Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
File:                     2JB-iKU1XdbEkzENqQnEnILmRis.mft (raw, json)
Hash identifier:          pzOu19i7YgfvtFP4usalvcOOTkyP5CJuU8WS9NGI1QU=
Subject key identifier:   75:E0:EE:AB:8F:17:85:BE:AD:01:BB:EB:84:3F:8B:96:17:CE:AD:15
Authority key identifier: D8:90:7E:88:A5:35:5D:D6:C4:93:31:0D:A9:09:C4:9C:82:E6:46:2B
Certificate issuer:       /CN=d8907e88a5355dd6c493310da909c49c82e6462b
Certificate serial:       019F8F7EBBE69AAFA81F6081FA28D2316840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:14 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:14 +0000
Files and hashes:         1: 2JB-iKU1XdbEkzENqQnEnILmRis.crl (hash: rhZsq+kx/cgEJTn2eqcV9xbNqDcfOq6RbaYenUE3gkQ=)
                          2: xFRlA_WCCtl4Fju19ONjDEmoD1k.roa (hash: UGXakbfRLTme4sGda2l7oDppZgoq8uWKm7vnvwj4GMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:bb:e6:9a:af:a8:1f:60:81:fa:28:d2:31:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8907e88a5355dd6c493310da909c49c82e6462b
        Validity
            Not Before: Jul 23 15:01:14 2026 GMT
            Not After : Jul 24 15:01:14 2026 GMT
        Subject: CN=75e0eeab8f1785bead01bbeb843f8b9617cead15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:2f:7d:cd:d9:4e:dd:75:bc:cb:20:3e:4d:
                    e2:a4:36:1d:4a:3c:ee:68:9b:25:34:01:86:e6:51:
                    02:ec:16:eb:67:9c:2d:ba:17:e5:da:f8:4b:59:d4:
                    69:9f:25:e3:65:72:ff:ce:71:5b:29:ff:22:3c:46:
                    0b:2e:15:cf:04:44:9f:8d:6a:08:e7:62:f9:e3:f6:
                    6c:a5:1f:26:42:3e:1a:3a:6e:b8:c8:85:4c:58:fa:
                    99:08:ae:50:06:f2:f5:d5:74:3a:13:ca:24:c5:e4:
                    b8:75:83:cf:0c:84:36:f6:88:53:64:83:a1:7a:49:
                    d1:0a:67:08:00:a9:c0:08:e6:82:09:51:93:2a:84:
                    04:4d:40:2f:05:72:06:48:86:a1:db:35:4c:83:5d:
                    0d:54:53:e7:bb:3d:08:b6:17:ef:7b:e8:73:9e:60:
                    cc:36:cb:75:7e:74:a2:1d:37:6d:5d:5d:e1:a1:a8:
                    de:ff:9c:38:b8:f8:85:a2:15:cb:99:bd:4f:30:1d:
                    38:53:a9:e9:32:90:c0:1a:b6:d2:0d:63:a7:2e:a4:
                    53:6f:c1:78:06:d2:69:31:05:a1:7d:f2:dd:27:2b:
                    ff:fe:89:55:fd:99:9a:18:57:32:7e:70:2f:2a:1f:
                    88:36:11:a1:53:30:b8:c1:04:76:22:db:94:51:2f:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E0:EE:AB:8F:17:85:BE:AD:01:BB:EB:84:3F:8B:96:17:CE:AD:15
            X509v3 Authority Key Identifier:
                keyid:D8:90:7E:88:A5:35:5D:D6:C4:93:31:0D:A9:09:C4:9C:82:E6:46:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b5:40:0b:6b:4b:a6:4d:f6:f2:06:2a:8d:02:47:95:32:8c:
         57:aa:f5:c6:b5:c3:8b:89:d1:10:75:cb:e0:bb:a8:d8:8c:c2:
         94:15:c9:86:84:67:06:22:0c:5b:b2:03:a6:04:6f:1d:7b:5d:
         60:63:a1:f3:62:14:04:74:c4:44:5f:05:a5:bd:0b:c7:b7:6b:
         77:5a:55:e0:dd:9f:84:3e:16:67:ec:6f:aa:1d:f4:36:30:3c:
         ff:b7:21:9a:62:b0:ed:00:86:fa:05:3a:9a:d7:8e:fd:b6:cc:
         1e:a5:eb:8c:68:36:dc:b7:3e:fb:63:ed:16:33:8f:70:5f:b2:
         91:97:b8:b9:79:35:56:24:ed:2d:0d:a6:e7:2d:5f:3a:51:8e:
         21:54:17:17:89:f9:25:35:fd:21:31:70:73:f6:19:ae:23:95:
         b2:f9:b7:4e:dd:0a:89:03:7d:5d:9c:86:46:c0:45:8f:52:bb:
         3f:2e:54:0e:c6:6a:a6:7f:b7:24:5c:78:2c:25:fa:d0:f5:77:
         d7:c0:96:5c:d0:f8:e9:a8:90:ba:eb:ce:53:b5:bf:61:b7:94:
         3a:4c:3d:15:bd:ec:72:f8:66:b0:5d:4b:b8:cd:12:fc:48:ef:
         59:63:f3:50:41:50:8e:b2:22:07:a7:49:3e:ad:ea:d0:30:ff:
         29:15:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:07 2026 by rpki-client