Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File:                     2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier:          OJGwbSqdGgrgSGOV7KKSBXbVFlq75KUooDT7UmA1M20=
Subject key identifier:   CC:4B:8E:A9:65:B8:D1:86:84:D3:69:7F:11:53:A9:AD:B9:A1:6B:44
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer:       /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial:       019F9090D9981E4C5A9EF83B7A04BF80D26C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 20:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:39 +0000
Files and hashes:         1: 1Um9zAoKWKjpG5CWSpYj20EG4Ds.roa (hash: xf3GX9aUpJiglVQBqVGTd7FNq7qYdy4WLmcmBZNQV+Y=)
                          2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: tNznQJndgMVp1EEv+Pq8meVdGzzbeB9HH6TWbdQKeN8=)
                          3: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
                          4: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:d9:98:1e:4c:5a:9e:f8:3b:7a:04:bf:80:d2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
        Validity
            Not Before: Jul 23 20:00:39 2026 GMT
            Not After : Jul 24 20:00:39 2026 GMT
        Subject: CN=cc4b8ea965b8d18684d3697f1153a9adb9a16b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:33:9d:1d:24:8f:13:dc:77:2c:94:97:05:9a:
                    4b:a7:64:ad:2c:22:09:eb:a2:c0:90:20:71:7e:03:
                    54:11:8c:d7:83:d2:6b:78:c0:42:64:60:30:11:7c:
                    9c:42:81:4d:fd:94:f5:a0:b8:1f:04:a8:45:24:88:
                    b0:c0:6c:34:d8:26:37:22:43:ae:38:62:9c:fa:ba:
                    a5:64:19:93:52:37:d2:1d:12:ad:73:81:11:84:e9:
                    8d:91:09:76:8d:7f:84:8f:b7:c0:d9:1d:9a:22:ae:
                    e7:6a:f4:f0:d4:0a:f7:10:42:9c:90:b7:81:92:5b:
                    2f:93:12:da:93:ef:45:2f:2b:5b:be:9a:3a:90:a9:
                    e5:50:c7:b0:c0:02:49:69:20:f8:63:63:b2:f9:1f:
                    3b:38:25:1f:21:47:19:7b:16:32:57:39:54:71:07:
                    03:7a:14:b7:e3:b9:79:96:81:f6:86:d8:c4:30:fd:
                    c1:33:55:14:a4:cf:25:49:7f:3a:71:fc:87:21:c8:
                    ab:f7:1a:e9:35:ad:0f:10:8d:2b:e3:65:cb:a1:ee:
                    c8:9e:22:e9:80:db:fa:84:3e:62:0d:35:e0:5d:95:
                    53:c9:83:47:2f:37:ba:91:87:d9:73:5a:b0:1a:fb:
                    b4:53:3d:99:88:49:20:25:fb:47:d9:c1:37:52:4a:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4B:8E:A9:65:B8:D1:86:84:D3:69:7F:11:53:A9:AD:B9:A1:6B:44
            X509v3 Authority Key Identifier:
                keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:e9:87:c0:da:d6:96:4a:14:d8:11:1d:46:51:dd:52:15:
         21:af:ae:12:78:ca:b3:43:6c:48:5c:d3:08:09:af:72:0e:7b:
         51:56:e4:bb:65:ab:f2:fb:91:9c:dd:19:a2:d3:34:78:4c:84:
         8d:d8:71:fe:1c:ee:7d:e9:69:e8:a7:1c:8d:42:c3:d6:19:a2:
         48:a1:84:5d:9d:94:82:4a:84:51:ed:18:b3:49:09:09:4b:5e:
         f7:91:dd:b6:6b:3b:86:e8:0e:00:e4:0a:bb:98:b7:2e:5c:77:
         db:f3:dc:75:a1:60:4f:dc:47:54:d2:d7:ba:db:35:7b:66:91:
         ce:e4:1e:6e:bb:48:55:cf:f6:a6:8c:a1:a1:c7:c4:6a:40:f4:
         5a:1b:e8:1e:7e:7e:43:fe:fe:cc:95:29:53:3a:24:64:d5:fa:
         b5:73:ec:86:8d:da:9a:b9:e9:6a:ef:ee:0a:3a:b3:ce:3c:0f:
         1b:48:a5:5c:8d:47:0d:d0:b5:6f:0b:76:1a:cc:5d:ec:2a:7d:
         3b:47:28:e3:d8:f7:f5:e8:96:25:a9:42:9a:0c:6d:81:46:bd:
         cd:0c:d0:8b:d9:03:fa:fe:91:88:2c:96:d8:f5:39:08:a5:54:
         c7:0e:f1:f5:24:8c:d6:ec:fd:4e:5b:58:19:79:57:09:18:55:
         88:87:5e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:12 2026 by rpki-client