Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File:                     2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier:          8rfes0FQ1Jfexrd44wTxdfIhqA4CS1d7/BZTghBekQs=
Subject key identifier:   A7:0A:0E:3E:15:5F:FA:1F:0F:0C:58:50:84:6D:05:53:7B:87:D0:D4
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer:       /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial:       019E1D909A9C17804AFC11B2DB7575F75FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number:          032F
Signing time:             Tue 12 May 2026 19:01:16 +0000
Manifest this update:     Tue 12 May 2026 19:01:16 +0000
Manifest next update:     Wed 13 May 2026 19:01:16 +0000
Files and hashes:         1: 1-B-W1CSDI6bR5xOD8iHSBu7x7tI.roa (hash: CfjF3SZAdjPqJOrdB0hBuqX8UJ9deq/HcLszHmoUDcg=)
                          2: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: DyuawatzH5dG3TFdIRFSp6eTvE/U273WzCZT5NQmIQk=)
                          3: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (hash: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4=)
                          4: 6DOrz3928TU7wZXRvfoe5TIHe2A.roa (hash: dkoX6rsv82LKW6X0aXjN4hG4E9xoboCySwytbCJljwU=)
                          5: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (hash: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:9a:9c:17:80:4a:fc:11:b2:db:75:75:f7:5f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
        Validity
            Not Before: May 12 19:01:16 2026 GMT
            Not After : May 13 19:01:16 2026 GMT
        Subject: CN=a70a0e3e155ffa1f0f0c5850846d05537b87d0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:31:41:b6:0d:56:b4:88:3c:13:8f:6d:9a:
                    b6:8e:81:9e:35:c5:e2:f2:9e:3c:8c:64:bc:6f:c5:
                    38:fd:28:20:04:2d:3d:76:9f:77:40:11:eb:19:7c:
                    dd:78:74:1d:18:ad:b3:49:35:43:9a:91:49:49:bb:
                    b0:24:fc:7f:af:5f:a6:25:66:d9:d8:01:51:5c:af:
                    5d:5a:c6:72:7c:56:31:31:56:b0:5f:dc:25:af:c5:
                    66:e2:b1:25:56:0b:83:83:1f:2e:c2:a6:fd:7b:77:
                    6f:c2:6a:66:2b:bc:7a:9b:0f:e6:6e:8e:c3:ee:cb:
                    88:ab:7d:da:63:46:e2:43:c3:8a:56:ea:79:66:07:
                    bb:75:0d:7c:2e:3b:1c:b7:25:c6:7f:4c:79:7a:9d:
                    f2:2f:94:03:09:7f:70:a5:bf:62:64:12:e3:7c:46:
                    c8:11:7a:1c:fa:34:83:2e:df:a2:e9:bc:6d:d6:4c:
                    82:a5:d1:bf:cd:a7:f9:2e:91:7d:f2:3b:85:ac:1f:
                    b4:44:a8:7f:53:ec:6b:60:78:d6:46:dd:f3:df:c5:
                    2d:5b:0c:06:53:6c:2a:ab:55:e8:99:78:17:98:9a:
                    9e:ab:db:77:5c:2d:c7:f2:ff:a4:95:c0:cc:aa:0a:
                    6b:f3:ce:16:0a:55:29:b2:ab:0e:19:5b:f5:ee:6b:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0A:0E:3E:15:5F:FA:1F:0F:0C:58:50:84:6D:05:53:7B:87:D0:D4
            X509v3 Authority Key Identifier:
                keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:92:6b:d7:6e:0c:b0:11:b9:f2:91:64:80:25:bc:71:5d:
         73:6b:16:b0:e5:22:09:c2:e4:dc:3c:f6:da:52:49:5f:0e:32:
         e0:75:22:e6:e9:a9:41:96:65:ee:b2:bc:c1:df:37:8a:73:ed:
         a4:ed:94:71:52:10:29:6f:88:51:06:e3:4f:90:cf:88:e6:eb:
         2b:99:8c:e9:7e:3b:f8:2a:6f:f3:24:bb:f9:6f:e9:ec:3b:d6:
         95:ac:da:4b:79:0c:af:0c:2b:13:00:bc:72:55:80:f4:9f:8e:
         1b:1c:ae:98:e8:f1:52:a9:9f:78:8b:73:71:62:5a:e7:53:3b:
         09:19:d6:9d:58:20:f2:38:20:03:79:dd:01:73:15:56:74:5a:
         81:37:ee:dd:ed:95:49:aa:e5:c6:3f:ae:42:e6:a5:fb:27:bf:
         29:e6:86:02:a1:c2:45:84:dd:3d:bc:10:f9:de:94:bf:59:1d:
         d7:75:6d:26:2a:f2:4e:0b:a8:60:0c:dd:24:38:d6:04:aa:8b:
         4c:5e:d4:82:79:a9:70:4e:04:d7:9c:25:bd:93:cf:fc:ce:38:
         98:4a:32:d0:3b:13:4e:84:72:cc:5d:5f:86:b3:7e:e2:86:75:
         8d:b1:e5:c8:e7:a5:8d:77:6e:9e:81:87:0b:2b:71:a0:9b:94:
         79:e3:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:26 2026 by rpki-client