Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File:                     2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier:          CWIcwL1WsRfKoG/GPUczqxrGQIA5roQC9y2h7VOAHdo=
Subject key identifier:   0D:62:84:5F:2B:2D:03:74:6B:D9:57:BB:99:DD:FD:F5:1E:D6:15:C1
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer:       /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial:       019F1943071D2FBC0C3440D9C655E5C26825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 16:00:50 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:50 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:50 +0000
Files and hashes:         1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: LBn8joP3cm2/44daO17TKJO4xCGjWtdq1eNNe7bei1g=)
                          2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:07:1d:2f:bc:0c:34:40:d9:c6:55:e5:c2:68:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
        Validity
            Not Before: Jun 30 16:00:50 2026 GMT
            Not After : Jul  1 16:00:50 2026 GMT
        Subject: CN=0d62845f2b2d03746bd957bb99ddfdf51ed615c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:e4:ba:86:46:5c:1b:2a:fa:48:c2:d4:b7:
                    7a:42:bf:aa:a2:63:4c:09:7f:47:e5:8c:5c:e1:39:
                    5c:93:77:9c:93:fb:97:0d:94:e9:20:d2:37:da:83:
                    f1:45:dd:df:b7:03:39:de:c3:31:0e:5b:51:75:c9:
                    a6:ba:f9:d5:f6:48:31:6d:97:fb:c0:ac:e4:2b:75:
                    d3:ac:79:17:58:e3:f8:e9:34:ab:c2:76:e7:5a:65:
                    21:94:7d:00:aa:71:e5:e5:87:45:72:2a:86:84:5d:
                    ec:b5:fc:fa:d5:88:89:26:b3:df:34:4b:a7:f9:73:
                    40:57:7a:3a:3c:ea:56:a2:f7:dc:67:09:69:43:c8:
                    5c:2d:1b:b5:6f:e5:45:d2:1a:b4:3c:55:16:86:89:
                    bf:6f:52:5b:07:45:79:30:7f:c9:7b:67:9c:3f:ea:
                    49:b8:5b:2a:69:8a:b9:8e:e4:50:c4:5c:b7:74:66:
                    ab:de:b8:c2:38:24:06:04:98:d0:d5:97:5a:a8:a5:
                    de:ce:bb:81:f6:8b:fb:2f:57:8a:47:81:51:45:74:
                    21:2d:bc:2d:d6:a8:62:7e:16:fc:53:1c:26:e6:a1:
                    84:cd:72:f2:be:29:86:58:1a:f6:16:9b:e2:cf:a4:
                    b8:ea:8f:27:ed:84:aa:1f:a8:0d:d4:80:24:ac:00:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:62:84:5F:2B:2D:03:74:6B:D9:57:BB:99:DD:FD:F5:1E:D6:15:C1
            X509v3 Authority Key Identifier:
                keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:25:bf:e5:58:00:2f:33:50:9a:67:41:2f:30:00:44:9d:44:
         1d:a6:4b:cb:b7:44:90:6e:91:a6:35:37:60:30:be:dc:a8:cf:
         bc:6f:3e:cb:c1:0a:e4:b3:23:3e:53:e1:39:ba:ad:6a:bb:c9:
         10:24:ba:43:82:bb:59:24:2c:81:ba:8b:18:79:8c:92:62:52:
         38:e8:31:8f:e1:e6:86:ef:e5:51:6d:14:f8:c9:f1:75:e1:7a:
         b1:93:c2:61:81:5b:56:3f:c2:94:8d:99:07:9a:5f:3c:0c:2c:
         bf:aa:4e:84:81:6e:c0:9d:e5:09:8f:1d:78:cc:78:51:79:e8:
         3b:6e:58:9f:65:50:23:07:5c:aa:c8:63:66:a8:36:ee:e6:99:
         f4:b9:36:52:77:69:b6:c2:b8:7e:80:af:5b:11:5a:fd:a1:f9:
         5e:8e:ef:e0:21:fa:7b:41:45:04:0f:f6:b0:25:da:1a:86:32:
         ae:79:6e:52:09:5f:6c:a5:40:24:d2:45:f2:6a:db:ae:4f:7e:
         18:c4:5f:62:47:92:07:24:9f:ac:12:13:b9:38:dc:d9:30:79:
         9d:6e:44:27:d0:71:b6:1d:7c:77:b4:f0:65:b1:ff:bb:bf:bb:
         71:c7:4f:15:20:1c:5b:19:1d:ca:1a:1c:46:4f:3d:bd:45:60:
         a7:55:55:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQwcdL7wMNEDZxlXlwmglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjA5OWU3ZmYzYTE3MWJjZTNiNmZlOTllYmI0ZDI0Y2I4
NWU0NjEwHhcNMjYwNjMwMTYwMDUwWhcNMjYwNzAxMTYwMDUwWjAzMTEwLwYDVQQD
EygwZDYyODQ1ZjJiMmQwMzc0NmJkOTU3YmI5OWRkZmRmNTFlZDYxNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWHkuoZGXBsq+kjC1Ld6Qr+qomNM
CX9H5Yxc4Tlck3eck/uXDZTpINI32oPxRd3ftwM53sMxDltRdcmmuvnV9kgxbZf7
wKzkK3XTrHkXWOP46TSrwnbnWmUhlH0AqnHl5YdFciqGhF3stfz61YiJJrPfNEun
+XNAV3o6POpWovfcZwlpQ8hcLRu1b+VF0hq0PFUWhom/b1JbB0V5MH/Je2ecP+pJ
uFsqaYq5juRQxFy3dGar3rjCOCQGBJjQ1ZdaqKXezruB9ov7L1eKR4FRRXQhLbwt
1qhifhb8Uxwm5qGEzXLyvimGWBr2Fpviz6S46o8n7YSqH6gN1IAkrAB9lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1ihF8rLQN0a9lXu5nd/fUe1hXBMB8GA1UdIwQY
MBaAFNpgmef/Ohcbzjtv6Z67TSTLheRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUt
NDU5ODY4OWQ1NTFlLzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUtNDU5ODY4OWQ1NTFl
LzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSW/5VgA
LzNQmmdBLzAARJ1EHaZLy7dEkG6RpjU3YDC+3KjPvG8+y8EK5LMjPlPhObqtarvJ
ECS6Q4K7WSQsgbqLGHmMkmJSOOgxj+Hmhu/lUW0U+MnxdeF6sZPCYYFbVj/ClI2Z
B5pfPAwsv6pOhIFuwJ3lCY8deMx4UXnoO25Yn2VQIwdcqshjZqg27uaZ9Lk2Undp
tsK4foCvWxFa/aH5Xo7v4CH6e0FFBA/2sCXaGoYyrnluUglfbKVAJNJF8mrbrk9+
GMRfYkeSBySfrBITuTjc2TB5nW5EJ9Bxth18d7TwZbH/u7+7ccdPFSAcWxkdyhoc
Rk89vUVgp1VVIA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:12:11 2026 by rpki-client