Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File:                     2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier:          gq97YgpXAuu7+4fnDwcXWOtt20s81hXYRDhz8+cd8d4=
Subject key identifier:   F3:B2:17:BD:2A:B4:3F:2D:93:DC:94:66:47:01:0F:72:04:32:FC:15
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer:       /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial:       019F905A4E8E5316539EAFFDE541EBAABCCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number:          0ED2
Signing time:             Thu 23 Jul 2026 19:01:05 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:05 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:05 +0000
Files and hashes:         1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: zCzhHRwVCqqFzBD50h4yOk0Jont8S7hM4PIqhs62hiA=)
                          2: KgUafpKLQn167LugL8OB7NIxPBY.roa (hash: UwTKLcOOmGr1M5MqovXzfh3IyeeIlKdI89ngxjztStc=)
                          3: MFAY7_OLyA4recGDb-cluDo0Fy4.roa (hash: gbxISH9PotemB1t2Fhr1XbKqizGCUJkHo7eezE3JciE=)
                          4: cP1lvMExnryf8cpW14P-YTW6oFM.roa (hash: 1i/eVOAe4LzQ+ZGAHO4PSAx1yAI1zK27WYnYn0/9SC0=)
                          5: zJpyyxzxDhN7qqdh0Mt-W4R9xhQ.roa (hash: 3iXjS3NRkOtuiwihRC5inSlg4bzXZF2ihzUz1KnKcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:4e:8e:53:16:53:9e:af:fd:e5:41:eb:aa:bc:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
        Validity
            Not Before: Jul 23 19:01:05 2026 GMT
            Not After : Jul 24 19:01:05 2026 GMT
        Subject: CN=f3b217bd2ab43f2d93dc946647010f720432fc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:d4:87:d2:5b:c0:41:67:be:69:ff:33:05:
                    31:8e:d8:d3:48:e3:5a:7e:1f:5a:78:dc:09:3d:02:
                    e6:16:d3:d1:de:74:96:ed:9f:00:bd:dc:fc:d6:f9:
                    3a:5d:64:a8:66:03:20:db:79:a2:09:95:a6:67:3f:
                    df:2b:c8:78:51:ab:c4:3e:71:53:23:9f:66:14:a1:
                    8e:8b:31:27:f9:c6:c6:98:87:05:7a:25:f1:a1:aa:
                    88:93:c1:b1:f3:27:3a:2c:f8:87:40:56:fb:f9:23:
                    30:92:68:82:96:7e:66:dc:e2:e9:55:5f:b4:08:11:
                    40:34:8b:67:46:f3:e4:17:67:7d:f2:fa:38:38:5f:
                    a8:7f:39:1e:48:1b:a6:4c:03:d3:59:d1:23:ca:b9:
                    8f:d4:d2:25:30:fc:89:40:09:60:44:64:3b:ba:1d:
                    47:b5:d3:5c:58:d2:92:7a:c0:b6:e6:61:fc:6e:6b:
                    b3:20:3b:36:6c:4e:e4:79:53:8c:10:d4:28:76:8c:
                    8a:ad:b4:de:be:e0:d4:1e:bf:5b:23:73:85:29:51:
                    74:5c:49:26:c7:9c:6b:f1:3b:8b:b1:d5:81:6a:c0:
                    b2:1c:71:9a:cc:70:7f:50:0b:46:0a:20:4e:23:69:
                    7f:c0:8c:47:c1:2a:48:eb:28:e2:fc:32:f1:f3:ec:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B2:17:BD:2A:B4:3F:2D:93:DC:94:66:47:01:0F:72:04:32:FC:15
            X509v3 Authority Key Identifier:
                keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2f:a2:7d:36:3c:19:00:c5:d6:28:8c:19:6e:65:d8:a3:03:
         3f:fb:56:31:57:c2:f6:d3:e4:d3:fb:5e:e5:e9:5a:f9:88:be:
         ce:7b:26:f1:d8:7b:91:77:24:49:2d:ef:dc:99:35:22:ee:78:
         0f:c1:d7:4e:06:9a:7e:57:a1:c3:10:70:9e:5a:33:81:ef:73:
         e7:de:a2:d5:b9:92:d4:e9:99:e2:d3:8c:52:09:de:9a:6b:f3:
         94:26:e3:85:a0:0e:f9:fb:c8:32:e1:58:2b:e5:ed:07:09:59:
         87:b9:4e:be:9a:54:9e:64:e6:5e:71:e8:14:c7:fc:9e:0b:a3:
         21:11:ff:3e:98:4b:1e:bf:ed:a2:23:69:8c:1c:f5:85:fb:f5:
         3e:4e:d7:8c:70:e8:33:77:65:aa:dd:1d:bf:96:10:9b:7d:5d:
         85:ae:15:64:b4:72:bd:55:f3:50:7d:5a:36:2f:e9:76:11:73:
         c4:10:cf:e6:f2:37:ea:bc:8b:8a:ef:ed:35:5a:11:48:4e:43:
         d0:55:e6:b9:8b:f6:a6:ee:83:ce:36:21:17:6a:49:33:27:83:
         64:19:d2:84:fe:b2:91:1f:97:a6:f5:50:36:84:fe:a5:8b:a4:
         73:49:12:21:8d:2e:69:9e:85:9c:e4:f4:75:24:5d:a5:22:e2:
         86:5f:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:01 2026 by rpki-client