Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File:                     2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier:          rfu290YEDbwncIAITwXi3wOq+6yvW407QuZZ9De3Au8=
Subject key identifier:   F0:B8:F7:40:1A:C6:1A:C8:F6:DB:40:C7:2B:6E:02:4C:75:E5:11:57
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer:       /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial:       019F178C1D64FE32325988A07AABB4366031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number:          181F
Signing time:             Tue 30 Jun 2026 08:01:26 +0000
Manifest this update:     Tue 30 Jun 2026 08:01:26 +0000
Manifest next update:     Wed 01 Jul 2026 08:01:26 +0000
Files and hashes:         1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: xUH+ioFCvk05FMWULm5xzpoeZ7RX+TiT2FEgjKSi/OE=)
                          2: BHIfo0SUvriKZsyFCXiSME1_wPg.roa (hash: yw3xzgJDYvAe05HAZHE3RD577H1UTSvrT/Xm9tpbxKg=)
                          3: NEY5wfu3YaOf5Irv9ZAeXPNHZK8.roa (hash: k4M73AdKqWqWSQkTMso46G2VUYiguHQrtP/UOxmaNHc=)
                          4: f_5vf3q7C7ELxTwv6wBQUewDWgw.roa (hash: O4+DioXtLDVmGcPO2WyW0jSnAleYxRmF3dcn2FLUeDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 08:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:8c:1d:64:fe:32:32:59:88:a0:7a:ab:b4:36:60:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
        Validity
            Not Before: Jun 30 08:01:26 2026 GMT
            Not After : Jul  1 08:01:26 2026 GMT
        Subject: CN=f0b8f7401ac61ac8f6db40c72b6e024c75e51157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:d5:a7:23:51:29:a7:84:bf:fb:3a:9d:aa:
                    8a:e7:29:b6:9f:ba:2e:da:42:64:a6:84:3a:68:ff:
                    a0:b0:40:c9:3d:77:d5:ee:d6:75:5e:4c:95:c9:55:
                    28:aa:9d:ff:be:0e:42:61:e3:5d:fd:64:eb:e0:f2:
                    6e:7a:ee:e4:90:02:94:0c:cf:37:42:76:b7:b1:31:
                    fb:50:6e:72:0c:66:6c:7a:6a:5f:ee:59:a5:fd:24:
                    e7:ce:ad:f0:41:a4:70:2a:6a:10:cd:00:05:05:ba:
                    84:75:2f:08:e8:bd:0b:65:e8:12:17:78:1a:b7:82:
                    69:07:1f:54:e2:fb:57:ef:66:50:34:ed:23:9d:e8:
                    c5:ce:cc:b9:be:ea:73:0c:78:67:94:8d:be:96:7f:
                    84:1f:fc:55:5b:3e:4e:fa:e7:c0:e5:d4:54:ad:7d:
                    7a:f7:36:e1:ef:e6:e3:59:86:db:3e:42:01:29:80:
                    64:81:1a:3d:e5:6a:e4:ae:2c:52:fd:c6:ea:c2:89:
                    49:6d:1b:0d:c6:56:88:1f:5c:25:ee:d6:5d:46:97:
                    6d:65:97:f2:29:93:58:ea:7c:ce:c3:07:eb:c9:8d:
                    79:ef:ac:6b:89:bf:40:26:9d:b4:8c:93:ae:22:27:
                    1a:98:a9:13:c6:0a:7a:d4:35:e9:61:52:d1:bd:fe:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B8:F7:40:1A:C6:1A:C8:F6:DB:40:C7:2B:6E:02:4C:75:E5:11:57
            X509v3 Authority Key Identifier:
                keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:4b:d7:9e:0e:35:c6:1c:41:c0:67:47:e8:68:fa:ba:b5:47:
         27:45:2f:e5:dd:21:84:b7:cd:8d:34:c2:21:db:ea:e8:2b:3a:
         29:e5:e1:58:aa:c5:1d:6e:56:9a:64:d2:ab:e6:99:12:03:1f:
         bd:ff:b4:d5:04:d8:35:aa:1a:d5:41:af:f7:fe:89:d9:9b:21:
         a0:f8:0f:5c:98:cb:4b:81:69:54:d6:93:d4:74:13:c4:4d:17:
         f7:18:5a:55:76:bb:c2:9f:c1:12:6b:7a:38:63:7f:b7:b8:73:
         cd:00:b1:4b:ce:b2:0d:ba:e9:fb:6b:e0:9f:74:9b:7b:96:12:
         c6:22:4a:a3:7e:62:a0:d7:2a:c3:3c:66:d6:69:92:4d:a1:00:
         19:b0:ba:2c:06:9e:a8:1f:38:3c:c5:e0:a0:4c:ee:bd:b1:91:
         5b:0c:e9:12:7a:a8:40:17:ed:df:3c:2d:f0:1d:da:49:5a:6b:
         c4:46:45:da:f3:84:88:3b:a0:7f:4b:c8:e7:29:9f:8d:ae:33:
         bc:5d:69:1d:68:8e:44:9a:1c:e2:23:31:d0:bf:8c:54:71:cd:
         95:cc:10:14:30:f7:61:a4:fb:2e:c3:d2:c0:c9:91:85:12:0f:
         c4:da:b5:e9:01:9f:e8:82:55:77:db:d6:dd:0b:ac:ad:f5:1b:
         92:41:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:09 2026 by rpki-client