Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File:                     2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier:          jWtycNsFrFvEb51fVBv+D+dwMIHf7BSt9pp6IhDPMx0=
Subject key identifier:   4B:5E:34:DD:1F:15:AC:C3:CB:C0:47:36:1F:B6:DE:68:52:D2:73:80
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer:       /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial:       019FA14D7963B7BEF5627610BC49B390BE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number:          1960
Signing time:             Mon 27 Jul 2026 02:00:36 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:36 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:36 +0000
Files and hashes:         1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: Gjywu60txoFVny1cbpR4U1mbxp3TUGuRyOYXC+eO9xo=)
                          2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:79:63:b7:be:f5:62:76:10:bc:49:b3:90:be:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
        Validity
            Not Before: Jul 27 02:00:36 2026 GMT
            Not After : Jul 28 02:00:36 2026 GMT
        Subject: CN=4b5e34dd1f15acc3cbc047361fb6de6852d27380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:18:a2:00:1c:2e:92:6f:ef:6f:a0:3f:ad:e3:
                    5b:5e:e4:8b:78:c2:d1:7b:f5:37:76:26:78:8c:07:
                    f6:70:08:64:0d:b0:66:c7:6c:2c:d0:93:6d:1a:d4:
                    b1:3e:b9:a8:6a:e0:29:d9:48:2d:63:c2:cb:77:58:
                    20:48:d9:46:9a:43:81:0d:59:79:27:b1:9c:9e:1b:
                    5d:78:72:f2:71:e2:df:9c:4f:4e:c2:5c:b2:ff:6d:
                    c0:0a:c1:0f:5b:79:25:44:e3:c2:6a:d1:10:64:4e:
                    da:82:2d:04:9c:cd:8d:89:17:4a:c8:c3:5d:3c:c5:
                    7d:17:47:3b:15:53:e7:51:f9:e8:e9:dc:f5:1c:5b:
                    88:44:23:43:5d:cc:32:b1:14:21:69:5e:92:ee:7b:
                    2f:46:1f:32:d6:3a:d4:ad:6f:ea:2b:3a:fe:d8:74:
                    f2:07:20:e1:c5:5d:b3:08:b3:aa:85:d6:41:2b:af:
                    7f:6c:eb:7c:71:5e:08:9f:5d:7c:c8:6e:ae:b4:22:
                    91:3a:60:f1:40:87:15:2a:12:9a:73:63:e9:93:38:
                    63:14:37:0c:9c:19:b7:08:ef:6f:9f:57:b0:3f:57:
                    66:c2:c8:22:37:d1:45:b4:94:86:21:17:84:cf:40:
                    69:19:35:be:20:f3:d6:55:2a:54:48:d7:b1:80:d7:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5E:34:DD:1F:15:AC:C3:CB:C0:47:36:1F:B6:DE:68:52:D2:73:80
            X509v3 Authority Key Identifier:
                keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5d:98:7a:73:61:70:cf:63:90:55:8a:6a:9e:5a:e1:f2:90:
         03:d5:9a:a2:77:3e:69:6f:23:52:2d:0d:bd:da:94:22:c2:00:
         3a:27:87:75:23:5f:45:1d:dc:f3:93:14:5e:c1:70:40:b4:f1:
         51:81:02:6d:84:44:43:e1:32:c0:0f:d2:9e:a6:94:92:1a:92:
         df:c4:cf:cb:e5:6a:0f:62:21:02:1f:b6:41:cc:24:09:68:fc:
         6f:f1:21:39:f8:ae:22:a8:c2:f6:c1:ae:8e:b9:f9:aa:50:d8:
         bc:1f:7c:7f:64:e9:36:63:13:a3:be:41:15:b0:86:4d:1c:58:
         3a:24:11:f0:e2:9f:0d:17:07:a3:88:d2:fa:fd:f1:d7:b5:26:
         dd:56:16:11:ab:3c:ad:fc:2b:9d:3e:5b:03:ca:10:2f:37:05:
         cc:99:ac:a9:7c:cc:4e:0a:21:bd:98:11:51:43:a1:c7:af:a9:
         10:6e:e6:5b:e0:59:ae:d9:65:8f:28:e5:15:09:39:28:0d:b6:
         6e:83:82:14:f2:71:8f:68:8b:d4:26:31:40:83:85:cb:99:09:
         ed:1a:19:be:b4:1e:30:c3:14:50:41:d5:5a:58:93:39:44:d5:
         18:3b:64:5b:84:31:62:3b:db:c2:91:92:13:fd:14:6b:3c:ed:
         b7:47:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:09 2026 by rpki-client