Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
File:                     2EQvLC-I2fbrLZxd82gL4h7nybM.mft (raw, json)
Hash identifier:          eekPGMrDk1+OmwdyrhsrWuIZ4fg5YYUivIgrQ8RFFso=
Subject key identifier:   53:08:FF:89:18:B0:F6:EE:CD:EF:F1:BD:EF:F8:39:26:07:B6:F9:C2
Authority key identifier: D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3
Certificate issuer:       /CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
Certificate serial:       019E1D90A4CD24D09122ADA6713A12EEDE4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
Manifest number:          02DC
Signing time:             Tue 12 May 2026 19:01:19 +0000
Manifest this update:     Tue 12 May 2026 19:01:19 +0000
Manifest next update:     Wed 13 May 2026 19:01:19 +0000
Files and hashes:         1: 2EQvLC-I2fbrLZxd82gL4h7nybM.crl (hash: z9twLvV6p23XYyEZ5sJIgAwSD4gPTtsHIe4lZMY5jlA=)
                          2: 3ZW0arWIwTpuNGlXoMjkr_FrHoE.roa (hash: t4uGj4/wTSstzpMGs7YKMuCqSdG4+YDmS+F49g2Xx/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:a4:cd:24:d0:91:22:ad:a6:71:3a:12:ee:de:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3
        Validity
            Not Before: May 12 19:01:19 2026 GMT
            Not After : May 13 19:01:19 2026 GMT
        Subject: CN=5308ff8918b0f6eecdeff1bdeff8392607b6f9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:fe:79:d0:5c:98:ed:17:f2:29:f7:35:04:
                    f6:c5:1f:5e:10:02:bb:ff:bd:d6:05:b8:eb:2d:a3:
                    dc:81:e5:c9:ee:3a:5b:7e:5f:c5:2e:39:fd:e8:10:
                    e3:fc:1f:11:2b:7b:73:a7:76:1e:64:d1:b0:5d:0a:
                    b7:e7:61:3f:d6:5e:02:57:df:37:1e:9f:21:46:9a:
                    13:d6:04:ae:db:3c:8b:d0:8a:20:ed:89:2a:30:02:
                    e7:0c:e0:f6:b7:9d:7f:62:05:94:c1:f2:82:b9:e4:
                    c1:f4:9b:d1:d4:db:d5:ed:8b:1a:c1:b3:84:e5:16:
                    b1:b8:04:28:ab:ab:37:12:0b:fc:60:b1:a3:49:da:
                    0c:86:ea:fb:ab:8f:50:ed:7f:42:76:56:89:2b:bc:
                    a6:cc:2e:49:60:aa:48:27:cf:f6:6b:04:4c:e6:f1:
                    05:25:1d:cb:5f:70:a6:23:f2:32:0c:d9:b4:1b:58:
                    ab:99:92:74:e1:a7:72:8b:b2:a6:91:70:90:4b:3a:
                    93:aa:9d:58:b0:79:e6:ec:8a:d2:cc:40:b4:f8:7f:
                    4c:f7:21:78:2c:1a:c7:4e:f5:bf:fe:ac:a1:d4:82:
                    82:ba:b8:4d:ed:53:a6:4a:36:bc:7e:b4:51:3c:c3:
                    b0:a2:31:5f:07:a2:f9:be:fc:32:d9:f5:bc:53:ce:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:08:FF:89:18:B0:F6:EE:CD:EF:F1:BD:EF:F8:39:26:07:B6:F9:C2
            X509v3 Authority Key Identifier:
                keyid:D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:30:4d:54:1e:ec:6e:b1:37:31:0e:e9:80:d3:8d:69:8c:
         0b:dd:1d:2d:8a:9b:12:e1:8b:34:16:4c:7b:52:3e:c9:49:8b:
         9c:cb:76:11:f3:e8:ee:b9:f7:b8:02:e7:62:c4:08:27:d7:d2:
         63:f2:d7:54:a1:55:22:e4:90:04:32:0c:0c:06:a8:46:8a:0e:
         c8:b4:08:4e:60:41:3c:52:d7:89:f6:ba:98:b1:e5:56:74:9c:
         e3:91:aa:7e:70:00:1d:88:6f:57:42:a1:22:ba:a8:cf:ec:c6:
         c1:f4:10:72:fc:38:20:98:f6:cb:bb:88:53:ae:8f:8f:d2:e7:
         ba:d2:7b:7d:22:1b:ae:55:87:33:55:d4:9c:dd:e7:2b:99:ae:
         d6:1e:43:0f:44:bc:e5:ef:f6:b5:95:47:f6:98:78:31:e7:4c:
         7e:14:fe:94:04:2d:43:1e:41:fd:0d:d7:28:50:7f:40:fd:dc:
         9e:5f:4f:f0:de:93:7c:bb:60:47:a0:d9:2b:1e:76:e0:5c:8a:
         d8:b5:96:70:39:ed:5f:b0:b5:cf:57:46:35:0a:2b:39:5e:2a:
         62:62:02:77:98:09:02:eb:cc:05:ab:91:fa:56:82:5b:aa:27:
         79:59:4e:41:46:b3:30:7b:e8:a9:7f:3a:01:06:db:e2:e5:7d:
         54:63:25:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:59 2026 by rpki-client