Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File:                     2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier:          TARcBuGpeAR1v9Qs+kxOd775gs4oPNdWB3QL+vqujXc=
Subject key identifier:   78:92:BA:84:F7:D4:03:A9:B5:D2:34:B0:7C:5F:2C:8C:68:E6:EC:74
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer:       /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial:       019F913563A7AE204DBA2667F9FE0D9B07CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number:          1850
Signing time:             Thu 23 Jul 2026 23:00:22 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:22 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:22 +0000
Files and hashes:         1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: UQnJs17DYSz/TY8RPhq9mYbMwML1OR6c3bQTxM1D28o=)
                          2: LbDAcjZRmfBvnYit-qN-3rlzTKY.roa (hash: +vYoAsDEQG/i2Ib8tFZBcU6HYqtLxdIh9g5RpOOfFc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:63:a7:ae:20:4d:ba:26:67:f9:fe:0d:9b:07:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
        Validity
            Not Before: Jul 23 23:00:22 2026 GMT
            Not After : Jul 24 23:00:22 2026 GMT
        Subject: CN=7892ba84f7d403a9b5d234b07c5f2c8c68e6ec74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:07:08:b4:82:69:6c:14:1c:f9:08:10:62:b7:
                    6e:a1:79:2c:36:38:ac:67:be:e8:11:08:b8:da:50:
                    a6:80:1a:81:92:5b:7d:94:0a:ab:3b:ec:9c:cc:36:
                    4d:84:6b:77:0a:af:70:98:84:ff:97:6f:ec:a9:3b:
                    95:ad:9c:37:24:cd:2a:b7:f1:19:1b:34:6f:75:df:
                    74:22:62:05:fc:ea:ec:73:63:e7:c7:24:19:4e:39:
                    e1:91:5b:90:e8:25:4f:1e:39:10:b6:7e:ec:34:fd:
                    32:20:1a:14:b4:86:c8:f5:7a:a5:bb:50:fd:54:8f:
                    5b:6d:90:b3:23:0d:43:40:37:c1:5a:a5:f1:cb:20:
                    e8:3b:ac:6b:5b:c2:23:88:08:fb:3f:52:a7:9f:83:
                    9a:dc:2d:34:51:9e:f1:c8:7e:85:6c:51:5a:c8:47:
                    22:06:a4:8f:78:9b:ee:ca:e9:03:fb:92:e4:01:b2:
                    6e:9c:6a:44:f8:a9:30:70:09:9e:d8:bf:29:d7:c9:
                    7b:9f:bd:53:9d:ee:31:bd:de:de:da:66:49:4c:a3:
                    44:21:07:e6:e3:a8:c0:89:c9:d8:dd:67:73:10:46:
                    60:bc:61:45:bb:46:71:15:7a:78:e1:bd:f5:f8:da:
                    75:54:80:f2:16:9f:3c:54:cf:18:5e:c0:55:1f:13:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:92:BA:84:F7:D4:03:A9:B5:D2:34:B0:7C:5F:2C:8C:68:E6:EC:74
            X509v3 Authority Key Identifier:
                keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:8a:0d:5f:19:f4:a0:fd:97:c8:f4:72:f2:38:0e:c8:7e:
         08:5b:72:86:13:bb:f8:a5:96:c3:5d:ae:e0:d0:3b:0b:b3:7d:
         e6:4e:08:83:e9:0b:f5:23:fb:f9:98:82:97:9d:e1:1d:7e:7f:
         06:5c:6c:61:bf:80:72:6f:e8:02:a6:2f:ef:ad:5c:f1:aa:6d:
         6f:b6:db:53:9d:36:e8:56:1c:7e:f8:0e:ef:50:2c:bd:68:ce:
         b4:5e:48:61:a9:85:50:dd:f8:a2:07:42:03:9e:0f:cc:7d:cf:
         5b:c7:77:eb:6a:59:d8:e9:6c:8a:d7:09:10:bd:43:bc:33:7d:
         e7:c6:66:d9:ec:06:04:6c:ee:c5:e0:61:37:9a:3d:7d:95:93:
         f6:25:64:e8:1f:0d:b8:c0:a6:e6:bc:da:1a:39:06:49:fe:9c:
         df:10:43:60:59:54:ff:9a:8e:11:ad:a5:2d:aa:fd:7e:c6:95:
         c9:d3:25:67:6d:03:c9:0c:c5:91:7b:2d:50:d1:53:6b:bb:86:
         6f:ce:d6:6b:1f:cb:28:39:54:fd:07:74:4a:06:72:12:f6:39:
         2b:bf:e2:f4:47:64:1f:b1:39:7e:a5:33:7b:07:7f:b2:dc:b8:
         a8:d2:e6:b4:13:a2:dc:51:2e:0b:a8:42:58:b8:4c:cc:8f:de:
         ac:22:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:21 2026 by rpki-client