Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File:                     2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier:          UydkLF6nsQFEAMsDaB6cnXJ40kWj6seIRWGu2wV0p8U=
Subject key identifier:   E9:9B:BE:76:A3:77:58:C4:D4:45:AD:0C:06:D5:A6:15:77:8E:EA:8F
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer:       /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial:       019F90911B0F9CEF1698E565468BCBFE029F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number:          089C
Signing time:             Thu 23 Jul 2026 20:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:56 +0000
Files and hashes:         1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: fcz3Mw/bMvYW6dUp1kgYNBPDW225Qvd55NDT2XP9dcg=)
                          2: 7BYQ6hjxoI3ozUU8ddmxZjgsC6E.asa (hash: 5jYDiWPOUrluKHP8GqfVHZN4Ahv5ZbbZ6/MfVtJfnr4=)
                          3: U0eXHxUXFfodUlmBaA303-Jbx88.roa (hash: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:1b:0f:9c:ef:16:98:e5:65:46:8b:cb:fe:02:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
        Validity
            Not Before: Jul 23 20:00:56 2026 GMT
            Not After : Jul 24 20:00:56 2026 GMT
        Subject: CN=e99bbe76a37758c4d445ad0c06d5a615778eea8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:3f:6e:e2:56:d9:80:95:c0:69:bb:42:f6:
                    e3:46:4b:ed:d0:2d:6e:20:8b:43:56:69:7d:53:9c:
                    5c:20:86:12:27:c0:50:89:5e:a9:6b:fe:dd:01:9a:
                    c5:b9:ac:ac:dc:e7:b7:f7:37:bf:a1:38:a6:f8:60:
                    fc:77:45:04:42:54:70:41:a0:ec:d7:d1:fd:03:19:
                    5b:0c:c4:07:ac:24:e9:b6:2d:6a:7f:7b:ad:0f:a3:
                    09:85:21:46:7a:e8:ff:d4:c5:e2:64:f2:97:1a:7d:
                    ac:07:99:86:a9:70:3b:a2:83:5d:12:dc:8d:8a:98:
                    2a:00:8c:06:74:01:cf:ec:45:bd:d7:a2:dd:87:99:
                    05:dc:a9:1a:7f:9e:bb:55:50:09:a9:da:10:86:c8:
                    3b:19:3b:f9:53:ce:75:3c:9f:2d:f9:2e:92:8d:8c:
                    21:9b:ed:83:5c:3f:fe:95:f2:83:0f:d3:be:b6:bc:
                    73:7b:2b:45:bd:64:ed:d6:ba:ec:93:da:33:53:9b:
                    d2:3e:98:7a:e1:ef:ca:36:28:26:9c:e9:6b:5c:c1:
                    59:b9:47:bf:75:35:7b:6b:5b:3b:8e:b1:4f:15:5c:
                    e4:a1:35:5c:fc:ae:f9:e8:fa:0e:04:6e:7e:54:e8:
                    1f:65:31:98:9b:dd:8d:ce:0e:ec:9c:de:13:50:3f:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9B:BE:76:A3:77:58:C4:D4:45:AD:0C:06:D5:A6:15:77:8E:EA:8F
            X509v3 Authority Key Identifier:
                keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:bc:57:fb:f8:60:1d:1e:a1:7f:b1:08:a0:84:89:9b:6c:
         40:23:e4:78:51:8a:87:f5:9c:84:35:e6:31:08:08:da:9b:99:
         6c:66:32:3e:81:c9:fe:79:cf:61:9e:4e:8f:a1:32:25:74:d9:
         c1:93:13:a8:b7:5d:fb:4e:85:3a:c6:96:66:fb:a6:4c:d1:dd:
         12:ee:c7:12:d1:25:83:b1:53:d3:02:00:4b:ae:dc:86:21:d7:
         05:fd:a7:9e:73:9a:fd:fa:b0:4d:ec:3e:cb:78:39:32:74:3f:
         57:5d:a2:dd:a4:a7:63:ea:44:72:ff:42:3c:d9:d9:33:04:3c:
         64:a3:4d:a1:2d:87:80:2d:e6:7e:8e:4e:fb:66:59:e0:f0:c5:
         be:68:1a:17:de:61:33:25:2f:ae:45:98:4a:cd:7f:55:50:97:
         4e:81:a0:6f:95:6d:f4:46:6d:b0:24:4d:e7:ec:f7:89:b9:c3:
         14:96:39:9b:0c:51:76:a2:68:da:55:25:ac:d8:85:b0:55:3f:
         c0:59:d0:31:d1:56:53:5a:40:bb:d5:3f:9f:c4:58:80:59:3b:
         99:13:1b:3f:f5:86:23:ea:e4:7f:af:ed:f0:5b:ba:f3:87:d7:
         9c:f8:34:15:fd:90:71:09:ea:cc:de:bd:ab:4e:b3:49:ae:a7:
         34:d9:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:38 2026 by rpki-client