Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File:                     2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier:          OL4fFGwtkCFeZ7JohfUqyku5PsKnNPbTr6fiUK+9S1k=
Subject key identifier:   FB:BC:AC:A6:79:D9:4F:AF:A6:4D:91:A8:61:1A:45:D5:28:E9:42:7A
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer:       /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial:       019E3072416DA9500BB4A3F63F7738815602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number:          1917
Signing time:             Sat 16 May 2026 11:00:54 +0000
Manifest this update:     Sat 16 May 2026 11:00:54 +0000
Manifest next update:     Sun 17 May 2026 11:00:54 +0000
Files and hashes:         1: 0LQRzIDRNUdWBd9Dydr2N_iC5jw.roa (hash: JhEvtgcGlQ0ucbJzBQZW4Y2YIF7BmFzYqZx6rOiR+Uc=)
                          2: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: /Bh9upPvyOhfEHOYnjx50al/pBlllooksNj2wWZ40Ao=)
                          3: 3wh0CT_8NfW3KeKbg66Zbntk-98.roa (hash: XNvg+YgzCvz98HEiUChpuE5wzEJ7vEAr5EwgyO9TGdU=)
                          4: 5XJ-DEXD7beUVnBEqtMJ7gNlRBw.roa (hash: aC0+p4R1V2InyynQLchWTNU+ke3PRpV6ML3PSthcq44=)
                          5: VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa (hash: Nbg44V0Y4hgBCfwuZPycL8mZRJRdH9RK2S/1UriBDlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:41:6d:a9:50:0b:b4:a3:f6:3f:77:38:81:56:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d894365b28a082834a751a97771b791124524dec
        Validity
            Not Before: May 16 11:00:54 2026 GMT
            Not After : May 17 11:00:54 2026 GMT
        Subject: CN=fbbcaca679d94fafa64d91a8611a45d528e9427a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:69:7e:1b:db:fa:32:c8:48:e2:4e:c7:a5:
                    be:0e:5b:96:96:3d:43:88:3b:68:91:a2:51:51:c7:
                    ac:a4:77:f7:ca:13:57:24:e0:2d:7c:3b:ac:8e:ca:
                    2f:78:23:cf:43:01:09:e0:13:30:a4:25:72:91:92:
                    3d:ee:b6:ec:09:4d:49:f2:ad:44:67:3c:80:68:e2:
                    5e:55:b8:bb:40:31:fa:98:fa:1f:a4:24:c2:21:65:
                    8c:96:6b:0e:20:0b:bb:7e:31:15:fb:6e:26:df:0d:
                    81:ae:25:42:09:ff:ae:9c:b9:2a:13:2b:da:e4:18:
                    27:fa:6e:1c:86:24:e7:ab:71:a2:67:d7:8c:9c:46:
                    9d:26:b9:94:fd:64:aa:f0:dc:37:ec:53:d8:3c:ee:
                    66:c7:c1:73:df:d6:15:23:7f:66:ba:98:ac:b8:d7:
                    3a:e9:42:71:64:09:4c:fb:93:ce:95:cc:80:31:55:
                    fc:48:a5:c8:c6:5a:c4:02:4d:8b:8c:29:da:1f:3f:
                    ae:63:6e:a9:59:4e:d9:d6:21:c1:31:25:a0:16:f4:
                    77:b1:85:68:bf:c0:61:41:c6:87:6b:fb:85:fe:2e:
                    5f:43:e2:e2:28:64:79:dd:e3:e8:43:11:a8:04:86:
                    a7:81:1a:28:34:d1:15:ff:b7:94:40:3c:80:8a:b8:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BC:AC:A6:79:D9:4F:AF:A6:4D:91:A8:61:1A:45:D5:28:E9:42:7A
            X509v3 Authority Key Identifier:
                keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:aa:cd:32:04:ab:7c:29:ab:4e:a4:47:6a:d6:41:56:4c:95:
         d7:9e:1c:34:2d:98:f7:01:cc:d1:f6:cc:7a:74:04:61:93:17:
         51:b7:37:62:d5:62:40:db:b7:8f:d3:74:3c:6b:c2:e3:ca:d8:
         41:b4:8b:ac:d0:ab:4c:82:2f:07:06:34:2b:84:97:7d:08:42:
         88:24:1a:b6:22:27:b0:25:c8:9d:3f:1b:12:d8:78:d3:c8:d9:
         dd:84:22:72:75:54:3d:af:8e:2c:93:30:d4:26:dd:96:f5:13:
         c0:4a:fd:a0:e8:39:36:ea:4e:a9:46:47:e8:29:67:4e:e7:1a:
         74:4d:f6:6c:46:ec:aa:63:71:6c:ae:a2:9d:39:f4:95:de:1d:
         cf:5e:3e:99:29:e5:3e:8a:4c:cc:9f:19:4d:58:ef:e3:ce:93:
         65:ba:99:59:fd:6a:cb:aa:6b:21:91:bc:af:28:68:59:0f:03:
         f2:02:06:d2:cb:47:0f:39:74:a0:95:f9:09:27:e9:1f:6f:ff:
         eb:72:6d:10:89:02:a4:1d:2a:67:b2:99:04:de:5d:46:9c:25:
         d1:33:3c:6a:7a:f4:30:62:f3:a0:28:74:0a:82:74:b0:f8:9a:
         a5:a1:d2:8d:68:eb:7b:1b:9c:67:b2:cb:6a:d4:0c:ac:01:55:
         f1:cc:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:47 2026 by rpki-client