Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
File:                     _2szYaGioA284xkBmCf-u3Fb0EQ.mft (raw, json)
Hash identifier:          7vkCUmns3Z3oRcKeyc8tA5Bx2BZhHBlc471NWripVEw=
Subject key identifier:   D0:54:AB:32:3A:FC:11:5A:EC:C2:85:6E:CC:1C:F9:C2:9C:4B:1A:8F
Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
Certificate issuer:       /CN=ff6b3361a1a2a00dbce319019827febb715bd044
Certificate serial:       019F951214D4928083208849AD871092446D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
Manifest number:          192B
Signing time:             Fri 24 Jul 2026 17:00:17 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:17 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:17 +0000
Files and hashes:         1: PZ_gBS2JDBR5UR9Zyi6R_A5y1vM.roa (hash: oUnwI/hWFydpEOEqwC9HOMZdSyF2a1xfxAbzlwQhdS8=)
                          2: _2szYaGioA284xkBmCf-u3Fb0EQ.crl (hash: 8/NJe6BlEHGW/b9RjI99foy8gdH2PvuY1LfuTpsx1lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:14:d4:92:80:83:20:88:49:ad:87:10:92:44:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044
        Validity
            Not Before: Jul 24 17:00:17 2026 GMT
            Not After : Jul 25 17:00:17 2026 GMT
        Subject: CN=d054ab323afc115aecc2856ecc1cf9c29c4b1a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:e7:ef:ad:92:62:2f:30:d8:9d:21:7b:35:
                    0e:98:b8:74:2a:82:da:86:74:cb:c1:e1:b4:35:ba:
                    ae:5e:c6:0a:7c:c0:64:01:d1:9e:ef:fe:97:49:1f:
                    c0:6b:7b:39:1c:ef:ab:75:f3:39:dc:69:90:28:11:
                    60:86:46:14:75:e4:56:71:ab:5c:ba:eb:45:9a:bf:
                    40:5d:76:22:57:d2:be:a0:d4:c1:62:d2:64:97:6d:
                    0d:7b:51:12:de:d3:be:8a:44:f5:0a:1e:6c:16:ef:
                    0c:81:db:c9:5c:e5:4f:69:03:d0:56:d5:ce:50:ef:
                    46:a6:a1:5f:81:94:7f:9d:1b:13:4f:78:37:6c:a7:
                    9f:90:b1:81:50:b8:4e:bd:40:f4:1d:de:ca:f5:f9:
                    48:74:1f:4c:7c:c6:6e:6b:23:ce:32:3a:3e:81:4d:
                    9c:53:96:83:79:2b:f8:a0:d2:18:d9:4c:04:fe:eb:
                    30:b3:32:db:54:c0:0b:50:62:d4:9d:e4:b7:ab:a1:
                    5a:fc:fd:fa:72:33:10:56:13:59:31:5f:39:ff:03:
                    7d:5e:2e:5d:b4:0d:9e:fd:d4:16:49:bc:e8:39:b2:
                    67:23:b9:12:e1:87:ce:d2:2c:e1:b1:e6:fe:e5:f2:
                    1b:eb:b2:1d:69:23:90:be:e7:05:49:ff:ef:45:aa:
                    14:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:54:AB:32:3A:FC:11:5A:EC:C2:85:6E:CC:1C:F9:C2:9C:4B:1A:8F
            X509v3 Authority Key Identifier:
                keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:da:09:da:57:63:26:c9:c5:26:48:db:7a:09:34:e9:ca:65:
         c9:e6:9d:7f:de:7c:a8:cf:89:f1:3f:b1:f0:c0:90:60:8c:2e:
         66:92:f8:71:1c:b7:97:22:68:70:46:b1:0d:e7:f8:f4:9a:f9:
         80:8f:6d:f4:25:cb:41:3a:28:14:53:18:30:99:9b:7b:42:a1:
         14:81:8e:e9:ed:4f:ce:0f:0d:b3:be:bd:a5:74:e7:10:47:d9:
         a4:d3:f5:c8:6f:21:2a:60:f1:b6:21:fc:47:43:09:cc:78:8d:
         fa:ab:0b:cc:ab:b0:e6:db:01:ec:1a:38:b5:e6:e3:4b:75:c3:
         9b:79:77:6a:b0:46:2b:83:13:e4:dc:11:ee:be:38:6c:b7:41:
         dd:86:ce:bf:b6:22:be:05:b0:e8:19:c3:e1:ad:0f:18:28:ff:
         eb:c8:dd:86:18:8e:c9:e8:65:3b:99:fb:6b:8e:a1:2f:f1:82:
         90:53:1e:f4:c6:7a:18:21:56:82:b1:05:b5:2f:ad:3c:e0:c4:
         87:0f:68:df:85:37:54:07:ee:6b:93:2a:10:ff:b0:8a:20:63:
         e9:32:41:24:74:1e:4e:97:ee:4a:3d:1f:74:93:10:f7:88:23:
         06:d6:dc:93:8b:5c:71:d1:3d:86:ad:d3:70:cc:ca:5b:ac:52:
         28:c2:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:24 2026 by rpki-client