Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File:                     2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier:          YpyIJ1seOlUI0ZnWsvATh53PJ20XuU6+1TVZIPAWUdE=
Subject key identifier:   79:48:8A:2B:21:D9:CD:1F:D7:BD:4A:66:F0:EB:5E:CF:5E:6B:B3:2F
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer:       /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial:       019EF2358A65A9258B6855F8CFEE24CB1827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number:          10CE
Signing time:             Tue 23 Jun 2026 02:00:55 +0000
Manifest this update:     Tue 23 Jun 2026 02:00:55 +0000
Manifest next update:     Wed 24 Jun 2026 02:00:55 +0000
Files and hashes:         1: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: hxVzePPMzaF5H5v8rbFw6QsQUiawgZnV3HEQ+T4KH94=)
                          2: 5O4Qywr4G5vGR4CnllsAHoHXE3c.roa (hash: 6B27b88IAgFkDxTqELlXG1aRObgI7R0ZM10hy8DvOwQ=)
                          3: WBH_fF6t3I2iXHzxgrxzCAX-XRA.roa (hash: cYtszWc1seVCwv311jPJcm6UWAtEmkWFzWyQin67xig=)
                          4: bfxZ3U8LPQDqD4igv8w1c53B7_g.roa (hash: wODIH/0xkpwmueRo+Rlw/VFlBWpKNaGnZK/vy02MrTM=)
                          5: bsYgzcPZezJ2gYbc8PKOspEFG4c.roa (hash: MpgIeeEXTiyIocenUfFnFL+sMDiBogWiOdN5+ESRb/E=)
                          6: e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa (hash: oC+ocV09AXnxKxFBaBEAaFvyphxKhACRBYHFRB7YC5U=)
                          7: g6sf18n3xZl1TALCvAHdOtQxRg4.roa (hash: xF4qc4vWFwiPiBXPNEqALg9dNoI0YkOYJ4CNgjIGAJ4=)
                          8: jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa (hash: FONWYkgA1dLto5X/Omv5HI8QNgMouzq0GwMPGBqkdRM=)
                          9: zyd8uSkjKcRLHzmFPeh-k40bdgw.roa (hash: Z+xUSGJvLfcezS9srOZIqvbsKOYqYqGNXUZ1rB4SeYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 21:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f2:35:8a:65:a9:25:8b:68:55:f8:cf:ee:24:cb:18:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
        Validity
            Not Before: Jun 23 02:00:55 2026 GMT
            Not After : Jun 24 02:00:55 2026 GMT
        Subject: CN=79488a2b21d9cd1fd7bd4a66f0eb5ecf5e6bb32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:58:6a:6c:d5:d0:58:3b:47:1b:02:f5:a1:20:
                    4b:03:fc:4a:e7:5d:ef:fc:15:5f:61:5e:75:ae:ee:
                    33:f4:32:97:e9:40:03:72:d1:0c:73:78:71:ae:5e:
                    5e:02:e6:f1:cb:e7:21:98:e7:fa:39:dd:62:66:83:
                    17:03:bf:c2:a7:e0:eb:6f:16:d2:bc:89:0e:4d:89:
                    e6:55:10:9a:25:35:0b:61:bc:22:37:51:6c:af:c0:
                    36:2a:85:c6:fd:c1:6c:8c:d7:ab:05:33:ee:d2:7a:
                    98:8d:71:ff:dd:fd:35:ef:ff:d0:78:90:d3:45:02:
                    df:5e:4f:67:5f:30:d9:4b:13:ff:4d:7b:d5:22:1b:
                    57:39:89:08:18:3e:37:35:47:ca:78:48:38:69:81:
                    12:e8:09:04:68:61:c3:41:0c:9c:87:dc:ec:66:b0:
                    ee:d8:d7:ca:b7:1d:17:ed:27:6b:bd:f7:c7:8a:9a:
                    c6:31:3d:7d:91:e3:3e:9f:cc:60:f3:c3:dd:77:68:
                    58:b3:3c:b6:07:b0:dd:ae:fc:89:78:8d:06:40:88:
                    6a:95:67:fc:2d:2a:bf:02:64:1c:d1:0d:e4:34:5b:
                    26:4c:27:3a:b1:69:d3:13:69:e8:82:6f:84:42:6a:
                    7f:9b:41:50:5d:aa:e0:03:b5:4b:dc:59:e7:6a:51:
                    c5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:48:8A:2B:21:D9:CD:1F:D7:BD:4A:66:F0:EB:5E:CF:5E:6B:B3:2F
            X509v3 Authority Key Identifier:
                keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7d:69:08:ef:18:78:95:5e:ba:57:b9:f9:b6:10:e9:0d:78:
         55:ca:51:49:e8:12:3f:48:f5:ad:57:e9:d0:c1:7d:ca:0b:c4:
         49:79:15:18:1f:5a:ce:cf:32:fa:f6:56:8b:49:4d:8a:84:81:
         a6:97:1d:2e:5c:cb:cf:95:27:59:5b:e1:47:00:84:d6:bc:7d:
         34:60:0f:84:7e:50:2d:41:e0:fc:a3:c4:30:2e:31:66:a6:48:
         68:b7:8f:b9:aa:ba:a4:8e:f0:e1:71:a9:87:05:d4:5f:18:17:
         70:be:cc:31:ca:38:4a:45:83:34:9f:3e:58:f6:63:9d:0b:ca:
         2f:a2:9d:da:bd:f9:e4:1d:0e:95:c3:0f:07:72:4e:2e:42:8e:
         e5:8d:22:d7:5d:02:48:3d:4b:8f:24:c2:51:0e:88:aa:ad:ed:
         b6:1f:cb:e4:c6:1e:70:e2:5f:9d:f3:e8:4d:f8:cb:da:b8:7f:
         0a:b5:63:e7:ee:bb:cc:22:b1:94:be:5b:f4:0f:b6:df:25:dc:
         cf:5c:ee:43:de:f7:a8:0e:6a:92:bb:b4:26:6a:61:7e:db:78:
         4d:a2:83:32:9d:6a:0f:9c:0c:5a:34:66:c3:e9:91:41:2c:db:
         48:52:11:ee:4d:64:a1:29:80:72:13:52:51:7e:ba:bc:8e:71:
         1f:11:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 06:39:26 2026 by rpki-client