Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File:                     2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier:          nHzTDmCdEY6bGP2cx73X0BHg1ORnu1zja4dch9/i/5c=
Subject key identifier:   7E:BB:2A:37:79:5F:1B:BE:9B:D3:3C:3C:C6:6A:8D:88:F6:68:DE:55
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer:       /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial:       019E30A96AB3E914335F40D76B9C912053CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number:          062F
Signing time:             Sat 16 May 2026 12:01:09 +0000
Manifest this update:     Sat 16 May 2026 12:01:09 +0000
Manifest next update:     Sun 17 May 2026 12:01:09 +0000
Files and hashes:         1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: jsm8o7Wi2xUYa+hMQFudYs7HVUQVn6v5YXvttMsuBpw=)
                          2: W5h40v2bXEhJayS-SrtWJ-dPHXw.roa (hash: LQ5DbqMUDr5m+PTN5GWPQfen5hG3kMiMA8hJXE+cg/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:6a:b3:e9:14:33:5f:40:d7:6b:9c:91:20:53:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
        Validity
            Not Before: May 16 12:01:09 2026 GMT
            Not After : May 17 12:01:09 2026 GMT
        Subject: CN=7ebb2a37795f1bbe9bd33c3cc66a8d88f668de55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:34:ee:13:92:a6:e1:a0:cb:9b:ab:57:ef:c0:
                    8d:16:b1:f2:dd:50:b9:96:89:93:35:07:a4:2c:49:
                    2d:f2:c3:b1:b7:69:b9:4a:45:98:41:59:50:a8:3d:
                    3a:09:ec:bd:2b:4d:24:7d:be:a2:85:17:22:77:e8:
                    8c:db:11:7f:2e:d0:72:1d:40:8d:ba:95:91:f4:a4:
                    d8:77:72:b7:8f:ac:e8:3b:a2:64:90:e1:1d:0c:3d:
                    b1:e7:81:69:ae:3f:c6:21:eb:84:86:85:8e:e0:3a:
                    1c:63:12:20:41:c1:a0:b1:9b:77:ae:a2:29:8f:79:
                    fd:7d:7e:ee:8d:66:04:38:16:f8:1f:7a:1f:e5:77:
                    39:c6:90:ca:33:aa:e3:8c:1b:db:43:29:97:a2:12:
                    cd:5a:8b:0b:99:4a:f8:6d:68:0c:65:d1:77:0d:fd:
                    0a:23:b2:ce:49:23:3e:45:fc:e6:1a:86:54:fc:37:
                    9e:06:01:0c:3b:3d:21:f3:cd:09:ee:82:87:50:9d:
                    f2:8c:92:f1:7c:61:1e:93:e0:db:1f:c6:46:51:e7:
                    b2:37:e8:33:66:97:23:e7:5e:9c:94:9b:ed:e3:79:
                    5b:e9:c7:81:f8:4e:c7:ef:dc:6e:08:48:e1:29:ed:
                    3b:70:74:74:0c:4d:3e:22:6f:a8:31:8f:e4:6d:28:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BB:2A:37:79:5F:1B:BE:9B:D3:3C:3C:C6:6A:8D:88:F6:68:DE:55
            X509v3 Authority Key Identifier:
                keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:72:55:70:74:e8:a4:d9:cb:d6:f7:26:b9:72:f3:dd:f4:
         42:1c:61:5b:05:5b:25:90:55:c2:c4:c0:9c:3c:e4:b1:61:c5:
         20:09:c1:ed:da:9c:53:60:25:d7:b7:e5:3b:3e:a7:7e:a3:bc:
         dd:2a:d6:5c:91:61:f2:b3:3d:fe:7b:83:20:42:7d:3b:0e:20:
         29:ab:65:14:20:e8:54:7b:36:04:c2:a9:d6:f6:e7:cf:9f:e1:
         81:f9:d2:a9:86:f3:6b:f4:1b:4e:33:e5:03:8f:6b:a5:10:1f:
         2e:92:dc:21:c0:e6:94:8e:c7:f4:e2:29:64:67:41:de:cb:e5:
         81:77:cc:fe:f2:cb:92:ce:92:d7:24:48:ee:a6:1d:29:64:81:
         ef:f7:69:41:07:fb:99:7b:a2:3b:0a:57:d7:24:b3:e1:74:1f:
         75:36:12:38:b0:d4:84:ec:8f:d5:fd:45:52:f1:7e:dd:b5:b9:
         77:e6:02:63:53:08:22:34:28:63:c8:0d:4c:1a:78:c0:27:b4:
         2f:b0:be:86:9f:49:7d:73:f9:6b:29:23:0f:30:ed:bb:35:95:
         1d:56:63:2e:6a:23:6c:bc:c8:9e:8e:22:74:4f:13:af:6e:b4:
         9e:4e:2f:57:b6:9a:2e:9e:23:8a:c8:34:8f:27:21:a3:85:20:
         fd:9e:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:07 2026 by rpki-client