Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
File:                     2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft (raw, json)
Hash identifier:          C9i2ACEHmxpg7nq2ea1+p2YKifWAd1xOYsCgDC/EZyI=
Subject key identifier:   7A:C4:B4:96:C3:32:EF:A5:DC:6B:A6:2B:42:23:F7:54:70:52:6D:69
Authority key identifier: DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
Certificate issuer:       /CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Certificate serial:       019F90FF7B6095E34204FA648C4EF3872CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
Manifest number:          97
Signing time:             Thu 23 Jul 2026 22:01:30 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:30 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:30 +0000
Files and hashes:         1: 2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl (hash: X7amI1RZxivhKqg44TY+WKJUmOlBI15lHDKwpsV3vbg=)
                          2: D9_btYwl0fQhOMvvEzfg91IZ8P0.roa (hash: WuI7JG/DTFeMuDLWYMfuwcvhxvoBD8M0//z426pEYRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:7b:60:95:e3:42:04:fa:64:8c:4e:f3:87:2c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
        Validity
            Not Before: Jul 23 22:01:30 2026 GMT
            Not After : Jul 24 22:01:30 2026 GMT
        Subject: CN=7ac4b496c332efa5dc6ba62b4223f75470526d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:b1:5f:bd:21:b6:39:2e:d0:98:5a:ff:d4:
                    bf:4d:49:91:f4:e2:a6:90:9e:1c:dc:28:ac:ca:de:
                    96:01:e2:41:bc:2c:80:09:6b:92:08:59:b8:33:29:
                    7b:2e:7a:bf:0c:b1:2f:46:60:db:0f:b7:dc:12:52:
                    41:ab:b7:49:df:e4:55:d6:d5:5c:e6:4c:20:47:c1:
                    ce:1c:dc:a8:0a:de:07:8c:5d:75:17:bd:8b:78:58:
                    d6:79:f0:8d:02:fc:d4:f6:51:e7:93:17:d2:b7:ef:
                    92:80:1e:74:a7:38:6f:3c:bf:f4:14:3d:9f:8a:0f:
                    54:5a:90:18:9b:b5:a3:35:65:79:c4:3d:bf:23:fe:
                    4e:2e:8c:69:42:94:0e:2b:70:1f:b8:ad:48:a1:1c:
                    5c:2b:00:e2:09:55:11:18:ef:a6:4a:86:78:29:2f:
                    7f:a1:58:01:62:ac:26:88:a6:e8:b3:9e:36:79:68:
                    83:0b:ac:21:62:97:95:bb:db:99:6c:5f:0e:12:a4:
                    ac:49:83:d4:07:35:99:68:02:79:47:22:e2:8f:ae:
                    1b:5c:11:0f:a7:4c:56:aa:12:28:17:47:74:60:9b:
                    6f:3e:9e:e8:02:5e:4d:0a:8f:5c:0d:23:9f:16:e5:
                    df:0b:65:88:3c:b7:ed:6a:8f:05:96:57:f3:20:71:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:B4:96:C3:32:EF:A5:DC:6B:A6:2B:42:23:F7:54:70:52:6D:69
            X509v3 Authority Key Identifier:
                keyid:DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:d5:a8:64:5f:04:04:2c:09:66:94:49:ba:83:ca:c0:eb:
         2c:99:28:f4:fa:dd:e2:cb:bc:3a:05:ea:62:90:8b:22:a0:cb:
         92:d7:91:dc:2d:5d:26:08:78:b3:f3:d7:14:a9:67:f5:e1:dd:
         0b:81:72:24:1d:5b:30:d4:56:4a:b7:bc:fd:c1:5b:b2:5b:a8:
         7d:ca:8f:01:db:5e:a6:ca:37:02:9a:60:f3:91:a2:b1:72:44:
         30:41:a7:e3:37:7b:ed:6b:f9:90:ca:ac:39:56:b9:6a:0f:57:
         06:2e:cf:1e:51:4a:72:ae:5b:d5:a1:2f:39:c1:43:90:d8:ae:
         9b:07:e6:cc:59:61:60:b1:cd:5b:72:07:1b:51:d8:bb:4a:a3:
         c6:69:9c:ff:76:78:54:af:5f:95:6e:17:92:a2:57:ce:d5:1d:
         7f:d2:91:ef:f3:5a:b4:ec:6c:bd:c6:82:82:2f:2e:56:1c:84:
         93:70:25:3d:e2:c6:79:93:aa:7f:84:f4:b3:c9:5e:4d:87:09:
         70:72:bd:40:5e:75:2e:59:15:3d:4b:65:96:b6:9f:71:a5:9b:
         8d:24:a5:4b:a5:d2:c6:d7:cb:a5:d9:32:c5:0c:ff:f8:ef:02:
         63:9d:4f:72:9c:14:87:46:03:65:1c:62:da:f6:c6:08:b0:19:
         ae:92:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:53 2026 by rpki-client