Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File:                     2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier:          3UcgrLuJJweUE2+ip5cYwFY861yC0B2ho00N21I/AJs=
Subject key identifier:   19:F5:CC:1B:C2:C3:04:06:4F:1A:62:E7:EE:31:7F:09:BB:D0:6A:06
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer:       /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial:       019F189E88B27BD247D90D20511F13B67326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 13:01:10 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:10 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:10 +0000
Files and hashes:         1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: Hs27HNzU4AE57s255kkm2inE5RrtQYxzn4G+jqAtKmk=)
                          2: shhYy56z_L8Lryb0eSAWTWJjZg0.roa (hash: wq6nVcRoqKZdcrByoBy3Jll3ZeZn4RTjcVn3BWiF//I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:88:b2:7b:d2:47:d9:0d:20:51:1f:13:b6:73:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
        Validity
            Not Before: Jun 30 13:01:10 2026 GMT
            Not After : Jul  1 13:01:10 2026 GMT
        Subject: CN=19f5cc1bc2c304064f1a62e7ee317f09bbd06a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:91:82:f0:81:38:2e:5e:69:6b:82:5d:33:
                    ce:e2:3a:ea:e9:a2:44:b1:8c:db:12:10:3d:93:40:
                    7f:89:57:cc:27:d8:aa:33:37:13:ed:50:89:ab:7e:
                    e8:11:06:e0:67:d2:31:7e:df:99:0d:18:2a:8b:7e:
                    46:9d:62:89:6e:c3:bd:e0:62:4b:c7:8b:6e:31:a4:
                    21:30:f9:28:5f:75:3c:69:d0:0b:a3:b5:cd:75:bc:
                    9d:77:eb:3b:2d:d4:db:b7:d6:ea:fa:36:8c:26:56:
                    6e:69:5f:69:ed:03:85:fe:f5:0f:41:0f:b8:a0:19:
                    af:a4:e2:a8:d8:7b:bb:8d:c5:1b:e6:d1:fa:1e:99:
                    f7:4f:3b:63:8c:01:70:f3:28:0c:16:18:9e:e0:ac:
                    d6:cf:d2:9d:a8:fe:98:0a:09:24:70:7f:88:23:a3:
                    fb:d2:17:d9:c3:cd:9a:36:2c:b7:25:76:c8:5c:7b:
                    89:63:ec:cf:c6:35:e6:ae:9d:d4:c7:33:3e:76:22:
                    90:a9:e8:15:10:08:2a:2a:96:2d:e3:e8:8a:af:cf:
                    ce:dc:98:1c:c8:86:be:fa:f0:41:fa:7d:e4:70:f0:
                    01:6f:a7:01:58:53:91:20:af:c9:43:d4:b8:ad:83:
                    f7:96:e4:20:26:94:c9:03:02:62:56:3f:2b:06:8a:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F5:CC:1B:C2:C3:04:06:4F:1A:62:E7:EE:31:7F:09:BB:D0:6A:06
            X509v3 Authority Key Identifier:
                keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:18:07:c1:51:31:c5:ab:0f:16:29:79:8d:53:7d:84:44:fa:
         c0:4f:52:9b:24:ec:ac:7e:e3:57:74:f8:ce:b4:92:07:49:65:
         c9:62:3e:9e:48:25:d3:41:be:28:18:d0:95:61:74:7a:e2:96:
         0a:9e:d3:cb:63:58:92:01:ba:63:aa:30:ac:fa:0b:d9:e0:24:
         45:59:d9:6b:a0:e5:cd:6c:75:ce:1e:33:e5:94:e3:62:7e:e0:
         45:48:c2:36:43:52:e0:35:e1:23:10:d0:ff:37:5b:ac:0e:47:
         eb:f4:cc:7b:9e:cc:57:69:e8:5f:1d:2d:99:49:a1:97:7f:88:
         b0:a4:94:b9:ae:dd:ab:d8:21:cd:3a:3a:6d:12:69:26:0d:6b:
         d6:db:5c:3e:90:9c:0f:97:e7:c1:0e:8f:c3:76:b2:e8:c4:0a:
         ff:87:45:7b:85:87:57:d7:88:1b:32:1d:c6:cf:ac:5d:35:17:
         08:58:3f:9f:36:e0:20:bc:a3:87:b8:e9:53:8e:e9:7d:51:67:
         e8:2c:22:82:01:b9:44:8a:a3:66:c7:4e:b0:54:bc:1c:91:4a:
         05:ed:21:38:f4:c3:49:85:2d:df:62:1e:59:38:33:f4:70:05:
         f5:93:83:36:0c:87:81:e5:44:73:00:52:6b:f3:44:7f:95:aa:
         d4:ed:22:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:58 2026 by rpki-client