Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          A0fN+kxkq/8f9p/bKFZPZFcAi9ALnHXSBbxGAz+jCns=
Subject key identifier:   2A:08:30:E7:7B:23:A7:62:01:D7:E9:FA:16:45:73:4A:D7:E9:F9:76
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019F9022A3BB9FAEC8EE37FB1ED6E659E0F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 18:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:16 +0000
Files and hashes:         1: 1-X9f31YmOI6sGDiMsygwz3v06EQ.roa (hash: lBKrn9OkfPE6uE/SW8MJqqSzuyUTtFebuy/HpzOS5Gw=)
                          2: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: 3phbCHwIH0o2nzGO2YrH0HAPXAWDt1EuNFN4ePxe6wU=)
                          3: FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa (hash: HY7azWr+1lDIeYP4uBd4A0p2MAT8AwHdslPwrQq6vgY=)
                          4: SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa (hash: r7gescwog8g3OhaT+uiQpA9jU7IQngckD+CGfZrI6kY=)
                          5: dr0WTbKAOdZCmM023BVBdPDWRk8.roa (hash: QpYxSWr/vVLdYe2PKpH5AUkh/HBsOurm0FmWy5lE2hA=)
                          6: sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa (hash: mG9f/0+7q2d/QWjgfY6kLzwp92/dXDDFf1IO0cmQvoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:a3:bb:9f:ae:c8:ee:37:fb:1e:d6:e6:59:e0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Jul 23 18:00:16 2026 GMT
            Not After : Jul 24 18:00:16 2026 GMT
        Subject: CN=2a0830e77b23a76201d7e9fa1645734ad7e9f976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:07:ec:c3:9d:62:60:36:96:6d:c8:38:c4:
                    ae:04:e9:6c:ed:79:ac:cc:99:18:47:28:7d:c4:18:
                    ec:73:1e:b5:45:4f:cc:0a:59:f5:e3:e3:b8:42:84:
                    4c:16:ea:be:7f:df:9e:02:2a:6d:e3:a5:e6:95:3b:
                    6f:35:fb:b0:8f:53:b1:c2:75:48:f7:83:ae:3c:30:
                    33:97:c3:36:ca:d0:81:de:92:d3:db:94:b6:32:f2:
                    72:69:8f:21:77:00:fd:75:4a:6a:b9:8b:1c:f7:63:
                    ef:9b:73:31:2e:d3:67:b2:63:cd:c8:1e:1c:a7:3f:
                    8a:8d:5b:3a:2e:17:62:74:4c:29:68:5b:fe:10:01:
                    2a:22:79:4e:d5:ab:cd:72:fb:99:ab:db:1f:96:57:
                    8b:aa:e6:d0:b4:de:15:f3:92:bd:ee:d1:55:e0:08:
                    57:1a:b0:85:5b:6e:9b:49:09:db:fe:b6:3e:74:72:
                    0e:ef:01:8a:c8:9c:7f:b7:0b:5f:6a:92:6d:9f:28:
                    95:3a:49:4e:b0:7c:7c:59:4e:8e:a9:fd:67:b4:38:
                    bc:9d:2d:48:86:cf:bd:69:65:8e:bb:b1:82:b9:84:
                    a7:d6:7d:fb:bd:5a:47:1b:b7:e7:23:07:20:d7:df:
                    da:ca:da:60:c2:1d:f2:97:a2:51:5c:c3:36:19:0e:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:08:30:E7:7B:23:A7:62:01:D7:E9:FA:16:45:73:4A:D7:E9:F9:76
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:15:fe:85:e1:d3:f3:ed:6e:a9:79:ec:67:e8:06:69:c1:3d:
         21:f9:d2:aa:02:c4:19:ef:54:c6:a2:bb:21:39:80:08:16:9e:
         bd:87:47:fb:8a:ca:ed:e8:f3:dc:19:b7:ff:37:84:13:30:9e:
         d2:18:a5:e6:d2:b9:47:42:b6:89:db:88:dc:f8:d4:ab:a0:1a:
         ce:3e:53:b0:6d:92:f0:5b:79:e7:aa:bf:9d:c4:e0:08:5a:a3:
         0c:08:69:82:19:b1:5d:c7:cd:d0:00:52:4e:62:92:5f:fb:8c:
         57:00:d6:30:d8:01:e6:bd:89:1d:24:2e:0f:3d:13:52:41:f9:
         b0:50:8c:b4:1c:3e:aa:31:33:56:48:47:59:ce:23:ec:4f:ea:
         e5:85:5b:81:b5:b0:b7:cb:3b:c0:28:b8:19:21:71:eb:12:20:
         8b:3a:cd:00:66:5d:91:61:06:88:03:74:8c:5e:8b:e3:47:7a:
         c5:45:ca:85:3c:1f:25:a6:38:e9:3e:13:f5:e0:3f:3d:b8:b8:
         b9:49:5d:f2:a9:91:77:c3:49:08:c8:05:17:05:27:4b:70:c9:
         05:b0:f6:b2:b0:d9:a1:e9:8b:0d:52:c4:52:26:37:b4:94:3d:
         d8:3c:5d:cf:74:40:34:ce:2e:75:f5:43:e5:83:f4:39:85:b8:
         9b:2a:48:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:39 2026 by rpki-client