Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          v8vFRfQxG4mQtrh8SzsFiuzoy4VCpG93J9AFy4M+Gxw=
Subject key identifier:   46:84:0B:81:C1:60:96:63:86:4D:21:67:0C:AD:1F:67:B9:E8:69:5E
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       019EB84558E32E75EFD6BE48AF23EBC08154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          1655
Signing time:             Thu 11 Jun 2026 20:00:12 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:12 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:12 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: ZeGUdRPhJPnwBz6/BGX4jcpHRieHMi594gCuasJOtF0=)
                          2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
                          3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
                          4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
                          5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:58:e3:2e:75:ef:d6:be:48:af:23:eb:c0:81:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Jun 11 20:00:12 2026 GMT
            Not After : Jun 12 20:00:12 2026 GMT
        Subject: CN=46840b81c1609663864d21670cad1f67b9e8695e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e8:82:86:51:6a:17:a4:4c:47:df:4f:d7:3f:
                    94:30:0c:c4:8f:cb:af:f0:1f:94:a8:ec:4c:95:6a:
                    3c:96:8d:d2:ec:46:f1:3e:13:4e:f9:d6:1f:f7:31:
                    5d:9d:ed:16:ad:38:b4:07:07:1e:65:70:04:17:c7:
                    06:03:db:90:42:4a:99:1d:1c:29:22:7c:22:aa:1b:
                    3d:d5:7e:aa:cc:a3:63:2f:6e:a8:60:8b:bf:a8:a4:
                    44:1a:07:96:78:dd:00:39:80:02:11:dd:1b:51:71:
                    68:18:57:26:8c:d1:a5:68:cc:cf:59:f1:3b:5c:b3:
                    21:ab:3b:75:28:17:c0:13:d7:70:03:34:5a:89:c2:
                    23:ec:0c:bc:f7:25:42:9d:5e:7c:94:38:a7:2e:d6:
                    15:3a:9f:51:7a:cd:1f:41:8f:6f:fb:89:6d:39:78:
                    ce:42:95:dc:0d:60:dc:71:ae:be:70:fd:70:d8:1e:
                    00:d9:29:30:09:54:98:db:03:06:db:1e:ff:e5:fd:
                    8b:5c:1f:79:83:cd:b5:e2:97:21:98:50:21:e5:69:
                    11:2b:df:3e:d0:5c:e1:f0:72:60:a7:77:95:21:ab:
                    7e:e1:b4:da:7f:9c:72:ae:fc:45:fe:10:4b:9d:98:
                    c9:7f:ee:0e:c8:d5:e1:53:fc:b0:47:33:fc:5f:9b:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:84:0B:81:C1:60:96:63:86:4D:21:67:0C:AD:1F:67:B9:E8:69:5E
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:5f:79:6b:47:ff:fc:75:93:06:ed:39:bf:9f:15:e8:c9:3c:
         b8:ce:a4:f4:a3:34:cf:b8:7f:04:27:78:4f:00:fa:00:79:bf:
         92:23:d8:05:49:1e:df:b5:86:e9:54:d6:9e:79:4f:e8:e5:83:
         5e:2b:d8:b8:fd:82:ff:dc:54:33:61:f5:14:da:39:37:af:77:
         9b:20:f5:ed:cf:ae:5e:b4:56:e5:52:5a:10:4f:3e:5f:d1:9c:
         cb:3a:c3:16:13:04:04:09:79:cc:98:71:99:8b:cc:9f:db:9b:
         51:0c:b3:cb:6a:c5:a7:2b:8d:44:75:09:7a:94:51:31:b5:5f:
         9c:de:0a:29:6d:42:28:08:f3:a3:75:13:23:b6:5a:9b:9e:70:
         0c:32:06:5e:ff:c8:96:12:d8:b7:af:f6:0e:15:f5:bf:03:95:
         dd:82:16:84:c9:12:d6:e6:40:cb:26:d0:db:14:7f:8a:d2:4b:
         6e:06:09:35:2f:4f:ce:64:58:fc:f1:ec:43:fc:10:44:2a:9f:
         81:a9:80:06:8a:13:73:34:3c:b2:2b:b6:b7:59:a1:d0:f5:5e:
         ed:2b:a7:f3:0e:a6:c5:d0:c1:93:5a:92:b9:ed:d5:6f:0a:d3:
         90:b5:8c:6c:4f:63:bd:f6:73:1a:8a:a7:eb:42:df:c2:b7:18:
         da:e1:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:19 2026 by rpki-client