Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File:                     2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier:          WKHUTUZqQfgec1MbEm+IDFHzP/4oTGMZ+SVBfza465I=
Subject key identifier:   F5:B0:38:25:1C:72:29:57:66:66:80:3C:98:FC:0D:15:62:34:92:92
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer:       /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial:       019E314DE978E3C4E459E2DFCB65F3A058F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number:          1057
Signing time:             Sat 16 May 2026 15:00:50 +0000
Manifest this update:     Sat 16 May 2026 15:00:50 +0000
Manifest next update:     Sun 17 May 2026 15:00:50 +0000
Files and hashes:         1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: H3FYDUGsmZCdJfww1IrP/RlHvU78M2tNh8qmad0IJlU=)
                          2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:e9:78:e3:c4:e4:59:e2:df:cb:65:f3:a0:58:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
        Validity
            Not Before: May 16 15:00:50 2026 GMT
            Not After : May 17 15:00:50 2026 GMT
        Subject: CN=f5b038251c7229576666803c98fc0d1562349292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:89:68:e6:bd:8d:ad:d2:e8:75:a9:18:63:
                    af:51:6a:5f:41:ba:5b:f4:af:3c:b4:3c:4f:6a:4d:
                    ec:1d:ea:1a:d2:32:74:16:a5:ae:38:0a:41:0d:59:
                    29:d6:df:68:4a:ae:0d:07:fa:cf:cf:a3:24:ff:4f:
                    3b:ef:d1:2d:ab:8e:f1:19:b0:36:d9:d7:ed:63:7b:
                    bb:13:32:0d:a5:cc:8b:5f:50:c7:4f:a8:c1:1e:18:
                    df:31:91:b6:97:be:7b:d1:e2:e5:db:38:df:c5:44:
                    09:71:d0:b0:9d:79:f8:d9:ba:1d:ee:80:df:6c:e9:
                    60:37:16:b4:c1:17:8b:82:79:fd:f1:b7:e6:69:92:
                    11:e4:30:c3:c2:ce:2b:3a:fe:f9:f9:b9:50:73:78:
                    cd:60:58:7d:71:81:68:c0:78:1d:a4:b6:de:14:be:
                    38:83:c1:4b:4b:29:02:cc:26:54:f9:03:ea:aa:24:
                    23:3f:8e:aa:2b:a2:79:5f:4f:1b:4e:2c:1e:2c:9c:
                    78:be:45:4a:99:68:66:22:1f:9f:66:93:1e:23:ad:
                    96:b6:a7:00:00:aa:20:65:e1:44:98:d8:66:b9:22:
                    0e:8f:e3:28:7a:69:1f:5d:b8:76:b7:d0:a0:4c:72:
                    62:e0:82:0d:32:b2:19:40:f1:f2:dd:2f:81:5f:db:
                    31:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B0:38:25:1C:72:29:57:66:66:80:3C:98:FC:0D:15:62:34:92:92
            X509v3 Authority Key Identifier:
                keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0d:6e:90:df:bf:d0:9a:7d:cd:76:93:f5:19:6c:4c:0d:36:
         1b:99:02:ce:a6:3a:21:78:61:8a:94:a7:d8:02:60:3e:d4:ff:
         f0:14:29:25:1a:d9:6f:55:64:33:8c:10:46:c2:20:01:26:3f:
         e8:7f:bb:76:3d:f6:a5:b5:b0:8d:65:86:3d:14:48:c2:3b:65:
         d7:34:a9:a5:84:33:7c:5a:18:11:6f:f2:01:a4:21:f2:97:2b:
         32:35:03:e0:d3:dd:f1:b7:9b:ee:a8:77:bc:23:c3:04:45:9c:
         6e:6c:4a:2c:d3:bd:8a:fb:35:fa:78:59:a5:b9:32:c0:b0:d6:
         2b:38:45:30:08:6a:41:85:56:9a:91:ce:ce:ce:c6:cc:c4:90:
         58:aa:df:2b:c9:94:d4:6f:70:99:65:20:57:da:de:81:a3:ed:
         07:20:f7:15:d7:db:15:17:b3:3c:9e:46:e2:96:15:6a:97:83:
         2b:6d:79:22:8e:71:49:53:b0:d6:28:28:73:df:20:45:de:e4:
         69:79:f1:32:4a:20:c3:e2:78:88:66:17:50:1d:ab:c7:4f:51:
         e4:2a:a9:88:81:32:73:d5:2e:51:cc:24:fc:c4:9b:38:ba:ba:
         be:0f:9a:e4:82:75:3d:31:b2:7a:28:08:84:21:09:48:99:a5:
         f2:7b:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:05 2026 by rpki-client