Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File:                     2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier:          b6mOZmVOq3U8m8kO4FOQXIIeNWlor8CqjOgpwQkZLDA=
Subject key identifier:   B6:66:82:79:71:1A:22:EC:B6:7F:85:C6:1F:90:2F:9E:68:D7:60:35
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer:       /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial:       019E2F9736AA9E242A02B554F1BBDB7DC9B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number:          16E4
Signing time:             Sat 16 May 2026 07:01:39 +0000
Manifest this update:     Sat 16 May 2026 07:01:39 +0000
Manifest next update:     Sun 17 May 2026 07:01:39 +0000
Files and hashes:         1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: GGjX7Gpbqul+OOmZechmm15HKINhLPcVNVXEiW2f2OI=)
                          2: jdHMVRkeTn1Nth9vlUo9BvR2wng.roa (hash: AAK6SfAISoxobwueyJaaBYkoMj4IspGZGMaQBhwb7VE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:36:aa:9e:24:2a:02:b5:54:f1:bb:db:7d:c9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
        Validity
            Not Before: May 16 07:01:39 2026 GMT
            Not After : May 17 07:01:39 2026 GMT
        Subject: CN=b6668279711a22ecb67f85c61f902f9e68d76035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:70:c9:8c:b2:39:00:05:f3:fa:24:ad:24:
                    f9:ef:bf:5d:f9:19:b3:6d:53:87:ca:cf:37:79:a5:
                    88:3c:47:78:4c:f5:3b:21:61:35:79:0e:46:1c:a5:
                    86:1c:71:0e:98:09:12:b1:6b:70:97:41:66:cd:7f:
                    65:06:24:f8:c7:58:e6:4c:b7:bd:ea:01:c7:4b:a7:
                    76:68:87:29:8a:f5:82:ed:e2:db:62:bf:1e:49:f5:
                    a0:e7:85:bf:b2:f8:d3:03:e7:7a:f6:d0:3b:76:2e:
                    93:2b:64:22:c3:93:d6:ea:2a:b4:17:5f:76:74:99:
                    6d:51:48:fb:5e:fe:7d:69:12:3a:61:9b:6e:dd:31:
                    33:03:6a:00:9b:20:70:70:64:f5:0f:bf:a9:fe:8f:
                    d8:d3:cc:54:02:f4:43:9a:11:53:2c:24:31:27:f0:
                    bc:76:8b:11:c6:94:cc:87:07:ca:4d:ac:1b:51:50:
                    fe:a4:e9:fd:83:7d:d4:87:2e:22:2d:58:4f:22:49:
                    16:42:ec:be:13:d2:fc:ec:da:c7:32:8a:5e:1f:46:
                    80:05:b3:ad:33:e8:bd:39:41:81:a6:b6:2b:cd:90:
                    5c:41:62:e3:01:49:8d:1c:af:89:83:d3:95:46:8e:
                    6b:90:d3:38:d4:88:bf:89:43:9b:d0:c9:d1:6c:57:
                    6b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:66:82:79:71:1A:22:EC:B6:7F:85:C6:1F:90:2F:9E:68:D7:60:35
            X509v3 Authority Key Identifier:
                keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e1:33:63:19:e3:a0:8f:24:62:bd:4d:d1:6e:15:7b:70:36:
         d4:37:d1:7f:df:ab:4e:28:4e:ee:a1:ff:b3:0e:f4:38:0e:3f:
         06:9e:40:be:2a:08:f7:22:2b:a6:1a:2f:19:16:f4:bd:28:a2:
         14:02:6d:b7:3c:cb:30:9a:5a:1b:56:15:6e:7e:68:85:1a:31:
         fa:25:60:7a:fd:8b:c6:9a:59:e0:11:65:47:a5:4f:57:d3:bb:
         22:82:0f:48:bf:9c:21:a1:e2:6c:eb:4d:d5:dd:9d:e2:c3:e7:
         9d:8f:33:c5:51:71:3d:54:4b:20:a1:e2:89:3f:84:fd:7e:aa:
         40:a5:fb:72:ea:08:19:d1:8d:ee:84:fc:a1:25:cc:2e:86:6f:
         6f:4c:5b:4d:38:3e:4a:01:94:d2:c6:2c:c1:51:58:72:77:b5:
         e3:9c:ed:41:6b:95:3c:9a:46:e1:17:e6:99:d8:ff:3f:0f:79:
         28:32:44:80:17:20:2a:40:9c:32:20:65:e8:73:5e:32:65:75:
         d3:8e:59:d0:0a:ac:d7:e4:34:c8:25:7e:77:cf:bc:9d:30:fe:
         4c:5f:53:d8:37:c0:a8:d7:a3:c1:d4:1b:de:68:a6:f6:51:01:
         3a:fc:c3:87:f4:ae:fc:df:aa:87:f5:44:c9:50:ee:ed:59:c7:
         7b:80:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:15 2026 by rpki-client