Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File:                     2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier:          0wLnEMoFXRLQwwMOMl0E/L2NsdbqYIm71p/y3/vND0Y=
Subject key identifier:   DC:8E:E9:C9:0A:F5:CD:6C:A9:D7:3E:DC:08:BD:69:1F:D2:35:76:5B
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer:       /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial:       019E303B51C7AD8EF54D3B6307BDEDD0C941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 10:00:54 +0000
Manifest this update:     Sat 16 May 2026 10:00:54 +0000
Manifest next update:     Sun 17 May 2026 10:00:54 +0000
Files and hashes:         1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: 6V8LHxKItYA5pSk5Mo6D1gIW4CrX01FB55wBBh/so7o=)
                          2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:51:c7:ad:8e:f5:4d:3b:63:07:bd:ed:d0:c9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
        Validity
            Not Before: May 16 10:00:54 2026 GMT
            Not After : May 17 10:00:54 2026 GMT
        Subject: CN=dc8ee9c90af5cd6ca9d73edc08bd691fd235765b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:5d:3f:4f:bb:b1:24:69:9d:39:3f:ec:c8:
                    36:15:d3:fd:16:3a:cb:62:83:53:54:9c:71:51:59:
                    6e:3b:58:29:01:6c:f1:53:f4:ab:28:4e:65:be:ef:
                    5e:f3:4c:6e:5f:7b:78:77:e9:ed:51:cb:25:f4:57:
                    8e:37:b3:71:15:29:06:d2:3e:27:88:67:34:61:d2:
                    41:7d:80:8e:33:b4:11:fd:51:3e:a9:8e:80:89:61:
                    ed:e8:67:29:b0:cf:b7:c4:fb:c8:5f:af:a9:80:07:
                    bc:39:26:1b:0a:57:b0:c3:16:99:fe:fd:22:df:66:
                    24:78:75:39:1e:e9:f8:06:ff:52:55:9a:47:2e:55:
                    a7:98:cf:b9:e5:a6:4f:db:24:10:60:71:3f:73:1d:
                    5c:d8:52:51:10:03:14:6f:a8:ff:8e:7c:3c:3f:b3:
                    de:2e:5a:fc:dd:7f:43:be:23:02:ef:76:65:57:9d:
                    ed:08:15:2f:55:73:5a:0f:8a:e5:ed:8e:ba:33:13:
                    aa:cf:ad:80:9c:0d:d2:58:37:5f:b1:d7:cb:ab:eb:
                    2b:93:53:ac:95:c1:ed:a3:ac:18:e6:f1:26:ec:ff:
                    3d:dc:64:d9:b7:3a:6b:cd:3e:35:ae:ad:39:05:a0:
                    9e:17:2f:15:f9:0d:8b:90:10:c3:b4:61:05:54:42:
                    eb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8E:E9:C9:0A:F5:CD:6C:A9:D7:3E:DC:08:BD:69:1F:D2:35:76:5B
            X509v3 Authority Key Identifier:
                keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:28:59:25:a8:c2:67:12:23:02:2e:db:4f:ec:a0:90:f0:79:
         fc:fd:2f:00:54:c3:5d:03:93:d1:6a:aa:e3:70:e6:0a:9b:9b:
         88:f2:a7:57:aa:bc:82:a9:18:ee:9d:68:5e:92:a0:40:ae:da:
         3f:93:bb:83:e1:01:8c:f1:cc:94:92:a1:e8:27:aa:99:76:e2:
         55:33:26:2f:88:5e:55:89:9c:2f:b4:e4:23:2c:ee:71:13:6a:
         14:db:fa:bf:f4:2c:be:03:89:93:68:6f:fd:d1:d4:85:bb:f3:
         09:f4:88:9c:9a:6a:b3:d0:23:0a:81:c2:f7:7d:d0:7f:ba:03:
         90:af:00:c0:88:b6:a8:bf:1d:f7:ce:83:33:9b:3d:95:b6:b3:
         75:8a:3f:7c:04:2b:c6:32:af:38:d1:bc:36:8a:c5:af:97:ac:
         5e:aa:fd:1f:8d:bf:35:c7:af:a8:0c:36:7b:f3:56:df:cf:97:
         e6:95:94:44:05:5c:13:cc:e8:85:d4:28:1a:c0:f8:b0:75:f6:
         ff:46:ab:10:a8:79:27:3c:cd:37:d6:5e:70:17:b1:d5:ce:13:
         34:df:04:ff:e3:8d:2e:c4:68:ed:64:36:f8:52:8e:ad:a9:2b:
         5c:7d:57:00:26:91:1c:b8:ff:64:41:cf:cb:08:03:22:f9:5e:
         1b:cf:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:13 2026 by rpki-client