:71:7d:4f:24:eb:d2:3f:50:bb:
                    e1:83:2c:2e:15:88:59:19:53:9f:fe:80:a1:bc:bb:
                    54:9d:15:38:5e:09:45:a6:37:bd:e3:6e:86:e6:87:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E3:AD:9F:D1:07:A2:9D:11:16:56:15:AE:B3:74:0F:17:77:43:27
            X509v3 Authority Key Identifier:
                keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:ae:18:f4:a5:29:a6:79:f1:41:ce:48:c7:66:19:c5:58:
         30:c5:18:33:10:b0:05:fa:99:4c:28:5f:97:83:20:22:c0:bb:
         47:2a:a6:18:5a:0a:75:15:f0:0b:6e:c6:da:c8:de:5d:27:38:
         5d:11:d4:c5:b3:ed:6d:f0:bc:6d:55:0a:3d:92:54:8a:eb:3c:
         b3:a5:09:bb:db:3f:73:32:73:9b:9e:ca:45:ee:ae:90:cc:6f:
         74:6e:65:ed:28:bb:da:ec:16:c6:31:0d:e6:e6:d0:b6:3d:74:
         47:af:e6:ef:77:b7:16:85:26:1f:ff:b2:c3:43:05:48:cc:83:
         f6:79:2f:60:b4:ae:33:44:65:e4:90:85:89:ec:dd:a1:d8:99:
         90:52:03:88:c3:9c:a2:87:1c:ef:0c:a3:9d:ba:fd:73:3a:29:
         38:b8:b9:21:21:cb:11:1c:db:85:0e:07:5d:6d:0b:04:c6:81:
         44:b4:70:df:a7:8b:aa:28:6e:af:6f:65:c0:6c:f5:fd:88:d4:
         d6:22:9b:fa:f5:b2:46:09:d3:92:a1:09:39:52:a4:c3:e5:39:
         16:46:2f:aa:45:05:c9:e2:63:8a:42:f9:8f:b8:d3:bf:b0:b2:
         48:88:6a:fa:b7:2c:74:11:d8:b9:ff:6b:fb:9c:08:e9:c4:41:
         04:88:04:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkIxGdobTgOHHuHLAdYiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWJlZjVhMWEzMWVmNWNmYzAzNmI5YzJiNzBhNDJhYmQw
NDAwN2UwHhcNMjYwNTEyMTkwMTEyWhcNMjYwNTEzMTkwMTEyWjAzMTEwLwYDVQQD
EygyY2UzYWQ5ZmQxMDdhMjlkMTExNjU2MTVhZWIzNzQwZjE3Nzc0MzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W2So0pF1qQKN4zrlcG3Y2AbPU7P
sRavVaR7IzUG1PUavBFDOKFZFPP9Wism8PBa7csO+4oJbq2qCJtxw+EE7gM9Z2bQ
7Pb32GwLkWuTgHRsDv/T9er+159/2xOJYJ6/0vD+rLBUhORXcW/M0Y88EToAhMfx
wNDGaBdMMVZYOQKJgPNDanPLesbjpjfK15hu0rbrJg/GGGXEdVVZ89xbaOyMGpOj
MaV+EWCOlpkWAoQ2hAVzQTc6Ypuz191SHRcMcb6FxePk6REyUtBTHYVeTgDJG+J2
sopxfU8k69I/ULvhgywuFYhZGVOf/oChvLtUnRU4XglFpje9426G5oeEawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzjrZ/RB6KdERZWFa6zdA8Xd0MnMB8GA1UdIwQY
MBaAFNgb71oaMe9c/ANrnCtwpCq9BAB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQt
OWNlZWJhOGJhMjRjLzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQtOWNlZWJhOGJhMjRj
LzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyyuGPSl
KaZ58UHOSMdmGcVYMMUYMxCwBfqZTChfl4MgIsC7RyqmGFoKdRXwC27G2sjeXSc4
XRHUxbPtbfC8bVUKPZJUius8s6UJu9s/czJzm57KRe6ukMxvdG5l7Si72uwWxjEN
5ubQtj10R6/m73e3FoUmH/+yw0MFSMyD9nkvYLSuM0Rl5JCFiezdodiZkFIDiMOc
oocc7wyjnbr9czopOLi5ISHLERzbhQ4HXW0LBMaBRLRw36eLqihur29lwGz1/YjU
1iKb+vWyRgnTkqEJOVKkw+U5FkYvqkUFyeJjikL5j7jTv7CySIhq+rcsdBHYuf9r
+5wI6cRBBIgEEw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:42:50 2026 by rpki-client