Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File:                     2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier:          nSaV2rOrbtChEfwR/8uWDAvjHVb9JCPBtgMk+ccfb9o=
Subject key identifier:   8F:95:F0:8F:18:56:FE:ED:DC:F5:F3:33:C6:9B:FE:9B:6D:99:FA:4D
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer:       /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial:       019F8F10E361C5F2B1AE083F027DD1D99E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 13:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:16 +0000
Files and hashes:         1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: X50Cit50pfHNH0LmshED2s8wNq5aaZ6Z6G5rC063Vmo=)
                          2: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (hash: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:e3:61:c5:f2:b1:ae:08:3f:02:7d:d1:d9:9e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
        Validity
            Not Before: Jul 23 13:01:16 2026 GMT
            Not After : Jul 24 13:01:16 2026 GMT
        Subject: CN=8f95f08f1856feeddcf5f333c69bfe9b6d99fa4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:47:67:5e:98:95:d7:19:b9:51:09:a8:30:61:
                    af:ca:2e:31:30:65:2d:de:41:8d:8e:12:5d:a0:32:
                    7d:2b:7a:94:fe:19:ae:e0:0d:63:20:10:7f:9a:c4:
                    10:84:e4:cf:3a:d0:df:a7:f9:e1:11:bf:57:e9:07:
                    c0:74:5f:8b:41:9e:9d:4e:80:68:73:95:0e:7e:9d:
                    d1:5a:35:e7:e4:52:f7:bf:e0:f4:ef:1c:9f:aa:2d:
                    4c:cf:fb:cc:ab:0d:26:bf:e5:7e:21:3e:66:31:64:
                    9c:35:ed:0a:bf:51:2d:5e:09:a9:38:2c:71:e1:8c:
                    41:d4:26:05:08:ce:20:ae:5a:5c:55:d7:97:83:f0:
                    e2:19:93:f7:7c:fa:00:ca:bc:2a:09:cc:1a:2a:0d:
                    71:2a:4c:78:3f:db:c0:4b:f4:ed:6d:ab:82:d8:8d:
                    26:8c:4d:d1:4c:ef:3e:46:ff:3b:89:b8:85:b8:7e:
                    ad:98:2a:06:ee:0b:4a:7e:3f:24:2e:3d:6f:0b:fa:
                    f1:da:13:1f:3b:05:b4:b8:fb:12:91:e5:58:b3:d9:
                    43:ce:9d:6d:ad:f2:dd:f7:11:65:8c:89:9c:d4:a8:
                    bb:60:ee:b1:92:8d:ad:e4:03:be:4f:9f:0c:19:d4:
                    ef:2f:49:39:9d:fa:1a:88:85:16:46:35:be:6e:94:
                    60:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:95:F0:8F:18:56:FE:ED:DC:F5:F3:33:C6:9B:FE:9B:6D:99:FA:4D
            X509v3 Authority Key Identifier:
                keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b6:af:39:e0:52:c3:e6:de:d1:83:e2:31:df:2f:f3:43:e2:
         62:01:70:79:e9:82:14:f4:d2:b2:95:5b:10:68:cb:f0:4a:02:
         29:cd:0c:07:64:c0:fc:69:86:d4:8d:cd:aa:2b:30:b1:58:2a:
         73:66:73:2b:2a:60:42:83:94:43:3c:2c:42:65:7b:38:51:47:
         36:af:c3:be:bd:d6:96:b6:a0:e4:34:4f:d5:2f:7f:92:24:1f:
         bc:56:ab:65:bc:11:23:96:47:0d:d8:d9:2c:1e:f3:e1:cb:3d:
         e7:72:9e:ce:c4:8b:83:b7:2b:59:55:1e:38:23:f0:ae:13:c5:
         e0:67:d7:09:28:08:5e:30:12:97:ff:7d:e7:ad:48:18:54:5d:
         2b:55:b1:f0:eb:55:36:63:51:a7:fb:f8:9b:5e:ca:0f:73:de:
         99:7c:4e:14:d4:46:b6:07:0e:8d:c9:bb:d4:22:e4:f3:2f:1b:
         0c:d9:65:96:0c:05:9e:87:0a:30:e5:2a:30:8e:b5:9d:77:be:
         be:7c:91:7f:6b:64:2d:8e:b4:2c:cf:49:54:7b:e1:5f:d7:81:
         60:49:9d:2f:52:8d:4b:a9:6e:39:60:46:9e:4e:6f:8e:f6:52:
         d5:b0:8c:f5:6d:31:c1:2c:ad:b9:64:d8:ae:51:17:c0:df:2a:
         21:ad:1c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:44 2026 by rpki-client