Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
File:                     2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json)
Hash identifier:          aqAKV1r0noMMO05dhY2jxgZsLu8WiycMa6Kad2Revuw=
Subject key identifier:   B9:D5:5D:B7:75:E4:E1:E4:A1:BF:F8:BE:B4:B8:0F:B6:05:7F:0D:34
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Certificate issuer:       /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial:       019EFD5FAA0649D2BC48A77EEC653B2405B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
Manifest number:          0250
Signing time:             Thu 25 Jun 2026 06:02:45 +0000
Manifest this update:     Thu 25 Jun 2026 06:02:45 +0000
Manifest next update:     Fri 26 Jun 2026 06:02:45 +0000
Files and hashes:         1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: GczYIfwGR6Kkqg4Is8mNu987pVkD+kLO9INjuGDjxuY=)
                          2: hzlvDuEik5KewUtPDqrBpdd0iR4.asa (hash: 78MMyEGGhYv2n8lAIMHN69jmN3Yqiu304UwiKvSAC60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:5f:aa:06:49:d2:bc:48:a7:7e:ec:65:3b:24:05:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
        Validity
            Not Before: Jun 25 06:02:45 2026 GMT
            Not After : Jun 26 06:02:45 2026 GMT
        Subject: CN=b9d55db775e4e1e4a1bff8beb4b80fb6057f0d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:47:f9:07:1e:3c:c5:06:ed:44:c2:20:da:
                    4b:d6:e6:95:35:6a:c2:3a:23:ad:0d:ea:b2:f2:ed:
                    2a:a2:69:a2:d0:f0:14:0a:9b:b9:20:41:e7:49:26:
                    9d:c7:bb:48:f4:e1:cd:a9:6d:47:84:d8:33:ae:6e:
                    5d:1a:f4:8e:59:ad:ca:16:ac:81:b1:bd:c2:d5:31:
                    d0:17:b8:97:86:0b:ae:e0:c6:81:e6:1c:8e:89:d8:
                    a3:dc:bb:05:1d:70:0e:73:de:a9:c4:19:53:dc:3f:
                    fa:a3:45:c2:96:a6:6d:64:53:0e:6b:f0:c0:5d:9e:
                    61:7a:c6:30:eb:88:55:67:33:21:a3:2f:f1:f5:e9:
                    45:1a:1c:f3:82:63:8f:5d:2f:e0:13:4a:44:a1:d0:
                    f3:7c:81:74:b2:dc:43:02:fa:6e:d6:c6:2e:2b:f8:
                    b7:de:a3:15:86:bf:00:ea:03:7e:13:83:0d:5e:fd:
                    52:11:a3:d2:56:4f:3d:51:ee:bc:80:53:2e:23:e0:
                    b0:11:04:db:0e:99:b1:2b:aa:76:b6:68:27:53:a6:
                    3e:c4:0e:a7:90:d2:5c:13:1a:5f:af:7c:81:3e:5b:
                    a4:fa:2d:04:00:f5:f0:07:f9:62:b3:7f:93:17:3b:
                    d7:9f:e3:be:16:f0:98:a3:f4:39:d0:66:73:f9:9e:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D5:5D:B7:75:E4:E1:E4:A1:BF:F8:BE:B4:B8:0F:B6:05:7F:0D:34
            X509v3 Authority Key Identifier:
                keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:74:b6:99:3b:9d:ec:4e:28:26:4b:b3:20:d6:07:fc:8c:b6:
         4b:a3:25:2f:39:bf:51:e4:62:7b:56:be:0e:19:88:f5:54:d7:
         a7:a3:8d:bd:77:d9:4b:c0:b6:3d:c9:9d:4f:d0:10:d2:ac:ad:
         c9:be:da:7b:c9:26:85:95:28:a3:cf:a6:9c:36:87:8a:1c:a2:
         52:cf:c0:0b:5b:ca:e7:47:78:f4:1b:55:78:10:37:de:07:95:
         18:6f:2c:56:be:a0:3d:d1:b2:1d:3b:67:dd:86:a3:fa:9c:53:
         0e:69:29:80:0d:d9:4e:8f:4b:b6:09:ff:63:86:a7:5b:9b:97:
         b7:a2:e0:60:f6:ab:8c:78:bd:ac:ce:0e:a5:68:28:4e:fa:88:
         4d:86:49:7e:08:44:8c:ef:78:cf:d2:58:36:62:10:81:65:9f:
         6d:75:bc:5d:9f:52:5c:a4:4d:ad:fc:6a:c0:17:ab:28:f1:eb:
         9d:36:a1:84:c1:4b:57:4e:ed:3a:d4:fa:cd:26:2b:0b:14:11:
         3f:a1:d3:56:a6:31:75:c6:cc:56:39:0c:86:21:31:6d:8a:79:
         3e:c3:99:d2:fd:82:c0:d6:36:36:77:0e:98:e3:30:8f:9c:2d:
         a0:32:5f:3d:04:24:15:7b:70:56:04:78:9e:a5:fd:79:7c:96:
         d6:cd:cc:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ79X6oGSdK8SKd+7GU7JAWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhY2E4M2ViMWZhZjk3NzNkMzUwYzdkY2U2MTJjYTI4MTQ4
NGU3ZmMwHhcNMjYwNjI1MDYwMjQ1WhcNMjYwNjI2MDYwMjQ1WjAzMTEwLwYDVQQD
EyhiOWQ1NWRiNzc1ZTRlMWU0YTFiZmY4YmViNGI4MGZiNjA1N2YwZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRJH+QcePMUG7UTCINpL1uaVNWrC
OiOtDeqy8u0qommi0PAUCpu5IEHnSSadx7tI9OHNqW1HhNgzrm5dGvSOWa3KFqyB
sb3C1THQF7iXhguu4MaB5hyOidij3LsFHXAOc96pxBlT3D/6o0XClqZtZFMOa/DA
XZ5hesYw64hVZzMhoy/x9elFGhzzgmOPXS/gE0pEodDzfIF0stxDAvpu1sYuK/i3
3qMVhr8A6gN+E4MNXv1SEaPSVk89Ue68gFMuI+CwEQTbDpmxK6p2tmgnU6Y+xA6n
kNJcExpfr3yBPluk+i0EAPXwB/lis3+TFzvXn+O+FvCYo/Q50GZz+Z6jhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnVXbd15OHkob/4vrS4D7YFfw00MB8GA1UdIwQY
MBaAFNrKg+sfr5dz01DH3OYSyigUhOf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hZjJlMjItNmU4ZS00OTA1LTllNjUt
YjVlYjRjNmI3ZWE4LzEvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hZjJlMjItNmU4ZS00OTA1LTllNjUtYjVlYjRjNmI3ZWE4
LzEvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3S2mTud
7E4oJkuzINYH/Iy2S6MlLzm/UeRie1a+DhmI9VTXp6ONvXfZS8C2PcmdT9AQ0qyt
yb7ae8kmhZUoo8+mnDaHihyiUs/AC1vK50d49BtVeBA33geVGG8sVr6gPdGyHTtn
3Yaj+pxTDmkpgA3ZTo9Ltgn/Y4anW5uXt6LgYParjHi9rM4OpWgoTvqITYZJfghE
jO94z9JYNmIQgWWfbXW8XZ9SXKRNrfxqwBerKPHrnTahhMFLV07tOtT6zSYrCxQR
P6HTVqYxdcbMVjkMhiExbYp5PsOZ0v2CwNY2NncOmOMwj5wtoDJfPQQkFXtwVgR4
nqX9eXyW1s3MFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:15 2026 by rpki-client