Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File:                     2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier:          SFn/gW8LR0tfTBGaiCQCsQnNxteYZbWTbVryCLdW4zE=
Subject key identifier:   05:C3:44:FC:AA:1D:F9:13:3F:35:46:DA:F8:27:02:9B:13:48:E0:16
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer:       /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial:       01A0016F9C74ABB3F21E34C603A0B17161F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number:          19FC
Signing time:             Fri 14 Aug 2026 18:01:26 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:26 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:26 +0000
Files and hashes:         1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: NUnnsEAGgXkeW5PT828uJD3GTuWvZ53ZSy+kshdgFxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:9c:74:ab:b3:f2:1e:34:c6:03:a0:b1:71:61:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
        Validity
            Not Before: Aug 14 18:01:26 2026 GMT
            Not After : Aug 15 18:01:26 2026 GMT
        Subject: CN=05c344fcaa1df9133f3546daf827029b1348e016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:5d:13:57:28:15:fc:d4:26:26:57:2d:3a:
                    47:67:40:9b:ac:ae:6e:cb:f2:17:92:ef:ed:14:c6:
                    46:aa:4d:6f:0e:7b:61:de:ec:12:57:4e:03:3f:f2:
                    0c:fc:40:9d:f4:c4:15:4f:46:ee:de:b7:db:df:b2:
                    03:26:73:41:76:55:1e:2e:50:96:1c:8a:b4:2f:f6:
                    48:c6:78:7a:b4:ce:53:0d:0d:40:f0:c0:93:a2:0c:
                    1e:9d:d8:8c:aa:b1:33:fc:30:59:73:5a:06:e6:d0:
                    e5:b6:97:d8:78:8b:26:33:9e:03:dd:a4:85:54:aa:
                    96:b5:a0:c9:ce:e9:14:ad:80:60:4e:70:06:78:b8:
                    82:84:7a:4d:a6:cf:6c:df:76:d1:2b:d0:f8:66:45:
                    01:7b:9d:98:65:99:45:a9:95:05:be:28:e9:1b:ea:
                    77:22:f6:34:1a:85:25:37:59:82:a6:e7:15:1d:33:
                    4d:e7:c1:09:c5:96:32:c1:3c:da:c4:00:e9:0d:a9:
                    1d:ad:28:8b:2c:15:ff:2c:fc:e6:b3:d6:02:3e:d6:
                    dc:4c:06:3f:7d:19:bb:f9:a6:e1:a9:92:73:da:67:
                    8b:4a:cd:cc:e5:fb:02:35:82:94:6a:8d:b5:eb:56:
                    8b:2d:f0:d4:32:f8:c7:af:27:ab:cf:9b:3b:69:df:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C3:44:FC:AA:1D:F9:13:3F:35:46:DA:F8:27:02:9B:13:48:E0:16
            X509v3 Authority Key Identifier:
                keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:73:66:c9:37:56:c2:19:c5:d9:36:9f:88:ef:3f:dd:3c:32:
         39:9d:b5:8a:a2:3d:d2:5b:50:9f:95:9f:c9:1a:c7:bf:5b:be:
         06:f8:cc:ba:4a:1f:5a:48:ed:7f:d8:37:9e:a6:99:70:3e:9b:
         bb:8e:4f:f3:dd:0a:86:44:a4:29:59:97:85:d8:dd:09:93:d8:
         a0:84:51:14:66:e0:6d:e4:6c:19:16:43:bb:a6:fc:2f:4a:18:
         30:8e:88:f1:a7:2a:a8:0b:c1:6e:e6:f5:33:d6:c0:0b:16:c0:
         bc:08:a4:19:5d:21:e2:2a:4e:13:d3:a6:94:50:30:b3:4a:de:
         9a:5c:cf:61:ce:dd:d0:ba:4a:0e:85:ee:e4:b9:c1:54:ab:71:
         7d:ec:5d:ae:6b:01:5c:02:6d:c0:1e:94:4b:7f:b4:4e:ff:7d:
         16:38:0f:6e:03:1c:22:e7:5d:06:7b:e5:96:10:3e:49:6b:c3:
         fe:dc:aa:b4:eb:6b:65:43:99:36:a8:17:2d:d7:92:54:2a:62:
         74:27:b6:88:86:6e:7e:80:5b:f6:09:a7:07:ae:a3:01:78:9e:
         1f:ad:b3:e4:c1:2d:70:a3:36:79:59:04:97:04:2c:95:79:60:
         df:53:df:c0:9e:64:ef:36:a5:e4:cf:7b:c3:b8:5f:79:48:3a:
         a7:98:e5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:32 2026 by rpki-client