Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File:                     2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier:          fpWGZG4DSjhSrIGBFnjqk1Ls8xDfILgiF5S3R9i4Tog=
Subject key identifier:   84:58:24:2D:32:BE:A2:98:88:BC:DE:93:5F:85:DC:EB:34:D4:C3:45
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer:       /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial:       019F178C5575C3F2702CA6C8D4727D45A638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number:          16A2
Signing time:             Tue 30 Jun 2026 08:01:40 +0000
Manifest this update:     Tue 30 Jun 2026 08:01:40 +0000
Manifest next update:     Wed 01 Jul 2026 08:01:40 +0000
Files and hashes:         1: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: WW1fg9hn2HfIM0bSV3UwzjKh+DHNpmcaRCoXD5btaK4=)
                          2: C_DCfRSN7oCVV67q6bLzPSt0SX0.roa (hash: tuuEyNKdU6FCNvpWoORJaYe7wS5Tgy0s63MOjepUKAA=)
                          3: F6ItjWva3f1OheuFpaWQqZIl8-A.roa (hash: k0FVOFBY6Wpq6IM4bLDDBEm5uiTQoudoYWJB3bMH7aY=)
                          4: GcPrPHGVncEuFnODCW4ngX3ZQE8.roa (hash: 9U3tDv9Npae/FEnqBXW/Bi1yx4I34R4F2zK1MTG5y2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 08:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:8c:55:75:c3:f2:70:2c:a6:c8:d4:72:7d:45:a6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
        Validity
            Not Before: Jun 30 08:01:40 2026 GMT
            Not After : Jul  1 08:01:40 2026 GMT
        Subject: CN=8458242d32bea29888bcde935f85dceb34d4c345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:ba:2b:b9:9e:ff:c0:51:5d:c5:d3:16:59:
                    68:c3:6e:96:c4:97:0a:a4:98:50:0c:b1:e5:9b:78:
                    23:08:7b:d5:e8:7a:c0:cb:c9:43:1f:f8:c7:66:1f:
                    cd:93:34:99:8a:0b:fd:52:b5:fb:1c:bb:e6:44:3b:
                    3a:fa:8a:04:57:6a:c3:eb:e5:2b:fa:77:53:22:bb:
                    fb:c1:1c:5e:d3:11:f6:ce:16:91:ed:ff:3f:f9:e2:
                    20:c1:52:ff:70:22:e5:47:25:fd:5b:aa:54:a3:39:
                    39:b3:ae:a0:04:8f:8e:17:df:29:bc:b0:12:64:8e:
                    2e:dc:26:ef:05:67:24:fe:35:2a:7c:70:98:f5:ad:
                    31:38:a2:64:5e:a5:2f:35:bc:e8:38:45:df:8f:e6:
                    11:a7:dc:f4:b8:21:9e:c9:ba:5a:99:d0:fc:9c:63:
                    da:9a:20:d2:02:a5:41:44:c6:5b:ba:2e:12:33:ac:
                    7b:b9:54:df:5e:d9:48:68:78:92:99:e1:05:63:a7:
                    e5:5d:6e:0a:45:1b:b0:65:2e:21:d4:c3:db:0b:c6:
                    29:4d:f6:0d:45:ef:a9:8e:12:f5:77:b9:d9:e0:e1:
                    85:dc:22:5f:34:2e:b0:38:50:9f:17:8a:60:0a:53:
                    20:d9:84:ea:ff:65:34:05:f4:e4:a3:85:8b:05:f3:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:58:24:2D:32:BE:A2:98:88:BC:DE:93:5F:85:DC:EB:34:D4:C3:45
            X509v3 Authority Key Identifier:
                keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:18:fe:7c:8f:2e:6b:ec:64:df:71:50:50:6a:52:9f:f0:e0:
         03:f8:c6:37:3a:de:5b:92:48:a8:d9:e6:65:2f:3a:df:4d:3f:
         a7:ca:c9:75:6e:c5:1f:f4:a7:d1:df:f9:96:ae:2b:e4:7a:da:
         38:3d:58:50:73:e6:8a:98:63:28:8e:a3:f4:02:87:c5:76:1f:
         ff:10:e3:a8:b6:de:2d:79:dd:11:0a:6f:c0:8d:c1:9f:63:de:
         70:85:b2:5f:e2:76:9a:81:ec:82:6a:c7:64:5c:80:d4:a0:0a:
         2b:38:28:52:32:3e:7f:88:cc:cc:53:99:0d:0e:bd:fc:60:b5:
         d1:4c:b4:70:bf:df:9e:ad:3c:22:11:06:84:e7:67:32:26:c1:
         a6:c9:9e:2c:8d:4a:19:9c:0a:02:a6:a4:17:41:f6:3a:62:26:
         dc:04:97:dd:e3:67:1a:5a:ff:84:e3:c5:8b:01:fa:10:f7:2c:
         8e:74:0f:3b:69:a1:9f:52:59:42:32:15:43:d1:70:7e:cd:59:
         10:ab:3d:83:d5:ea:fa:49:27:59:9b:ee:cb:7c:df:af:f0:1b:
         c6:78:9f:59:5e:a2:a4:41:db:0b:01:b6:70:d1:2a:eb:4e:c5:
         a7:9a:a4:37:ea:a3:5f:2a:cf:3a:02:74:21:d5:17:d1:de:23:
         96:63:a4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:15 2026 by rpki-client