Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File:                     suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier:          ++xluhzD6vb/z0kiJphXg6GjEf7PlOJ3mPOkrd+wbJ0=
Subject key identifier:   8B:8C:6E:D8:2E:B9:76:C0:AF:50:BB:80:4D:C6:C2:59:A3:CD:8C:68
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer:       /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial:       019EB87D278B28153E827AE600FE84219BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number:          1371
Signing time:             Thu 11 Jun 2026 21:01:10 +0000
Manifest this update:     Thu 11 Jun 2026 21:01:10 +0000
Manifest next update:     Fri 12 Jun 2026 21:01:10 +0000
Files and hashes:         1: UU7xm8N0gLKzystvr7K0vFPPnwM.roa (hash: AIlX5yaREYq7YP0aVDh7YsVcoDln+tEm7zV1uCXEZfo=)
                          2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: QO6VARIghBxkLKhFtAt/KjxydWaP1s7OIUUfP6Q6F88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7d:27:8b:28:15:3e:82:7a:e6:00:fe:84:21:9b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
        Validity
            Not Before: Jun 11 21:01:10 2026 GMT
            Not After : Jun 12 21:01:10 2026 GMT
        Subject: CN=8b8c6ed82eb976c0af50bb804dc6c259a3cd8c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:ce:a2:7c:2b:57:b6:0e:e8:8d:e8:65:74:
                    53:fb:ed:28:12:83:3a:44:9d:a5:3c:ef:66:18:e8:
                    d4:99:a2:7d:3b:ca:e9:94:7a:01:77:25:bf:4b:3f:
                    e5:16:b8:fe:25:ce:f7:2e:fd:59:78:78:9b:f3:13:
                    91:43:83:9f:0e:23:90:e9:07:70:8f:b5:fb:48:7b:
                    8f:77:50:7c:93:96:1e:44:f6:9f:51:bd:87:80:43:
                    57:be:45:0e:97:1b:c4:94:5c:e3:1e:b1:d7:d8:13:
                    29:1b:e2:85:17:0c:13:9d:fe:43:b1:a5:f1:18:91:
                    3f:b8:13:74:36:0a:c3:70:47:1f:bf:16:78:60:dd:
                    5c:29:4d:89:e3:18:52:b9:78:66:2a:58:1f:33:1f:
                    25:b8:d3:cc:f4:52:d5:b5:a9:2e:6b:bf:08:eb:95:
                    41:75:98:f0:61:b0:ae:df:c6:ee:85:e5:00:20:72:
                    fb:95:83:38:c1:cd:c4:b0:fd:61:ba:55:5d:27:0f:
                    c4:c7:8c:69:c4:5c:1e:41:99:05:e8:ff:31:42:da:
                    83:56:17:3c:4b:ae:79:54:13:96:6e:e5:49:65:3f:
                    98:42:64:d9:34:0f:f1:46:2b:be:d6:bc:38:20:ef:
                    db:1a:27:98:5d:4a:41:07:6b:d2:b7:dd:db:43:45:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8C:6E:D8:2E:B9:76:C0:AF:50:BB:80:4D:C6:C2:59:A3:CD:8C:68
            X509v3 Authority Key Identifier:
                keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:43:b2:35:f1:d3:c7:4b:43:7a:51:cc:2e:fd:2a:86:07:b1:
         0e:3d:3b:80:32:a1:bf:3e:3c:14:ae:67:96:70:ef:21:00:46:
         8b:6c:34:7f:55:c9:21:19:12:d7:98:4e:bc:71:db:b7:85:06:
         6c:08:f3:e8:12:1b:1e:98:c8:69:c6:85:59:02:60:16:27:c6:
         42:eb:4a:43:68:52:ac:8d:03:9b:55:21:f7:2b:5d:72:2a:34:
         84:0a:3e:65:f7:f8:49:2b:51:ec:88:3b:60:d1:27:b1:ef:0e:
         35:20:10:3f:03:19:36:fd:6f:09:ee:f0:65:e0:1d:e1:99:db:
         2a:07:6d:92:90:5f:f3:6d:bf:00:32:c4:06:59:f7:11:29:97:
         79:80:73:45:28:c7:05:b1:a0:84:01:f2:de:f0:c6:a7:6e:f8:
         8e:54:09:80:d9:43:72:a2:78:44:a7:38:24:c5:5f:f4:ed:7c:
         09:b7:f2:5f:50:dc:84:c5:2b:3a:d6:43:ba:0f:4f:73:93:d2:
         34:a6:9c:50:5e:63:64:57:87:2e:ff:de:36:46:a0:6f:7e:cd:
         c3:92:7f:94:4d:90:22:6f:f4:1e:57:cf:09:52:bb:a9:53:ac:
         88:d3:7f:fa:77:8d:3d:8d:62:81:bf:13:0f:92:ce:32:d7:1e:
         0f:74:c6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:55 2026 by rpki-client