Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File:                     2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier:          P1KGtIJzz8GeDkB1nVtlfJQNy+8wYv9B3N0sb9HHTTs=
Subject key identifier:   BF:F9:78:3C:0C:6C:81:BC:12:20:EC:2E:A0:95:99:2F:03:F1:C6:B1
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer:       /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial:       019F17C2F854672482F39BA79D8F93549FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number:          1983
Signing time:             Tue 30 Jun 2026 09:01:21 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:21 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:21 +0000
Files and hashes:         1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: cZx44enw2NXLryL55FvWC5W5lQLLmmnahH/9j9YbWF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:f8:54:67:24:82:f3:9b:a7:9d:8f:93:54:9f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
        Validity
            Not Before: Jun 30 09:01:21 2026 GMT
            Not After : Jul  1 09:01:21 2026 GMT
        Subject: CN=bff9783c0c6c81bc1220ec2ea095992f03f1c6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4c:cd:5d:08:aa:93:5b:32:b0:82:9b:e4:87:
                    ab:70:d6:0f:a7:0f:36:f6:9d:c0:11:3f:c0:59:8f:
                    56:96:f4:50:24:cd:f9:de:0f:da:3a:fd:fd:b5:ab:
                    3d:8e:e4:e7:8d:f7:9e:f9:7a:68:bf:00:91:db:bb:
                    0f:5d:07:aa:c6:b7:2b:ff:e9:cc:42:36:29:c0:ee:
                    c1:ac:85:da:63:cd:98:1b:44:54:fa:80:9d:e0:5c:
                    f2:6f:21:97:a5:0c:c3:4d:72:c0:64:e2:83:39:63:
                    05:bc:53:85:2e:ff:97:0f:c1:44:16:5f:c5:03:5b:
                    1f:af:69:8c:9b:1f:29:73:58:3d:dd:b5:b0:82:76:
                    b0:54:0c:e0:b6:b3:36:17:22:4e:ae:87:cc:05:e3:
                    89:30:d6:03:67:5a:34:06:6a:d6:b4:23:ce:4c:54:
                    6f:33:de:84:d1:f4:d1:ab:61:e5:a3:a2:0a:e1:f9:
                    24:66:e1:db:c0:34:41:40:d9:84:eb:8f:e6:0d:b5:
                    c4:3e:c9:0d:72:1a:39:cc:db:ab:8c:13:c6:37:4b:
                    ee:63:20:f6:61:11:f2:62:72:a8:f1:4f:5e:3d:8f:
                    d5:cf:c9:8e:1e:b4:a3:39:b4:02:63:8e:bc:c1:ac:
                    64:d9:ce:8e:df:28:14:ce:c1:f2:90:2a:97:3e:f6:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F9:78:3C:0C:6C:81:BC:12:20:EC:2E:A0:95:99:2F:03:F1:C6:B1
            X509v3 Authority Key Identifier:
                keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:24:ba:17:55:0c:3b:5d:5e:f5:e9:c7:5d:36:44:22:77:d1:
         16:7b:71:ed:c1:a3:6c:cf:fc:6f:c8:7d:d1:95:ac:b2:c2:42:
         15:dc:6a:bd:f7:b9:00:ad:dc:e0:da:23:1c:d9:a2:fd:8b:bc:
         e0:16:96:2b:58:5b:97:ef:d4:92:1d:66:63:cb:49:dd:b9:70:
         1b:a2:5e:ec:9b:27:63:ba:b0:43:44:fe:db:44:c1:c1:31:bc:
         20:61:65:b3:4f:32:3c:bb:e2:04:f7:2d:81:11:5a:d8:cc:af:
         23:7d:e7:45:55:41:23:f8:66:2d:8a:8c:3f:57:6b:3e:94:a9:
         7b:ea:fe:63:1b:d5:64:58:06:21:36:75:ca:e4:63:31:94:c9:
         ec:94:c2:0b:49:1c:8b:e8:62:1e:8a:7c:4d:87:f5:b1:49:0c:
         41:36:31:bf:64:0d:4b:e6:50:fb:d8:07:5b:07:2d:8f:75:08:
         83:a0:85:fe:b1:20:7f:ad:ec:6d:f8:90:84:bc:ce:15:77:b7:
         94:c3:7a:93:ca:f2:9c:42:98:5a:29:fb:6e:12:0c:ab:2e:00:
         b9:5f:57:3e:a2:1f:97:55:35:33:93:79:2e:97:e7:5c:e0:67:
         3a:83:21:2b:bf:8e:1a:87:69:ab:ab:1d:a2:17:12:cf:11:f6:
         4e:8d:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:12:13 2026 by rpki-client