Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File:                     2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier:          jdUzSSKsKe04BK4nW9Z2pH3tkSx8J8wP5P4X/tjiLSc=
Subject key identifier:   7B:8F:08:AC:CD:90:AC:9F:43:89:1A:98:A9:85:9A:E5:F1:C8:12:DF
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer:       /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial:       019F90FE8445023FB0F18AE47F34D2893555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number:          179B
Signing time:             Thu 23 Jul 2026 22:00:26 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:26 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:26 +0000
Files and hashes:         1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: a8jsAfOmQe2rCH5uIklz6ytKOR6wze5ON19hAamD5rY=)
                          2: jdHMVRkeTn1Nth9vlUo9BvR2wng.roa (hash: AAK6SfAISoxobwueyJaaBYkoMj4IspGZGMaQBhwb7VE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:84:45:02:3f:b0:f1:8a:e4:7f:34:d2:89:35:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
        Validity
            Not Before: Jul 23 22:00:26 2026 GMT
            Not After : Jul 24 22:00:26 2026 GMT
        Subject: CN=7b8f08accd90ac9f43891a98a9859ae5f1c812df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:54:f5:85:f8:df:43:2c:62:0d:0b:78:5d:
                    b3:16:ad:70:96:eb:3a:b6:c6:ed:0a:a3:27:7e:0c:
                    22:5b:6e:52:7b:c8:9c:c0:c5:87:62:de:7c:43:6d:
                    47:4f:12:2f:01:49:cf:d7:d8:2f:72:a4:b6:7e:5b:
                    56:f2:ca:e0:7f:c1:b6:2e:e6:6c:ca:1c:f6:52:68:
                    89:a5:28:10:55:57:aa:7a:50:83:65:be:08:70:9e:
                    9e:cd:05:dd:c0:a4:48:c6:d6:0f:30:c6:13:08:cb:
                    52:55:71:cc:30:da:37:a4:72:0d:5d:32:45:36:0d:
                    d5:fc:45:f7:a4:5e:c3:22:d4:8c:3c:0f:f4:8f:11:
                    c1:93:70:ea:fe:67:ba:24:c6:65:76:87:f3:c7:3e:
                    a1:ff:33:28:cc:33:c4:3e:ed:0f:1c:9c:81:e3:61:
                    7c:55:19:06:25:65:e9:0d:a9:d6:54:7b:70:95:ec:
                    af:b1:47:a2:16:0c:9c:ce:8f:7e:dd:44:03:72:4a:
                    15:d9:a2:ed:46:03:75:f2:1d:47:60:a1:dd:bb:f1:
                    f0:20:ad:9d:40:07:76:bc:84:46:ad:c7:34:81:49:
                    95:69:22:c3:e1:07:23:7a:d1:75:7f:f2:79:96:f9:
                    c8:76:77:b1:9f:46:92:bb:d4:d8:cd:97:e7:c8:bc:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8F:08:AC:CD:90:AC:9F:43:89:1A:98:A9:85:9A:E5:F1:C8:12:DF
            X509v3 Authority Key Identifier:
                keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:91:bb:e1:cd:a0:d6:36:74:19:20:18:da:a6:f8:ce:8f:36:
         c1:2c:ab:86:97:ec:ee:40:08:fe:22:f5:f9:b8:55:d7:d1:26:
         7a:36:0b:34:af:91:70:33:8b:a4:3c:11:06:f3:62:2c:39:2d:
         29:58:48:07:5b:1a:5a:7b:11:e3:e7:eb:90:98:6e:93:d6:2b:
         c0:c5:ea:99:f1:1d:4d:88:eb:de:38:2e:f4:bb:4a:9c:ac:24:
         52:06:60:e9:4c:0e:8d:8c:e2:63:46:0d:5a:0f:34:2b:b5:f9:
         00:8f:d8:67:1e:dd:f1:87:89:8f:06:57:b9:22:5d:44:29:28:
         f8:fc:65:15:92:04:e3:9f:79:b7:02:ee:1f:41:b5:4b:85:43:
         13:42:87:62:b6:4a:18:54:77:35:f5:a5:6a:d3:00:9f:95:89:
         95:92:65:e3:54:8c:cf:d9:df:98:89:96:79:6d:5c:e4:8e:c8:
         27:9d:09:a1:34:45:ac:57:e0:63:c4:c6:b1:7c:78:c9:04:c9:
         46:16:e4:d2:4b:2c:7d:fc:7d:7d:65:81:cc:3e:95:14:43:ba:
         5f:8a:8a:4b:ac:1d:d4:ec:46:b3:7d:a7:5e:b5:e6:df:3e:6b:
         f3:7e:03:93:52:97:00:b3:13:ba:3e:a9:db:3b:c9:a0:76:95:
         81:ac:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:27 2026 by rpki-client