Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File:                     2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier:          saW8uIT/s18HbiMnOIILrNWFZ9UYkDuqUFNLcmpa76g=
Subject key identifier:   33:EF:45:26:AA:E6:47:E0:11:F6:E2:F6:9D:A8:8E:70:21:04:A6:19
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer:       /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial:       019E3072546608113E164B4F4A8B1C518E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number:          0E76
Signing time:             Sat 16 May 2026 11:00:59 +0000
Manifest this update:     Sat 16 May 2026 11:00:59 +0000
Manifest next update:     Sun 17 May 2026 11:00:59 +0000
Files and hashes:         1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: mctdPCzbOHpm+2LPqaHeBTB2IijCbGc3TK3YlagQw8s=)
                          2: Mwa4BYhszDC6EiMM8uEuQovtbu0.roa (hash: +62IJVapKeotHfACQPyX6dSOxf44Up4jXmezBFrKB6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:54:66:08:11:3e:16:4b:4f:4a:8b:1c:51:8e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
        Validity
            Not Before: May 16 11:00:59 2026 GMT
            Not After : May 17 11:00:59 2026 GMT
        Subject: CN=33ef4526aae647e011f6e2f69da88e702104a619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:ec:f4:47:72:3d:2e:5b:61:ad:0b:53:95:
                    5d:59:ab:eb:f0:23:d8:e7:48:44:24:36:68:11:df:
                    03:ca:5e:06:ab:29:d7:71:aa:dc:46:ee:a6:37:0a:
                    9a:cc:cd:b5:6a:98:7e:42:2a:bd:8b:5d:ac:a0:30:
                    c0:ee:d6:78:65:14:c6:b1:f5:b3:d4:c4:a1:25:da:
                    69:53:60:b9:af:6c:2b:2d:47:61:74:56:ad:86:4d:
                    6f:63:b9:9d:73:e4:51:1a:52:4a:2e:6f:5f:1b:8e:
                    9f:ae:0f:56:63:39:99:7d:cc:d9:87:78:ef:2b:9d:
                    13:5c:0e:8a:3e:16:aa:9a:cf:60:5e:92:48:0b:99:
                    63:bf:43:67:2a:8f:a1:54:0a:a3:3b:5e:ac:e0:63:
                    af:67:84:49:57:f8:dd:8e:cf:1a:ae:2e:7d:d6:5b:
                    f3:46:d0:88:81:82:d5:eb:fa:33:24:a3:0e:31:cb:
                    22:39:71:a3:3f:29:78:a2:6b:dc:1f:25:c8:b5:f5:
                    93:98:81:a2:0a:18:58:66:e1:d5:ef:b7:2d:81:a4:
                    8e:34:6f:0b:9d:2b:76:8a:87:42:00:1e:ac:94:14:
                    78:bd:ba:9e:5a:7f:5c:8e:b1:d5:de:94:7f:fa:9c:
                    89:ac:e1:26:10:17:d5:08:92:82:19:4c:ac:4e:ab:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EF:45:26:AA:E6:47:E0:11:F6:E2:F6:9D:A8:8E:70:21:04:A6:19
            X509v3 Authority Key Identifier:
                keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b2:e5:ac:ee:3b:2f:36:39:60:0c:49:44:20:d9:cb:92:b7:
         df:6c:2a:d0:a1:0c:ac:51:52:86:f6:05:24:32:76:03:a6:0a:
         1e:24:5e:62:f0:7b:2f:70:7b:74:92:1d:01:ec:5d:c1:a7:85:
         6d:1c:0b:16:10:e9:07:b8:16:9c:71:59:64:3f:3d:86:99:72:
         81:24:39:6a:9e:2e:df:57:2b:77:6e:15:38:7b:6f:4b:c4:1c:
         d1:ba:42:f4:7a:85:39:94:06:bb:1e:e9:c8:73:8a:ec:f6:f1:
         ab:f0:de:51:54:2b:5e:3b:b0:dc:8c:a4:2c:80:cf:62:d4:91:
         77:c8:3c:d5:79:40:87:f0:0e:8b:8b:3d:90:20:4f:ed:26:fb:
         ce:a1:da:d9:df:7c:fb:01:db:45:d1:4b:c9:16:66:ce:3c:87:
         08:f4:ec:c8:f5:cf:b2:06:6b:2e:9d:29:d4:e6:fc:02:c0:f0:
         7c:a1:09:18:07:0e:da:ab:81:ec:57:9c:be:86:20:aa:42:ae:
         7f:8f:8b:de:ca:d6:32:7c:28:26:a9:04:d7:38:91:cc:74:16:
         75:ed:a1:7c:c1:ba:1f:2c:9e:f9:74:4f:ec:fe:5d:c1:6a:40:
         f9:bf:43:81:3d:7a:42:a0:0e:11:b1:ee:c7:04:74:ba:f5:a8:
         f4:81:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:18:30 2026 by rpki-client