Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File:                     2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier:          FuWS1sab8HOWRzurCE7ADl2MOzXEdkLlZuN/2iyF6a4=
Subject key identifier:   91:09:99:5E:F3:E8:BF:AF:C3:1F:63:EC:BC:78:29:58:C0:01:22:A7
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer:       /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial:       019F17C322E81962718917716BABE9FF9657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 09:01:32 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:32 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:32 +0000
Files and hashes:         1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: NKeC1f3TrqlWv21+g9pDclr33lFircAX4jJ9oywW/OA=)
                          2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:22:e8:19:62:71:89:17:71:6b:ab:e9:ff:96:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
        Validity
            Not Before: Jun 30 09:01:32 2026 GMT
            Not After : Jul  1 09:01:32 2026 GMT
        Subject: CN=9109995ef3e8bfafc31f63ecbc782958c00122a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:46:c0:b2:93:5b:cd:71:44:b6:5b:db:36:
                    85:d0:f0:fc:84:f6:b4:b8:53:f5:1c:85:6e:19:b1:
                    83:d6:fa:2f:94:d3:cf:55:88:a9:91:26:89:5a:81:
                    45:17:73:29:d6:da:c0:e3:98:29:6c:be:53:66:58:
                    b2:3f:40:9d:8c:d5:ee:b2:3b:65:1c:3b:bc:82:7c:
                    84:e6:bc:62:2b:78:b5:68:05:26:db:aa:82:b7:a0:
                    61:86:fa:a8:61:0a:68:ae:8a:c1:41:8d:62:16:51:
                    57:f3:3f:40:49:19:68:13:61:8c:52:0e:e9:9e:93:
                    57:99:fa:f1:05:85:a0:2f:49:70:ea:a0:24:21:55:
                    b2:d7:3f:42:0b:50:ee:70:9d:2a:3c:d0:04:9b:21:
                    e8:f3:e1:7f:11:a6:9e:33:90:13:fa:28:80:ad:40:
                    08:92:09:9f:a0:e2:d7:05:72:34:c6:4b:bb:8c:88:
                    ae:74:29:ca:4b:14:6b:48:01:cb:9f:ac:f1:dd:f6:
                    b1:9e:d3:9e:8e:c8:89:48:8b:6d:44:a0:af:05:68:
                    ef:57:3d:5c:7a:93:9b:f0:3a:fd:de:ed:31:c8:2d:
                    63:10:f7:54:1a:97:2c:74:fd:76:ca:be:37:70:4e:
                    11:87:fa:9d:b8:95:04:63:82:70:8e:15:0a:6a:b7:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:09:99:5E:F3:E8:BF:AF:C3:1F:63:EC:BC:78:29:58:C0:01:22:A7
            X509v3 Authority Key Identifier:
                keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d4:c4:df:49:4e:af:d6:55:3e:ec:d0:25:ed:8c:f9:b9:b0:
         26:33:29:5c:6d:ea:db:89:64:37:35:95:f2:ba:6c:de:2e:8b:
         8c:59:e1:e5:33:78:3d:e5:d4:cb:09:0e:35:43:43:9c:e0:30:
         a9:75:6a:aa:de:02:c0:dc:95:1c:aa:a6:ef:b2:84:f0:d9:1a:
         0f:76:e8:ee:e1:32:1b:0b:8d:66:d9:5f:6b:39:f1:4f:55:36:
         8d:99:c4:ea:3b:f2:6f:df:c8:0d:60:1f:95:cc:4c:eb:19:3e:
         17:b4:0c:00:ad:53:06:69:fa:b3:91:38:64:19:af:1f:92:f6:
         00:85:c4:ee:7c:04:b1:5d:45:08:4c:52:c7:62:8e:36:c9:4c:
         48:44:1b:a7:15:09:d3:b1:3c:79:bd:3e:df:35:f9:5f:27:81:
         37:45:98:3d:d3:d3:e9:f3:82:d3:43:70:c7:c0:4a:22:b3:f1:
         50:20:f8:13:de:ec:6d:05:62:04:39:2b:68:7f:72:05:68:60:
         ce:bd:e2:10:29:a9:72:99:11:40:5e:85:c8:c3:46:7a:db:40:
         75:20:cc:1a:fe:84:52:92:f9:6e:57:3e:dd:18:76:aa:c3:44:
         4c:cf:2d:0f:52:12:e6:29:8f:79:0f:29:e3:a0:83:97:28:03:
         e9:45:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:04 2026 by rpki-client