Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File:                     2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier:          kw6g33HktHuP9bdDyEh9ZaAKXuGIocDiIl0TcPblYCA=
Subject key identifier:   B1:05:83:45:94:7B:FC:36:50:A6:21:4B:87:99:91:73:CC:A6:7D:97
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer:       /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial:       019E2FCD7D5EBDF37E9CDFB1A8461B21FDE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 08:00:56 +0000
Manifest this update:     Sat 16 May 2026 08:00:56 +0000
Manifest next update:     Sun 17 May 2026 08:00:56 +0000
Files and hashes:         1: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: +tVfswBZothyQ0agGWuetYic/Fo2jLKot9Ale/xm6CM=)
                          2: YhhsybWAzHa63YaPvrgi4sjbjbI.roa (hash: T2MXxILyF0Me/fqVllL7VCaBjrZcghSwrlaqWl2tPkE=)
                          3: _kAyTCQof302et37HvM6mt9jgEM.roa (hash: 424VJZvw+ZmGcQi0r8Ayp33km0iNLVdVw38YU4HDjGU=)
                          4: wxi4D1t6N5E-A8MwJ6AwFD8d4kM.roa (hash: 391+SiltY2IpnHulRAud0EhzjNpX6Vgh8CqJXOeyKCI=)
                          5: xMne1SAMH-NmiH2AwUzcwkdTgl8.roa (hash: 2xRNoJJDPdFtBinldE8KCt/I2UuqqqoHmvwM/zMncZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:7d:5e:bd:f3:7e:9c:df:b1:a8:46:1b:21:fd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
        Validity
            Not Before: May 16 08:00:56 2026 GMT
            Not After : May 17 08:00:56 2026 GMT
        Subject: CN=b1058345947bfc3650a6214b87999173cca67d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:3e:fc:e5:13:c8:12:24:b1:87:81:8c:e0:
                    de:84:df:c4:bd:c6:e2:07:d9:4a:b3:6a:c2:b8:0b:
                    ae:8c:2e:15:c1:ac:b2:fa:0f:5f:82:3a:f9:56:c8:
                    aa:cc:7b:f5:5f:76:bc:6d:39:da:fc:66:91:e0:0a:
                    b0:4d:8f:d9:4f:c4:d7:cf:75:11:78:3a:29:70:49:
                    b0:bf:1a:be:8b:64:bd:57:93:60:e9:ff:20:fc:fb:
                    51:53:48:e4:ca:f9:31:4f:33:83:c3:b4:5d:88:b9:
                    74:0f:4c:ee:3c:88:e8:93:d9:8e:8d:2d:b0:f6:79:
                    c0:be:0b:a8:70:ce:31:8a:5e:75:92:29:5b:e3:07:
                    c3:1e:4f:8d:f1:b3:ab:af:56:66:a1:55:aa:59:01:
                    24:84:ef:8b:f3:6c:09:f9:f6:ec:a4:3b:fb:7e:53:
                    4f:77:44:54:b4:94:9d:f6:a0:fa:8a:f1:7d:5f:84:
                    82:fb:8f:1b:7c:d6:4e:e1:b2:98:27:68:30:2a:5c:
                    f5:db:9f:60:61:77:50:68:89:8b:9d:29:86:8f:36:
                    91:b2:ae:4c:53:c3:29:5c:3d:f6:ed:79:cc:89:f2:
                    b9:ae:84:9a:d4:45:ce:bd:df:ef:9c:18:84:5e:5c:
                    a5:48:ee:eb:ae:ce:53:03:a7:fd:28:22:44:6b:5b:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:05:83:45:94:7B:FC:36:50:A6:21:4B:87:99:91:73:CC:A6:7D:97
            X509v3 Authority Key Identifier:
                keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:f1:19:e2:b6:b0:3f:e1:4c:02:ac:c4:cb:36:a9:86:71:
         52:96:4d:73:85:d6:5f:51:a9:de:e7:27:b9:11:c2:35:06:b8:
         73:bb:32:69:a7:99:99:96:c8:0b:5d:9f:ab:b6:96:0d:e0:1d:
         37:a5:3e:c8:91:67:54:47:1c:0a:5a:55:37:87:a3:c0:60:19:
         3d:3e:5b:fc:5c:dd:08:5e:eb:dd:42:ee:9e:6c:aa:02:57:cf:
         81:92:7d:00:8f:23:f9:b9:3d:24:6b:d4:50:dc:ae:06:94:fd:
         10:41:42:a6:9a:bc:f3:75:ff:ef:7f:df:f5:fb:80:c3:76:ca:
         9b:9e:66:44:35:b1:9b:f1:da:0f:b3:31:03:d8:15:c2:a3:79:
         63:04:e2:22:e2:d1:c5:b3:9b:a3:d2:3e:ef:08:0d:31:0b:f9:
         e6:21:5e:44:1a:cd:62:ab:3d:93:1d:05:bf:73:7c:99:a6:73:
         0e:23:5f:71:3d:f4:40:d2:6e:51:58:8e:c3:f5:5f:8a:cf:44:
         6f:27:f7:cc:9f:70:fb:d5:94:15:24:30:a6:d9:f4:26:32:d9:
         7e:3a:0d:42:ea:0f:d9:d6:5b:1a:68:5b:d5:63:67:90:cd:03:
         77:c7:37:be:d0:98:25:8a:e6:f2:c6:fd:32:d0:7c:d7:b2:31:
         da:53:41:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzX1evfN+nN+xqEYbIf3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm
OWZjOTMwHhcNMjYwNTE2MDgwMDU2WhcNMjYwNTE3MDgwMDU2WjAzMTEwLwYDVQQD
EyhiMTA1ODM0NTk0N2JmYzM2NTBhNjIxNGI4Nzk5OTE3M2NjYTY3ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9M+/OUTyBIksYeBjODehN/Evcbi
B9lKs2rCuAuujC4Vwayy+g9fgjr5VsiqzHv1X3a8bTna/GaR4AqwTY/ZT8TXz3UR
eDopcEmwvxq+i2S9V5Ng6f8g/PtRU0jkyvkxTzODw7RdiLl0D0zuPIjok9mOjS2w
9nnAvguocM4xil51kilb4wfDHk+N8bOrr1ZmoVWqWQEkhO+L82wJ+fbspDv7flNP
d0RUtJSd9qD6ivF9X4SC+48bfNZO4bKYJ2gwKlz1259gYXdQaImLnSmGjzaRsq5M
U8MpXD327XnMifK5roSa1EXOvd/vnBiEXlylSO7rrs5TA6f9KCJEa1tW4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEFg0WUe/w2UKYhS4eZkXPMpn2XMB8GA1UdIwQY
MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt
M2YxMmFmZjI3NGRhLzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh
LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuTxGeK2
sD/hTAKsxMs2qYZxUpZNc4XWX1Gp3ucnuRHCNQa4c7syaaeZmZbIC12fq7aWDeAd
N6U+yJFnVEccClpVN4ejwGAZPT5b/FzdCF7r3ULunmyqAlfPgZJ9AI8j+bk9JGvU
UNyuBpT9EEFCppq883X/73/f9fuAw3bKm55mRDWxm/HaD7MxA9gVwqN5YwTiIuLR
xbObo9I+7wgNMQv55iFeRBrNYqs9kx0Fv3N8maZzDiNfcT30QNJuUViOw/Vfis9E
byf3zJ9w+9WUFSQwptn0JjLZfjoNQuoP2dZbGmhb1WNnkM0Dd8c3vtCYJYrm8sb9
MtB817Ix2lNBUg==
-----END CERTIFICATE-----
Generated at Sat May 16 17:12:32 2026 by rpki-client