Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft
File:                     e2JYjviU8V-132v-4paOMiKQUAk.mft (raw, json)
Hash identifier:          2b6jiEhYS9PQXYOsJik1asMiyoPRRvK1ef3LlxV3deY=
Subject key identifier:   3C:23:9A:55:BD:C9:4D:9E:F7:25:21:09:24:90:65:97:84:B4:E4:A9
Authority key identifier: 7B:62:58:8E:F8:94:F1:5F:B5:DF:6B:FE:E2:96:8E:32:22:90:50:09
Certificate issuer:       /CN=7b62588ef894f15fb5df6bfee2968e3222905009
Certificate serial:       019F9549F803DD07EDC2AD553139661317D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft
Manifest number:          42
Signing time:             Fri 24 Jul 2026 18:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:20 +0000
Files and hashes:         1: e2JYjviU8V-132v-4paOMiKQUAk.crl (hash: r7DEdtF4LhS87F4vlCxchRTPJd1S8HSo2LNy7nVYzGw=)
                          2: n4PZqEq4ej9Dd5bdBkRp3aOYqNE.roa (hash: 1E/T9nLd+QL/eysx3WY4PkqyPLvT4d8WYewTXo8g6eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:f8:03:dd:07:ed:c2:ad:55:31:39:66:13:17:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b62588ef894f15fb5df6bfee2968e3222905009
        Validity
            Not Before: Jul 24 18:01:20 2026 GMT
            Not After : Jul 25 18:01:20 2026 GMT
        Subject: CN=3c239a55bdc94d9ef72521092490659784b4e4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:cc:15:16:bd:da:e4:8a:c7:c9:e0:68:bb:
                    95:ef:58:51:12:9d:f4:a9:ab:75:26:e8:2b:37:1f:
                    9c:f1:de:85:0d:f0:6f:1c:d6:6e:49:ab:85:31:c4:
                    66:9b:eb:df:c7:3d:b6:a3:21:76:d9:80:94:bf:2b:
                    1f:09:a9:83:5d:c9:0e:93:84:73:83:b6:ba:7b:2b:
                    fa:a2:77:c7:d2:64:fd:b0:98:23:d5:a8:d0:48:12:
                    81:f6:b8:3e:96:03:0c:ba:c2:a3:e3:a7:b5:0e:7c:
                    5f:a2:b9:97:e7:4f:f4:d4:e1:2b:38:b0:eb:64:d3:
                    df:15:e2:18:01:3d:79:0c:20:87:50:09:d7:99:2a:
                    e3:61:7c:4c:31:e2:c1:d9:e7:c3:6f:2f:c3:71:6d:
                    93:59:b0:93:51:67:75:37:9c:c8:bf:0a:3f:7c:77:
                    1e:3a:cd:a1:5a:a9:b2:8c:8a:ef:a7:2f:b6:b6:87:
                    4a:e7:62:49:bd:bd:ae:a9:6c:df:2f:2c:7c:8d:0b:
                    26:9f:b6:a8:a6:c0:47:e5:59:85:82:10:79:65:5d:
                    8a:78:07:25:aa:3d:28:ff:86:e4:5d:da:73:10:42:
                    39:b1:a4:b2:c8:be:a8:49:3c:3b:a8:c9:24:c3:c1:
                    fe:42:b5:8e:52:a5:a5:77:0d:e5:d4:25:06:f7:36:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:23:9A:55:BD:C9:4D:9E:F7:25:21:09:24:90:65:97:84:B4:E4:A9
            X509v3 Authority Key Identifier:
                keyid:7B:62:58:8E:F8:94:F1:5F:B5:DF:6B:FE:E2:96:8E:32:22:90:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:aa:25:a7:7a:63:0f:cf:2d:15:a9:a9:01:79:e2:4c:e0:25:
         1e:66:7c:95:ea:5c:61:7a:84:f2:32:b6:8d:d5:4b:e9:47:e2:
         d7:cf:e2:ec:2c:48:77:72:9a:84:3f:46:83:35:49:f3:5e:7f:
         b2:80:4d:b3:33:5c:84:5c:70:3d:3e:43:53:4d:cc:37:88:f5:
         c5:a6:0f:46:27:34:27:ee:ef:18:51:c2:4d:9f:38:ce:36:7d:
         ea:eb:08:08:4a:02:87:88:47:14:30:3d:a3:7e:27:8f:29:f9:
         03:c0:6c:a3:44:12:c7:ce:a7:ee:19:43:3f:d2:93:c2:95:af:
         f5:81:c7:29:42:4e:22:80:09:6b:91:81:8c:35:93:6e:82:99:
         40:d9:40:83:e1:28:3e:ee:d7:27:63:9b:c5:9e:dc:67:a9:1d:
         b4:9d:9a:8e:82:40:e1:47:99:ff:4f:96:cf:cd:33:b9:db:b8:
         fd:8d:24:e3:57:be:90:2e:f9:54:65:72:3d:a9:e5:b1:52:92:
         0a:81:ff:2f:46:04:f0:8f:19:b7:78:a7:c1:65:32:64:e7:61:
         d7:f3:5e:16:8a:3e:a4:80:59:17:58:4c:8c:c1:40:d4:ea:89:
         50:ef:96:a4:34:8c:92:3a:80:5e:6b:52:05:a6:8d:fb:83:61:
         67:b7:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:51 2026 by rpki-client