Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
File:                     feM_CE7LgSODxwJ1w4XUYZstox8.mft (raw, json)
Hash identifier:          Q6jhOYLMpUl2Z6sDCaMopSnizQz6YRCB8bF21Y0HfFk=
Subject key identifier:   61:B5:33:68:76:73:38:9F:D8:EF:C0:6B:D0:DA:34:CC:25:D1:4A:6B
Authority key identifier: 7D:E3:3F:08:4E:CB:81:23:83:C7:02:75:C3:85:D4:61:9B:2D:A3:1F
Certificate issuer:       /CN=7de33f084ecb812383c70275c385d4619b2da31f
Certificate serial:       019F8F46F14EDAB0480DBD6E64963C827986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
Manifest number:          D2
Signing time:             Thu 23 Jul 2026 14:00:18 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:18 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:18 +0000
Files and hashes:         1: 5Scl3zXAEvT9Imonr9uJSjo6tG8.asa (hash: 2kTmN9J7DNO7vHCgKZRb1obKROe/qCTKWR7Gio+rcvQ=)
                          2: feM_CE7LgSODxwJ1w4XUYZstox8.crl (hash: qEHrWvPGWgH0LZZJJAQ9CEcd2q4Scm1I6a13QZqLH3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:46:f1:4e:da:b0:48:0d:bd:6e:64:96:3c:82:79:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de33f084ecb812383c70275c385d4619b2da31f
        Validity
            Not Before: Jul 23 14:00:18 2026 GMT
            Not After : Jul 24 14:00:18 2026 GMT
        Subject: CN=61b533687673389fd8efc06bd0da34cc25d14a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:50:74:53:f9:ba:87:29:97:99:1b:ed:2e:
                    d4:28:f5:f5:c7:49:03:b4:21:f2:c1:d1:3a:37:84:
                    b3:7e:45:53:89:47:89:8b:4b:69:84:cf:27:06:a7:
                    24:46:83:4d:27:00:a4:f9:aa:ad:0a:82:84:47:1d:
                    fa:33:0b:c3:f6:98:28:9f:82:fd:f2:2d:6c:db:83:
                    b2:e6:0d:ed:ae:17:c9:77:99:01:f7:72:39:0b:52:
                    33:54:25:0f:54:ca:e1:14:01:dc:96:91:9c:43:91:
                    d4:01:14:e9:65:1b:52:2e:5d:00:e4:bd:98:c6:ba:
                    0b:75:17:67:2d:9f:e6:79:30:20:22:b1:90:4d:2c:
                    af:d2:03:3c:90:ff:e9:a4:09:54:10:15:be:bc:5c:
                    7f:e5:a9:b5:fa:e4:60:71:08:5f:ab:10:35:12:f3:
                    41:fa:58:c0:08:55:83:f4:01:f3:b8:4c:3f:42:a9:
                    a7:6a:82:0f:0c:34:9f:34:37:8e:16:47:09:13:32:
                    65:b8:c1:95:15:35:f8:fb:1d:06:29:be:23:03:94:
                    ef:01:99:4e:7b:95:d1:6d:a3:49:24:1a:b2:c6:02:
                    e6:03:7e:fb:e1:54:88:e7:4f:c5:6f:15:e4:12:bb:
                    ec:c4:e7:51:e5:f3:10:14:8b:7d:0b:d9:13:25:00:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B5:33:68:76:73:38:9F:D8:EF:C0:6B:D0:DA:34:CC:25:D1:4A:6B
            X509v3 Authority Key Identifier:
                keyid:7D:E3:3F:08:4E:CB:81:23:83:C7:02:75:C3:85:D4:61:9B:2D:A3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:54:5c:04:0e:15:5e:20:a3:46:7d:73:f0:8d:9e:68:f5:1b:
         9f:ba:cc:a4:89:fa:d7:23:e2:b3:f4:3b:dc:d2:48:3a:87:49:
         a7:e0:3e:6a:3b:51:17:87:a1:39:fe:b1:66:fd:42:c3:6d:cd:
         0c:c5:55:c2:35:ea:fc:ec:63:75:e0:5b:9d:c4:bd:75:08:4a:
         32:06:e1:ce:b5:6c:3b:c3:ad:1b:66:ff:e2:c4:7f:db:28:6b:
         95:91:f1:7d:c5:0e:a4:86:a9:fe:17:36:67:fd:59:e3:be:b9:
         c5:49:13:d1:8b:78:b2:c3:60:0e:39:56:fc:29:67:8e:0b:44:
         d2:61:e4:e9:54:52:7c:48:e8:64:03:83:aa:2f:b5:6b:61:c7:
         a5:d5:0f:2b:7d:9e:be:3b:d3:8a:a3:4b:ad:a5:8d:f7:c6:8c:
         ff:21:86:05:01:fe:6b:77:78:12:9a:8d:34:a0:4d:8e:78:ea:
         18:3e:15:d5:ac:31:81:83:23:33:6a:36:68:0f:d0:e0:94:73:
         44:48:e9:c8:e6:bf:1b:79:b8:c8:64:e3:92:be:6a:dd:27:bd:
         0f:f7:1f:a4:eb:7c:e4:59:6e:ff:dd:cb:8f:09:99:24:6c:9b:
         e0:14:70:cc:cb:20:6b:de:a7:f3:9c:df:56:40:08:a0:36:0d:
         c6:29:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:52 2026 by rpki-client