Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File:                     2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier:          hJ5DLVFzFYApCHl+MljAKN2w1mUNQt4zgQNuUpq+CCM=
Subject key identifier:   B9:52:1C:43:55:6F:5A:7D:39:4B:4A:21:DF:C0:DD:E4:19:0D:EC:E4
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer:       /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial:       01A00137D684D2E33AA8F023FCD862EFDC79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number:          19FB
Signing time:             Fri 14 Aug 2026 17:00:31 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:31 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:31 +0000
Files and hashes:         1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: AKHOLG1Jryo6oLEeYwuXcfhPU8ngIeH+IbSZZD49gxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:d6:84:d2:e3:3a:a8:f0:23:fc:d8:62:ef:dc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
        Validity
            Not Before: Aug 14 17:00:31 2026 GMT
            Not After : Aug 15 17:00:31 2026 GMT
        Subject: CN=b9521c43556f5a7d394b4a21dfc0dde4190dece4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:65:78:13:c1:7b:fc:af:c6:07:4a:f8:ac:
                    32:7a:d7:81:76:f4:6b:fd:3e:92:12:d7:93:5c:83:
                    b2:ab:6d:6a:b8:0f:55:19:ae:88:d7:c4:6e:2c:b9:
                    cf:d9:28:f6:c2:27:fa:de:77:ce:3d:81:3e:5c:e4:
                    6f:6b:90:fd:de:1f:69:0a:7a:fd:91:75:4b:ce:aa:
                    ae:ed:08:13:f1:47:5b:51:e6:e3:ce:66:5b:e5:cc:
                    9d:6b:63:ca:d9:59:a1:50:4e:0c:f6:35:a6:c7:27:
                    b3:ab:b9:60:15:d4:f7:28:70:66:45:25:f6:87:3f:
                    b5:f0:8f:e7:e5:2e:18:9e:9f:4f:14:e7:1d:b0:2b:
                    0a:e1:05:7f:3a:7f:45:5e:0a:bc:27:55:7a:bb:9f:
                    06:95:04:9a:49:70:0a:26:7a:de:4c:ce:7f:30:55:
                    96:a7:cf:95:32:9a:f5:47:f4:d6:7c:b5:73:ea:16:
                    04:1f:20:a3:ea:d2:29:05:29:3c:6a:a9:32:bc:a4:
                    97:d3:62:90:cd:06:04:33:88:01:14:e1:5e:c2:7b:
                    3c:ab:33:b3:bf:43:3b:f3:68:65:dd:0f:31:2f:e4:
                    0a:15:37:5a:53:42:12:68:d8:fe:41:4d:74:c9:25:
                    94:2f:b4:43:3e:7e:ab:f9:63:56:be:0b:5e:d6:bf:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:52:1C:43:55:6F:5A:7D:39:4B:4A:21:DF:C0:DD:E4:19:0D:EC:E4
            X509v3 Authority Key Identifier:
                keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:e4:36:a9:e1:f3:39:b0:5a:5f:77:50:d3:14:1c:6d:0a:
         5b:67:44:5b:d5:97:fd:a3:50:5a:90:2a:4e:46:3a:1c:46:46:
         df:f9:ff:c0:02:09:22:58:ff:d5:b2:5a:b3:ef:29:01:6c:10:
         7b:4b:c1:dd:8c:db:72:75:71:ea:21:cd:e7:c4:20:1a:a0:8f:
         4c:74:46:a1:59:ae:25:e0:95:60:31:44:32:b4:59:9d:61:00:
         ad:5b:67:b8:bf:5d:6b:5f:a4:a3:cc:50:6a:4a:fd:cb:78:3f:
         e9:96:11:72:7f:08:f4:f6:27:27:78:51:c0:b1:97:39:ca:9c:
         aa:8b:ca:e2:64:06:a9:cd:f7:aa:4d:1c:58:85:14:03:74:60:
         b6:da:60:05:2b:12:77:96:17:cd:64:89:fc:6f:9f:32:98:29:
         b8:b5:3b:3e:86:70:74:c3:a5:16:39:16:72:9b:b9:06:aa:08:
         a6:37:2a:2f:61:0e:59:26:70:b5:29:99:75:f7:14:ec:70:cb:
         4c:43:9b:87:d0:0a:6a:dd:d9:c9:af:45:5a:e6:32:cf:be:1b:
         d1:66:b2:e9:39:a2:01:80:a1:7c:11:90:bc:f3:df:d7:8f:8c:
         c9:98:24:77:ab:b4:c0:a9:a5:09:f8:67:57:a6:58:15:b6:0b:
         18:07:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:57 2026 by rpki-client