Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
File:                     2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json)
Hash identifier:          wLp8t6nmKQC1LX87c2+rqGmOoT3Zw3Iqj8+sSoXzjSM=
Subject key identifier:   D8:D5:BB:1D:6F:3D:4E:79:3E:78:62:E2:93:2A:FB:86:73:77:20:61
Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
Certificate issuer:       /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Certificate serial:       019E3185295B789B25F0428FF30CCD90D154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
Manifest number:          159F
Signing time:             Sat 16 May 2026 16:01:10 +0000
Manifest this update:     Sat 16 May 2026 16:01:10 +0000
Manifest next update:     Sun 17 May 2026 16:01:10 +0000
Files and hashes:         1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: 652AGstoQFMHkSrXKOuzyzq5RoUD7uCRbkN2AfP95og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:29:5b:78:9b:25:f0:42:8f:f3:0c:cd:90:d1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
        Validity
            Not Before: May 16 16:01:10 2026 GMT
            Not After : May 17 16:01:10 2026 GMT
        Subject: CN=d8d5bb1d6f3d4e793e7862e2932afb8673772061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:44:c3:8f:74:77:99:e5:1b:27:9b:53:0f:
                    f5:be:60:db:93:cf:51:a4:c4:a0:75:39:b7:32:8a:
                    33:8a:27:3c:5a:78:b2:de:0d:68:b6:59:30:35:52:
                    89:57:96:25:11:14:f0:52:c9:de:2b:d3:ad:b9:3f:
                    e6:f4:fe:2b:6f:9e:83:99:49:9e:98:9b:05:0d:11:
                    43:55:a4:8e:80:70:84:a8:1b:2d:1c:94:6b:aa:85:
                    1d:7d:3d:e5:52:78:a7:ec:85:0c:03:19:1d:65:b5:
                    31:ec:dc:2a:ce:e6:ad:67:5b:a8:94:e5:41:0c:ff:
                    64:75:9e:b4:8d:55:0b:f1:34:d4:c6:18:ad:21:cd:
                    79:ca:2e:95:67:05:0a:90:4b:f8:0a:12:27:ce:6f:
                    a2:92:3e:c0:c2:3c:21:e1:c9:e2:22:87:11:c8:30:
                    2d:51:a7:5b:4f:07:bd:46:ca:5a:cb:2d:b6:27:0b:
                    45:d9:b4:39:85:55:53:94:f3:ee:f7:51:60:bd:90:
                    61:0c:47:ee:70:ed:16:ce:c4:3c:b1:8d:84:f3:67:
                    7d:d8:0d:16:b7:fc:80:c1:e7:b7:4e:e1:7f:1e:f9:
                    33:10:1e:fc:c4:41:96:7a:1f:b7:4e:dc:0a:41:b5:
                    6f:3a:0c:ee:5f:f9:22:c5:52:2a:e5:e0:8c:48:84:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D5:BB:1D:6F:3D:4E:79:3E:78:62:E2:93:2A:FB:86:73:77:20:61
            X509v3 Authority Key Identifier:
                keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f9:99:05:12:d2:9d:fd:d8:86:47:dd:f9:da:b5:3f:68:ea:
         5d:69:c0:55:02:24:6f:e5:65:c3:fa:f3:b6:ab:3a:d2:b9:31:
         e7:c5:46:96:04:2c:48:06:c2:5d:e3:ac:5f:d9:34:c0:ae:a0:
         99:12:c0:55:b7:2e:30:8d:d0:b5:c0:1f:45:ee:55:f4:d3:85:
         68:7a:a9:5c:1e:d5:80:40:d6:fd:59:22:e5:ab:b0:63:ee:46:
         36:f4:6d:d6:5e:03:24:d6:6e:6d:17:2a:a7:56:6f:69:e8:53:
         ea:79:48:cd:e2:ad:49:02:d3:ac:0f:9a:d0:65:6c:a7:eb:51:
         8b:1b:57:8d:c5:81:ba:43:eb:00:a1:43:3d:83:0a:64:30:50:
         bb:02:58:35:00:b0:ea:22:24:b2:b6:74:4e:82:0b:e3:63:5b:
         cc:20:01:e5:ed:b3:72:10:e3:11:15:de:06:b3:17:36:c6:d2:
         3a:65:d1:b0:96:25:27:a9:df:88:7f:9c:54:d1:5c:25:c4:da:
         13:da:91:66:b2:88:1c:d4:ab:65:7d:9b:f0:9f:78:0b:0a:70:
         0d:b9:b2:e0:d2:dd:97:ff:c0:c5:21:34:ac:e5:31:9b:0f:4d:
         fb:f9:f4:b6:ee:e9:85:70:84:e7:dd:c1:37:3c:5c:91:78:0f:
         4c:03:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:04 2026 by rpki-client