Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File:                     2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier:          d/8qGgEMlr96DHOwy1g3F2N+OM2uEU4F+qoW4E9Vc1c=
Subject key identifier:   6E:59:18:18:72:18:2E:EA:E5:F9:D0:EF:97:72:BA:2B:AE:20:A1:46
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer:       /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial:       019E1EDA50887EA3B92207F1B072F0183FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number:          0C35
Signing time:             Wed 13 May 2026 01:01:24 +0000
Manifest this update:     Wed 13 May 2026 01:01:24 +0000
Manifest next update:     Thu 14 May 2026 01:01:24 +0000
Files and hashes:         1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: XcB2w3rHeVPPF45NrksWM2RLmj8EFjYYYehk2Bv2jdQ=)
                          2: 3oec_TyMXwngpMvuUxwQnKRoElI.roa (hash: TFcbDBit8LDG31OcoB8NyufVnMw0bC4YlIBYjbX5HV4=)
                          3: _PXhlZCjQvwPQ3-H5--9ECU2Un8.roa (hash: +OxXVp7CCvXwGvmdylv8hYCUGBTiCJtYUdC1nBHjCGU=)
                          4: nmUEueZ47VwZ2p45WO9IB9LwnHc.roa (hash: 7G7DGRCra0g7DJS2A+f3DeEW4sjpq81WtiS6g/X3UCM=)
                          5: sFonxK-Y58VpBEBeRzqHkdF8ojA.roa (hash: 3844hgTnl1FX+Rx774ovA6z2yPS2q62u+c8Vt6GI/5E=)
                          6: sblOD2Vnvdytv3EIv9Vs60T4k3I.roa (hash: U7h62eJV7fkX1a8W7lVZLKsNdCq8SUyqds6Fc3ndSXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:50:88:7e:a3:b9:22:07:f1:b0:72:f0:18:3f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
        Validity
            Not Before: May 13 01:01:24 2026 GMT
            Not After : May 14 01:01:24 2026 GMT
        Subject: CN=6e59181872182eeae5f9d0ef9772ba2bae20a146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:a6:18:1b:da:ce:38:f8:11:c3:86:73:ee:
                    2d:1e:f9:5a:82:4f:ef:67:b4:f1:09:40:0d:af:ce:
                    68:c9:5e:77:a4:98:6b:bb:04:a2:45:93:30:11:16:
                    97:a2:8f:36:76:d5:a9:e3:cf:5d:46:ca:68:a9:74:
                    45:9e:97:5a:6a:36:c9:a8:78:91:14:48:9a:9d:f3:
                    ff:86:e5:ae:f8:29:50:e5:ac:b7:79:23:69:50:55:
                    98:81:5d:0c:51:71:e7:5c:5b:d6:01:83:80:45:e5:
                    97:d1:f9:44:45:14:dc:c2:48:a7:72:b9:d1:93:80:
                    7d:b2:22:6a:58:49:6c:4a:ac:84:5d:83:22:6a:27:
                    3c:39:45:5a:f5:b9:65:88:f8:2b:0c:5c:63:e1:0e:
                    12:66:3c:f0:67:a3:a4:65:c9:b3:65:3d:ed:da:1e:
                    b2:4b:38:7f:44:69:0e:2b:a8:8a:9b:ed:56:29:df:
                    03:55:58:8e:4e:58:c3:0f:a8:97:d6:99:f2:77:0b:
                    2f:35:cf:a2:a0:5d:7e:bc:99:11:ae:b9:96:51:db:
                    13:8f:64:3e:54:39:64:d2:57:f1:3a:9e:aa:f1:87:
                    c8:65:08:ec:15:7b:12:ed:46:b5:e0:f0:a5:12:0e:
                    34:1d:f3:1f:50:f0:d4:42:0f:04:8b:92:e7:10:c6:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:59:18:18:72:18:2E:EA:E5:F9:D0:EF:97:72:BA:2B:AE:20:A1:46
            X509v3 Authority Key Identifier:
                keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:57:6e:e4:ec:f0:63:39:1f:76:a7:f6:05:c0:4d:d6:00:fd:
         65:de:fb:84:a2:a3:aa:b1:df:13:3b:78:8b:d8:74:7a:a3:0b:
         7c:a7:cf:8e:04:24:66:41:1b:e4:82:99:71:bc:6d:cf:78:61:
         75:49:30:0d:c2:de:51:2d:23:39:42:4c:e7:62:cf:e8:c0:35:
         7d:8f:5b:62:d4:8e:9d:15:8e:c2:a9:75:e0:76:0b:5e:b0:1c:
         ea:a2:11:94:83:74:53:15:42:35:1c:5a:e7:10:20:57:a9:fb:
         df:58:0d:22:60:fc:82:d5:f8:09:46:59:9c:fb:88:95:03:e9:
         8f:ef:e7:9d:38:fd:fa:84:06:40:c5:57:ec:a2:ac:73:34:14:
         48:dc:19:01:5b:b6:50:c7:79:a0:c1:66:3b:c7:3b:a5:54:9c:
         4a:53:d5:44:2c:c3:68:50:dc:a3:c0:69:be:d9:d1:a0:24:7b:
         24:d9:0e:77:6c:7b:c6:1e:a0:38:bf:8a:07:66:8d:2d:af:73:
         45:3f:89:aa:08:b5:88:7d:df:01:1a:aa:c7:28:f1:72:6d:17:
         a5:10:7b:df:83:28:3e:ba:2b:50:12:57:39:64:47:6b:bd:2e:
         a6:5f:d7:ef:f0:68:1d:ed:c9:81:97:2b:20:cd:41:74:ed:eb:
         24:9b:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:41:10 2026 by rpki-client