Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
File:                     2GeflcqbZWt8oiG-brJPleMosBA.mft (raw, json)
Hash identifier:          LJc4jF7Ql/DJusWneNB7mnPo8abNqUt2N+wEbSz/LEU=
Subject key identifier:   51:31:CA:10:FB:8B:61:C0:6C:34:23:64:D1:D0:2D:55:9D:38:A1:65
Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
Certificate issuer:       /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Certificate serial:       019F19E804B31DC46C85BCD6B6399EA0DE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
Manifest number:          01B0
Signing time:             Tue 30 Jun 2026 19:01:03 +0000
Manifest this update:     Tue 30 Jun 2026 19:01:03 +0000
Manifest next update:     Wed 01 Jul 2026 19:01:03 +0000
Files and hashes:         1: 2GeflcqbZWt8oiG-brJPleMosBA.crl (hash: tdUFGzkPeTtnew0yvyTOF8mw5MImkBfk5dYjUGv86RI=)
                          2: BSZLZZU8WnO1HNWxWSVR-o_RsAQ.roa (hash: eIYiIuRaJOxAqm6Szxm9PX2GnxZ6UxTo1qMiKhfknrA=)
                          3: Ko6ayuDYOxyaZR1lB_4YUKhJxd8.roa (hash: Guqjr9wNF8VXnju8V9KS/FQotrR92a30mYmLze8RF50=)
                          4: RvTgs-Ael9U9l-WfMGAnn6bpYas.roa (hash: 92wDEfW/LHrs63qVLF1djhEHy33LjlsoGqzBeCbZbeo=)
                          5: r48UpQfIFT_00L01sN999jQbTcc.roa (hash: B09mf8eaBwNCmIzM3aQ+pzMc7N9vQ8EVkw29KyQzVHc=)
                          6: z0g0oAAZfo552Sh_lukdYrvy7bE.roa (hash: a249LmxihlnLe91HGuM/HylW2FVr4nPvQ2mfBuPcwm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:e8:04:b3:1d:c4:6c:85:bc:d6:b6:39:9e:a0:de:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
        Validity
            Not Before: Jun 30 19:01:03 2026 GMT
            Not After : Jul  1 19:01:03 2026 GMT
        Subject: CN=5131ca10fb8b61c06c342364d1d02d559d38a165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:cd:b2:2d:20:45:76:a6:6b:a6:b5:f9:a5:
                    8e:8e:07:e6:99:dd:44:22:78:f7:e2:9e:cc:d9:ca:
                    5c:cb:fc:81:61:14:a4:08:67:3e:d7:3a:8e:cc:a1:
                    b6:6c:98:d3:96:8b:cf:d1:16:7c:a6:24:40:6e:d3:
                    89:5b:57:be:45:b4:6b:d3:2c:99:e6:6b:4b:96:db:
                    10:65:ee:a8:2e:49:70:86:13:c5:a8:85:0b:bb:72:
                    8c:10:3e:16:de:01:fd:c9:00:1a:07:d6:9f:9c:74:
                    d7:ab:c1:b9:6a:0b:aa:77:f9:c7:7f:ff:be:54:a6:
                    0c:30:85:96:59:34:8a:ff:40:47:95:55:b6:6a:b2:
                    56:88:d6:5c:2f:53:95:04:e5:a3:27:8c:10:bd:7c:
                    53:06:6a:b8:2d:57:a3:83:cc:02:40:ee:bd:ab:94:
                    24:f8:fa:ca:30:40:82:04:24:04:f9:76:5d:40:9e:
                    ad:93:42:13:2b:fb:f9:38:8a:32:52:f0:22:6f:d4:
                    98:e9:b5:64:a4:83:e4:26:1a:83:d8:fb:8f:0e:54:
                    16:48:0b:bc:72:33:b7:03:d2:cb:6e:94:89:54:44:
                    d5:af:b2:fa:30:3a:ab:de:0a:8a:0b:69:0d:3f:9e:
                    2f:35:b9:79:39:4a:2b:0e:dd:06:2b:73:fb:fb:28:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:31:CA:10:FB:8B:61:C0:6C:34:23:64:D1:D0:2D:55:9D:38:A1:65
            X509v3 Authority Key Identifier:
                keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:78:00:33:08:84:d4:60:5b:a7:c5:c2:a1:fc:36:1e:dd:60:
         28:17:10:87:89:98:5c:f7:c6:3e:4d:08:a6:7a:8a:d3:a1:6e:
         e9:7a:a4:e5:3e:dc:8e:67:43:65:e5:15:8c:ae:3f:5c:3a:58:
         08:a8:0e:31:67:c4:c7:a2:dd:a6:4e:7d:28:79:df:b5:df:f7:
         59:98:60:a4:01:02:08:b3:2a:31:9d:a8:af:90:03:60:f9:4a:
         e3:e5:8d:3a:31:ce:d6:5e:10:48:e3:8d:2c:3c:ab:e8:d2:53:
         30:d9:74:10:9f:32:14:34:a6:80:d4:a4:a3:14:b3:58:79:34:
         90:7e:92:35:4f:e8:6f:80:77:79:ba:7b:1e:6a:e2:24:35:fa:
         e8:81:2b:51:3f:ba:4c:f6:5b:55:e6:50:f8:48:76:7f:51:92:
         15:51:4b:a4:00:36:40:bc:90:08:66:76:2c:5b:b3:74:b9:04:
         03:ac:47:6f:56:8d:10:fa:82:3b:42:2d:11:34:90:48:1a:0e:
         e5:9c:a5:38:f3:f2:39:c7:bc:02:51:0c:8d:97:ff:5a:8e:61:
         fb:7a:02:88:79:96:f6:1e:31:15:1b:3a:04:e0:cc:a8:4d:a6:
         d5:c8:87:a8:d1:38:9d:4c:e4:2c:b6:e5:f5:06:35:da:e6:63:
         06:20:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:48 2026 by rpki-client