Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
File:                     pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft (raw, json)
Hash identifier:          5NtvlgQTmuaV5WaGSeJdvVCDaliYWf8WX1J6ghkUgeI=
Subject key identifier:   D6:12:57:34:F9:F4:09:F4:1C:DE:48:8B:7D:1C:E6:97:A7:C9:D1:34
Authority key identifier: A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC
Certificate issuer:       /CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
Certificate serial:       019F8F7E78C3020AECE11B9A9D681DD07FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
Manifest number:          C2
Signing time:             Thu 23 Jul 2026 15:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:58 +0000
Files and hashes:         1: ZhmfZOQthLNwaXu66U6ErWqlalA.asa (hash: qf+Z2Ej6j2Id/dJp4k8hFnsz0b10rm8/N0nNZYscrA0=)
                          2: pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl (hash: 8UdvvJNdLvVcQiLgJTx/yL0rsGRqx9HiKyuGCVXGlDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:78:c3:02:0a:ec:e1:1b:9a:9d:68:1d:d0:7f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
        Validity
            Not Before: Jul 23 15:00:58 2026 GMT
            Not After : Jul 24 15:00:58 2026 GMT
        Subject: CN=d6125734f9f409f41cde488b7d1ce697a7c9d134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8a:24:43:82:54:b0:b7:e3:10:e6:73:02:1a:
                    da:ae:5a:b3:50:84:66:93:49:23:6f:9f:6c:59:e4:
                    14:c5:c5:a1:b8:73:9c:9a:aa:d0:76:ca:cd:21:b0:
                    de:a8:f0:a7:2b:2a:b7:b4:ba:4e:20:14:18:42:89:
                    99:d1:3c:e1:43:fc:b4:89:38:f7:a9:a9:12:b4:dc:
                    81:22:e9:f0:f1:4f:29:ac:ee:75:75:35:e1:ed:4b:
                    a6:e1:52:df:cb:51:49:88:e8:8d:09:a8:d6:b2:5e:
                    f0:51:29:5a:02:ca:92:75:23:fe:9a:00:21:96:08:
                    c8:8c:de:89:f6:0a:6d:36:3b:ef:71:9a:f9:e5:e8:
                    fd:ff:ab:25:ad:1c:7a:6a:c8:1d:3c:62:69:7d:a0:
                    7c:27:7e:5c:3a:37:35:b6:bc:4e:45:35:57:92:bf:
                    ad:d7:06:d0:b1:da:9e:aa:ef:20:f7:f6:44:5b:b1:
                    ec:21:2a:f3:d0:19:ca:12:38:9d:cb:06:a2:b6:d2:
                    88:cd:ba:72:19:bc:c3:9e:4d:91:71:d3:3e:e4:43:
                    ab:83:1d:d5:45:6f:2a:dc:3a:76:6c:4a:57:d3:dd:
                    68:7b:f4:60:df:58:69:65:5d:27:54:47:75:f0:52:
                    35:5e:ed:0a:5d:22:62:a9:0b:63:6d:05:3e:77:3b:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:12:57:34:F9:F4:09:F4:1C:DE:48:8B:7D:1C:E6:97:A7:C9:D1:34
            X509v3 Authority Key Identifier:
                keyid:A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:31:67:e7:1d:99:1d:da:75:fe:be:d1:be:db:bf:33:4d:
         6a:1c:9e:20:b0:75:09:a8:42:e0:32:42:2b:bc:cd:49:44:e6:
         7c:09:2a:72:3d:7d:af:78:16:ac:25:80:cb:0b:15:23:7b:ab:
         59:48:c2:92:38:e9:68:e0:e4:bd:65:7a:32:12:6f:1a:f3:e5:
         ac:cc:8a:22:cf:69:63:00:ad:78:97:09:63:ba:70:61:c1:4c:
         38:58:d6:3c:c0:c6:48:8e:58:c6:1e:c9:74:50:9b:ac:4c:5e:
         88:02:5f:df:53:d0:fc:7f:f9:f3:81:e2:b4:97:4b:5f:f6:e1:
         ef:9a:32:38:2f:13:3b:5c:f6:6f:8b:bc:3e:e4:18:4d:68:51:
         d2:0a:47:43:9c:99:ae:98:91:d6:ef:e5:e3:c8:fd:82:50:89:
         d2:b3:83:3d:9d:e5:f7:61:1e:ef:ea:62:e7:ef:45:38:5c:1b:
         12:cd:f0:f6:24:d1:37:e0:69:8d:1c:46:20:e0:d1:a7:08:39:
         0e:99:27:38:ad:97:98:11:df:e4:90:c1:80:11:43:16:08:a8:
         22:d5:f1:bf:d6:ab:63:45:ef:83:f9:32:f0:11:22:9b:95:ff:
         48:78:92:b5:f2:d2:93:ce:e8:fc:39:62:40:a3:62:a3:1c:be:
         3a:82:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:13 2026 by rpki-client