Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File:                     2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier:          tyypcsnPwFQZHMe6wXnefGGs/+NXx/1Hq+AtHoY7zeM=
Subject key identifier:   6A:41:51:45:E4:8D:25:9D:03:09:B7:64:58:AA:D2:19:FE:EA:C8:05
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer:       /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial:       019E2F96867DA06775879C560269F6E74C2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number:          0A1F
Signing time:             Sat 16 May 2026 07:00:54 +0000
Manifest this update:     Sat 16 May 2026 07:00:54 +0000
Manifest next update:     Sun 17 May 2026 07:00:54 +0000
Files and hashes:         1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: MCM8z+xqWiDxrqjThoDA+WMSiwCNm10c/cGUUJxuvOw=)
                          2: H2tuVkWgjp6XpzlorJ0CMh9rzOQ.roa (hash: has59eIOKa6q3uHYWVg7mO28StrkkiAgF2EF9c4ggME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:86:7d:a0:67:75:87:9c:56:02:69:f6:e7:4c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
        Validity
            Not Before: May 16 07:00:54 2026 GMT
            Not After : May 17 07:00:54 2026 GMT
        Subject: CN=6a415145e48d259d0309b76458aad219feeac805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:be:bd:40:11:41:a9:bd:3f:79:b6:18:f2:
                    36:43:a9:14:1c:f3:13:3c:38:ad:01:fa:3b:ee:f4:
                    cd:c6:c5:83:d7:26:2e:9e:58:f1:de:79:2a:24:4c:
                    4b:1f:f6:1c:ff:66:4f:bb:5e:fc:e7:0b:27:9e:4f:
                    26:a9:24:d8:64:be:0b:63:79:80:c7:8b:f8:a9:8e:
                    ad:20:4a:c4:93:5d:6f:90:6b:e2:fd:15:87:63:f3:
                    42:25:a9:35:11:b4:37:f0:71:c1:8c:69:06:e1:f4:
                    6e:10:d6:e6:ce:6d:18:7e:59:ae:73:0f:f9:d1:5d:
                    7d:d7:b4:60:4b:a4:1e:71:b7:d9:2a:2b:73:90:3b:
                    85:ca:c3:88:c3:8d:24:34:c0:7f:08:70:a8:3d:3b:
                    18:04:75:fe:4e:69:5b:e8:85:0b:20:d1:c9:fa:74:
                    25:00:3d:49:bc:61:44:0b:1f:54:a6:76:c4:56:ee:
                    af:66:30:ed:99:ff:24:32:cf:d5:bd:82:7e:a0:18:
                    fa:e5:d6:dd:5b:2b:75:50:ff:d1:f0:e0:7d:ef:b2:
                    bc:cc:6e:4d:48:9b:41:41:d3:63:5d:ae:36:dc:ff:
                    05:cf:95:35:29:29:bb:33:d3:e7:31:11:7a:fb:e4:
                    6f:45:f8:ff:80:29:43:1e:16:63:63:7a:c4:5d:df:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:41:51:45:E4:8D:25:9D:03:09:B7:64:58:AA:D2:19:FE:EA:C8:05
            X509v3 Authority Key Identifier:
                keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:43:22:5c:67:81:17:2b:6d:4f:94:3b:7b:15:1d:70:34:83:
         ae:70:fe:f2:94:7f:d0:75:71:fb:a9:9b:08:50:a8:65:63:14:
         d8:d3:27:c7:51:86:ed:39:70:4a:fc:07:e4:5f:a8:bd:03:f3:
         28:19:27:2f:40:b5:9c:c2:16:1e:ad:77:a9:c1:70:ac:a0:18:
         88:c6:b8:44:7f:c4:a0:b1:52:42:e0:23:98:5b:9a:94:aa:a4:
         40:4f:da:90:e2:aa:da:76:03:2c:78:54:e7:cb:9f:62:32:b0:
         46:a0:fb:28:fb:93:93:16:dd:b7:f0:56:08:0e:cb:71:51:41:
         3c:6f:11:8d:dd:f3:d8:71:7b:d6:d7:9c:7f:e1:f7:a1:54:67:
         8d:77:e9:9c:94:dd:3f:72:31:93:dd:99:18:19:39:0d:ad:a8:
         b5:f7:cc:8c:5b:a2:63:5b:11:bc:70:95:3a:2b:5b:a9:e9:4a:
         d9:35:08:85:84:94:29:f1:7e:28:b9:b4:14:e8:af:ee:b2:0a:
         ea:30:2b:f8:98:e2:c9:e9:20:1a:34:03:ff:c9:3b:99:09:9a:
         89:8e:fc:4f:ae:a6:29:b2:5a:94:60:9e:cd:d9:30:55:a5:b3:
         06:1b:39:08:98:18:2f:56:e6:46:99:35:e1:5b:73:61:b6:27:
         23:36:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:19 2026 by rpki-client