Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
File:                     t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json)
Hash identifier:          HflFvXJiZHmXoVedAZAiLTio/ixpK+YJc7LPfTwRcBY=
Subject key identifier:   AC:9F:20:54:57:22:26:99:38:BB:EE:C3:24:17:AB:1F:D3:EE:8E:89
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Certificate issuer:       /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial:       019F8F7E07E542B35BF5C1C8AA627E83491B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
Manifest number:          01FE
Signing time:             Thu 23 Jul 2026 15:00:29 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:29 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:29 +0000
Files and hashes:         1: nOLrCsdhrfTTZS23B83VQlL1lGQ.roa (hash: 8ta87W1Q1UkIP99bAuXEz8FaHes6t7or85Kxpb3Nu34=)
                          2: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (hash: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=)
                          3: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: 3E+DxFrwwHWLjDRakfqn6BjXyNtf+n/qKMH9ic5CDFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:07:e5:42:b3:5b:f5:c1:c8:aa:62:7e:83:49:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
        Validity
            Not Before: Jul 23 15:00:29 2026 GMT
            Not After : Jul 24 15:00:29 2026 GMT
        Subject: CN=ac9f20545722269938bbeec32417ab1fd3ee8e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:cc:e9:29:c0:be:2c:c8:e0:12:f0:f9:e5:
                    97:d2:57:ff:4c:a9:9f:df:98:97:84:93:9c:33:d3:
                    de:c6:b2:21:d1:e3:0b:82:0d:5e:09:9a:9e:75:87:
                    4c:fc:79:54:53:d8:db:01:fd:b2:00:5a:71:5b:3d:
                    9b:5e:92:fc:fa:3f:41:27:42:ba:90:7d:39:b7:89:
                    27:a6:11:b6:02:49:be:23:82:a6:22:b4:f0:1b:99:
                    d4:7c:c5:52:66:2d:62:96:eb:6e:42:5a:4f:71:f2:
                    a8:03:da:47:4b:5d:0f:6c:d2:aa:51:5c:0e:5d:69:
                    5a:c8:83:45:08:a0:f2:67:b3:28:ee:38:8e:db:40:
                    19:a2:3b:f0:1d:10:5a:65:a8:1a:3b:b2:5b:99:cb:
                    0a:d0:3e:9e:b2:2e:f8:ef:d3:38:ca:ce:86:62:50:
                    7c:b5:ce:40:f4:ab:f1:10:13:bc:82:72:74:60:d4:
                    60:66:ac:7f:f4:f8:20:76:e2:1d:bb:cd:a3:af:96:
                    24:84:26:80:6d:9b:2c:ba:0e:db:d3:01:cc:b5:11:
                    18:73:a6:2e:b3:56:e9:81:39:30:8c:b3:a5:67:56:
                    d2:c8:7f:37:a7:79:9d:3b:ae:ec:ef:a1:58:47:f6:
                    4d:6d:a5:c9:da:fc:a5:02:17:57:19:30:1d:9b:86:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9F:20:54:57:22:26:99:38:BB:EE:C3:24:17:AB:1F:D3:EE:8E:89
            X509v3 Authority Key Identifier:
                keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:72:1a:b4:6f:fb:8f:4c:b1:2f:4b:15:52:75:e3:7e:8c:89:
         ce:33:f0:ad:90:e1:49:59:6c:c4:66:3d:c5:2e:71:97:a5:14:
         3b:b2:18:95:22:e5:31:3b:53:d0:63:d9:4b:4c:0e:dc:06:61:
         ba:90:e6:24:57:b8:00:9c:60:91:80:23:dd:4c:07:e5:9f:00:
         a9:8b:b5:bc:7f:d0:cb:2e:e1:ce:56:d8:a3:1b:a3:b9:a8:a0:
         a6:d3:54:b0:17:c8:24:e2:79:9a:d5:04:24:bb:3d:61:d3:e3:
         b6:56:90:41:4e:7c:fc:4a:f8:56:58:22:02:04:ad:4b:13:e2:
         54:2d:b4:9e:b0:41:33:e1:5f:5f:88:53:1f:8a:b5:b1:90:93:
         3b:0d:64:89:0d:46:fe:fa:f2:e4:11:2b:f0:c1:a9:8b:f9:a2:
         39:1f:59:97:a0:0b:f3:97:2e:c5:3d:31:4b:7c:bf:88:43:6d:
         ee:f1:b8:6e:2e:a8:22:df:7e:bc:d2:86:3f:18:4e:1a:79:ae:
         51:65:4d:e2:07:97:43:aa:81:16:03:0e:78:4b:38:be:1f:01:
         02:d5:6c:a5:8d:d8:18:97:22:e3:c6:0c:67:6e:a8:95:e7:f0:
         07:f9:9e:5e:a4:03:fb:0e:e5:3a:51:51:ea:47:16:cd:cf:8b:
         8e:36:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:31 2026 by rpki-client