Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File:                     2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier:          JY1hHE8zFo+qsnmOgHQ936YePhDz6wk2OFl/ocg0jSQ=
Subject key identifier:   D2:D1:D0:2C:A4:76:B2:1C:BB:36:F3:37:5D:D6:62:4C:9A:76:F3:3C
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer:       /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial:       019E307215D342AABAB909E94CBFCF942991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number:          1381
Signing time:             Sat 16 May 2026 11:00:43 +0000
Manifest this update:     Sat 16 May 2026 11:00:43 +0000
Manifest next update:     Sun 17 May 2026 11:00:43 +0000
Files and hashes:         1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: RDXYORXkiGaRNOkgaNp9wHLgcVeoEWl6wAu5Pz3v0A8=)
                          2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:15:d3:42:aa:ba:b9:09:e9:4c:bf:cf:94:29:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
        Validity
            Not Before: May 16 11:00:43 2026 GMT
            Not After : May 17 11:00:43 2026 GMT
        Subject: CN=d2d1d02ca476b21cbb36f3375dd6624c9a76f33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:eb:89:a3:a8:c1:8c:24:17:5e:f8:97:6f:
                    2e:74:b5:d2:e9:c8:e8:74:e4:e2:7d:11:38:b9:41:
                    2a:c4:76:0d:5b:20:1c:c0:e1:fa:26:07:df:b0:c3:
                    d0:ae:35:6d:40:a4:d2:98:c6:55:ce:b9:7b:e5:51:
                    34:83:fa:71:10:a1:94:8c:eb:d4:5b:6f:68:d0:1a:
                    84:f4:bc:ef:e8:62:ce:1e:2b:62:ae:25:36:96:f5:
                    d9:db:68:f2:13:ae:bb:b3:da:ee:4f:d8:23:36:a1:
                    61:66:82:7c:6d:1f:48:1e:1c:60:3c:d1:09:17:9b:
                    c4:d2:d3:80:88:4f:e4:cf:84:8c:7e:1d:c3:4e:c4:
                    dd:73:c8:11:de:53:12:80:99:41:21:86:77:e4:eb:
                    da:77:b5:f9:6d:58:b7:18:8e:a6:dc:7a:43:e3:a2:
                    40:2c:a6:de:66:6b:26:f1:2c:a7:eb:f5:0e:51:5e:
                    c7:69:27:01:59:5a:d8:6e:2d:0a:f4:ed:cb:b4:0d:
                    82:c1:04:92:4a:09:d9:bc:22:59:c2:71:04:5b:37:
                    88:28:55:2d:d7:a1:2c:0e:c9:a6:f2:3b:fb:59:86:
                    9a:77:40:86:77:3e:81:88:6f:c8:9f:ed:5e:15:39:
                    c9:b9:47:b2:87:eb:19:f0:e7:fe:7c:bb:8b:6b:66:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D1:D0:2C:A4:76:B2:1C:BB:36:F3:37:5D:D6:62:4C:9A:76:F3:3C
            X509v3 Authority Key Identifier:
                keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:75:dd:d5:52:f1:04:f9:ca:ce:10:37:b1:99:7d:60:99:
         96:99:4e:7b:dd:b8:0e:ef:11:e0:cf:50:25:0d:ce:1e:bc:5e:
         83:32:07:3f:8e:fb:f1:3d:0d:a7:c0:66:7f:7c:b8:91:8e:ea:
         ba:12:c8:b6:00:1e:4e:2c:ba:95:b0:e3:67:97:94:b8:4d:44:
         b6:bf:fe:ca:5d:30:55:25:99:1f:91:18:d1:9d:bc:7c:55:8a:
         76:4f:08:d7:46:50:a6:d6:9e:fb:41:e4:e9:a0:e8:a3:80:d0:
         95:ea:5a:53:f1:b3:66:fb:ac:c6:ac:be:3e:dd:39:7d:c7:83:
         c7:62:2f:a3:ab:6a:f5:5f:4f:be:cb:fb:94:68:f0:25:46:f3:
         84:dd:5e:53:3c:27:a0:08:d3:81:de:77:c9:b1:1e:0c:d2:15:
         73:88:ed:b5:f8:dd:85:aa:f1:43:94:f3:d1:43:aa:34:47:76:
         22:2c:cc:eb:6f:f9:3f:37:c0:39:32:2f:ab:80:b0:48:c0:47:
         df:4a:f3:ab:3e:0f:9e:a5:e3:bc:b0:73:7f:1e:8f:4e:48:2e:
         91:53:06:17:f3:63:28:c4:e4:14:d0:e3:36:f4:1e:89:e3:fa:
         3b:99:e9:5a:0a:ce:d7:a8:7c:0d:0a:93:55:9b:05:c8:ea:c7:
         17:be:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:37 2026 by rpki-client