Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
File:                     2dZJGIqqQ52FEfcOvoK6XnZshdI.mft (raw, json)
Hash identifier:          RaNyzeWTNsNinG9cYxdQJ+LgBVI+BTNwy4Xc6WKMIaM=
Subject key identifier:   B5:1E:38:E1:B7:8C:47:03:D1:BA:B4:A1:38:BA:86:2C:35:8C:AA:02
Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
Certificate issuer:       /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Certificate serial:       019EB958D1DAB807196C8150F7EB217F656F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
Manifest number:          11D6
Signing time:             Fri 12 Jun 2026 01:01:06 +0000
Manifest this update:     Fri 12 Jun 2026 01:01:06 +0000
Manifest next update:     Sat 13 Jun 2026 01:01:06 +0000
Files and hashes:         1: 0n_03Dj5AW36ZZDavaaJH9fKBco.roa (hash: ZZO0rbuY9EtWgQnWOuRAYlrzfJbNdlRI89FyzHlX6sU=)
                          2: 2dZJGIqqQ52FEfcOvoK6XnZshdI.crl (hash: FPs8uPRAiRXRaIBb1JaI4LEA6kkelc5O97e1+NkTs1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:d1:da:b8:07:19:6c:81:50:f7:eb:21:7f:65:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
        Validity
            Not Before: Jun 12 01:01:06 2026 GMT
            Not After : Jun 13 01:01:06 2026 GMT
        Subject: CN=b51e38e1b78c4703d1bab4a138ba862c358caa02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:62:b3:5e:1f:f1:95:c1:01:a8:12:6b:ca:
                    e5:b7:38:94:98:03:8b:2f:0d:29:94:49:51:14:91:
                    d6:fc:1a:b0:15:91:3e:67:1e:f6:31:9f:4d:56:d0:
                    2c:d4:a2:43:f1:e9:4c:e5:dd:9e:eb:17:33:a0:5d:
                    44:ad:f9:ea:dc:58:77:ab:07:7f:6c:1d:e2:74:2e:
                    6a:f0:39:74:2c:2f:f3:8b:d7:06:37:78:bc:19:f8:
                    2b:5d:d1:f2:0b:ae:cd:ec:e7:90:09:a9:f3:2e:b0:
                    42:e9:3f:4c:1e:d1:b9:bf:e0:4e:98:af:ee:53:b8:
                    75:20:00:1e:56:f8:c1:52:94:1d:b3:e6:3f:25:95:
                    bb:be:d2:01:d4:94:98:13:55:47:6a:3e:27:8c:70:
                    52:9e:36:d7:0e:15:b4:7b:4f:ee:97:40:f1:3f:51:
                    42:fa:7c:21:9f:e4:27:c1:0c:4b:0f:c0:dc:4f:02:
                    c5:3a:79:17:5e:70:5a:f0:74:9f:07:3b:49:9f:2e:
                    4f:7d:47:72:4a:b7:8f:c6:a7:65:cb:ee:35:e8:64:
                    b8:4a:18:ec:a2:b3:ab:a5:91:14:53:3d:41:fe:e1:
                    df:d6:43:f1:3c:97:f1:46:f3:7f:ba:f2:5f:7f:55:
                    cb:17:73:19:a0:11:fb:55:33:88:49:2e:08:28:59:
                    17:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1E:38:E1:B7:8C:47:03:D1:BA:B4:A1:38:BA:86:2C:35:8C:AA:02
            X509v3 Authority Key Identifier:
                keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:52:ab:3f:d6:61:9b:25:db:d4:91:cd:34:56:4f:54:81:
         9f:a1:be:8b:85:7e:de:fb:22:fc:90:1d:d3:4c:cc:8c:5c:ac:
         45:9c:09:4b:eb:31:74:79:36:a8:5f:f2:fb:1b:28:f9:f2:cc:
         6c:44:60:86:4b:87:43:26:a0:a3:b1:8b:05:c4:ee:c2:ba:2d:
         ab:b5:7c:1f:cb:1e:d0:a2:cc:09:e2:db:17:dd:1c:14:1e:69:
         5f:ee:fb:83:57:40:75:41:c2:45:94:ea:6b:59:f4:00:f2:c6:
         90:e3:0b:35:51:77:74:0d:05:94:3a:19:03:36:79:27:a6:76:
         24:46:be:e5:0f:e9:aa:85:e4:21:a2:d5:fe:e9:f5:c4:da:63:
         24:2b:df:7b:e5:97:7d:05:f2:ee:43:64:57:d3:56:59:64:30:
         63:ec:af:10:32:a0:22:c5:bb:9c:c0:f8:7a:91:61:19:3f:89:
         a8:a9:55:85:a2:98:ed:f0:69:8d:8a:af:5d:a9:27:00:00:19:
         85:0f:36:92:d6:2e:70:ec:9f:0a:f9:52:03:fa:b9:b3:73:7d:
         7e:12:b3:9e:e5:ec:80:b7:0a:d5:40:f2:a1:e9:f0:46:33:48:
         e3:9f:47:c8:5e:1c:1c:40:d6:f9:53:ad:94:61:ab:68:4f:c7:
         2e:85:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:30 2026 by rpki-client