Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File:                     _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier:          yzfEt6rKEgTJ74rOkYknGlkEye3vUIIpNKqNjk+6Liw=
Subject key identifier:   94:38:B1:B7:BD:F7:04:B0:48:E3:56:7B:06:0A:2D:49:DC:C5:5F:4C
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer:       /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial:       019F94002BA3E4DB22BC18875EE8A4559637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number:          16F2
Signing time:             Fri 24 Jul 2026 12:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 12:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 12:01:06 +0000
Files and hashes:         1: V-KD2l5XB9TJ4WbuiPSbiHcA26s.roa (hash: tm/NB5wzRW6Hwa1rWNFA/fkC7eMyH/xDfSrejkXoTro=)
                          2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: nkEXXruZ51TsUdD4QmNsSE+Xv+bQbNN0GCoJZuYL2u0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:00:2b:a3:e4:db:22:bc:18:87:5e:e8:a4:55:96:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
        Validity
            Not Before: Jul 24 12:01:06 2026 GMT
            Not After : Jul 25 12:01:06 2026 GMT
        Subject: CN=9438b1b7bdf704b048e3567b060a2d49dcc55f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:f2:33:63:01:e6:c9:22:a1:9b:74:3c:84:
                    6b:c5:31:93:8e:3d:d4:7a:f7:bb:16:2d:b3:ce:b5:
                    9f:a7:b0:3e:ec:b3:10:a6:8e:31:e7:47:b8:eb:9f:
                    57:33:a4:3e:34:e9:df:f2:e4:34:62:ae:c0:3c:ed:
                    6b:18:d7:77:42:c1:86:3d:e5:72:d0:4f:5b:3b:9c:
                    5e:fc:0a:e7:e0:b4:33:c9:c1:d8:f1:71:e0:e7:66:
                    1b:c5:b3:a2:dd:d0:ee:06:56:ea:f1:a9:df:d6:b3:
                    d1:54:ef:2c:5c:a1:61:39:67:2b:cd:86:52:ec:b3:
                    7c:a9:1c:fa:39:8f:79:a3:4f:f7:74:5a:dc:76:10:
                    f3:b6:46:de:f1:a1:dc:5f:90:64:37:7e:d1:8c:27:
                    b4:be:94:77:17:2f:80:5f:8e:93:65:c4:41:0d:e0:
                    66:60:2b:7b:fa:f0:44:dc:e7:3a:95:45:ea:d5:bb:
                    13:f4:5d:8b:bd:df:42:a0:11:98:d4:39:40:3c:9a:
                    45:76:f3:66:a6:e5:b8:2a:83:2c:fd:05:4a:ba:84:
                    6a:08:4c:48:8c:ec:5a:c7:fc:4c:49:f7:83:c3:59:
                    18:99:14:ce:5e:b9:77:d2:8b:85:7c:ed:24:1a:9d:
                    d9:5c:94:cf:b4:6a:f5:92:fb:59:94:24:85:5e:73:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:38:B1:B7:BD:F7:04:B0:48:E3:56:7B:06:0A:2D:49:DC:C5:5F:4C
            X509v3 Authority Key Identifier:
                keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:96:8a:5a:41:86:de:d3:95:e4:2c:ff:1d:44:c4:67:19:e4:
         30:84:53:83:be:58:2d:0c:68:6e:a7:aa:6e:6c:a9:84:73:5a:
         ba:94:9e:d8:c8:fa:33:bf:0e:9b:7b:62:df:c5:56:58:eb:8a:
         18:6e:be:08:63:d9:da:66:11:ea:a4:72:1d:97:1f:62:f8:d9:
         f1:51:6d:f9:a3:90:7c:b9:4a:0e:0e:1a:cf:77:27:8e:84:df:
         dc:4c:23:82:fd:77:5e:c7:e9:3b:63:1f:63:9f:79:56:35:12:
         97:ef:67:40:e2:5c:3c:a3:6c:76:8d:cb:b0:72:a0:6b:5c:e3:
         75:29:33:41:60:cb:b3:b0:ca:dc:dc:73:e0:82:8e:4a:26:c6:
         39:0a:5a:20:6a:d8:aa:d4:53:5b:c8:75:7e:44:10:53:dc:d5:
         2d:67:82:57:62:d1:9b:98:9f:69:20:e8:e7:89:9f:93:d7:74:
         00:35:b4:97:8b:6d:63:14:d4:4f:ed:1a:13:97:f9:41:e7:57:
         bc:b3:7a:65:85:b3:27:4f:10:7a:c8:e2:95:09:91:89:eb:5a:
         11:c6:f6:01:26:b3:92:2f:92:f0:d7:f3:2b:61:04:29:8e:d6:
         6f:40:83:bf:5e:2f:e2:fa:73:1a:8b:08:64:8e:c7:48:b0:14:
         5c:37:bf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:47 2026 by rpki-client