Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File:                     2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier:          axDEfUDbou9hF40MYYXCYxpcWgg48xN2WErC35UCxVs=
Subject key identifier:   2F:D4:8A:EC:DD:A3:7D:2D:9C:A7:C5:7E:FA:AC:66:9F:84:7C:2C:48
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer:       /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial:       019F90C81A3E528FF331C6F6FCF7B87030B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number:          1091
Signing time:             Thu 23 Jul 2026 21:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:00 +0000
Files and hashes:         1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: oZ55iyotaP7jpxCIdRDjfpJE60fJsc7hnNdIBeYeC2A=)
                          2: Mt9Wz8CiJyE1vhw9jtbceg6H-ug.roa (hash: fJNiy9ne0mTwA4HHTmShZYQguekNk9G6a4WDwn5xHSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:1a:3e:52:8f:f3:31:c6:f6:fc:f7:b8:70:30:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
        Validity
            Not Before: Jul 23 21:01:00 2026 GMT
            Not After : Jul 24 21:01:00 2026 GMT
        Subject: CN=2fd48aecdda37d2d9ca7c57efaac669f847c2c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:ba:0b:1d:d9:9b:90:2c:2d:46:aa:18:7c:
                    6f:3c:91:20:23:0e:c9:f3:0d:4d:7b:3f:7f:4a:90:
                    da:f2:ab:fc:ea:3b:70:d6:76:42:15:ce:be:41:b4:
                    9a:22:68:24:4f:f7:58:58:61:01:42:c5:0d:7e:e8:
                    54:10:6c:57:fd:65:0f:81:a5:09:60:da:d0:15:c1:
                    d0:38:d9:36:df:d6:07:1f:f3:8f:d9:64:c0:29:b0:
                    7d:50:59:29:3b:86:aa:97:f5:4f:43:82:3f:23:07:
                    5f:cd:0e:b2:2f:97:5a:5f:91:21:19:6b:f0:82:ac:
                    99:bf:40:38:b0:36:9d:27:56:df:40:3b:e9:6a:29:
                    b4:59:3c:ca:79:bd:58:52:5e:71:24:6a:d1:2a:f5:
                    00:00:96:dc:59:3f:8c:13:7b:ea:0b:6f:29:d3:1c:
                    ce:4a:2f:e9:d8:1b:26:d8:cc:61:54:f9:d8:04:0a:
                    2c:ea:95:67:a7:6c:4b:a4:95:e5:44:95:f2:14:eb:
                    4e:a2:44:ec:c5:3f:ba:0b:6c:ba:f4:cd:35:28:13:
                    9e:63:d3:9e:f8:bd:dd:28:b3:a3:56:7b:a0:f1:fb:
                    4f:6e:ae:ef:d5:1f:9c:ad:4b:e4:5c:09:33:43:b9:
                    eb:89:6f:95:78:1e:93:07:8e:9e:40:43:aa:19:97:
                    14:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D4:8A:EC:DD:A3:7D:2D:9C:A7:C5:7E:FA:AC:66:9F:84:7C:2C:48
            X509v3 Authority Key Identifier:
                keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:93:b0:c1:43:91:07:64:b4:8a:7b:5c:73:f7:4b:f6:a5:
         af:57:2e:39:9f:4d:4a:5c:a2:b3:d2:a6:2a:49:38:e6:64:cf:
         8f:57:ff:eb:8a:e1:f9:a1:7b:ff:f1:1b:e9:91:fc:1f:8e:9b:
         a0:ac:c4:54:07:a0:c4:09:91:2a:86:b2:3c:c8:4c:c8:b8:26:
         d5:52:29:9f:0e:a2:77:73:c3:bf:5c:ad:5d:38:b5:c7:f8:cf:
         c1:2b:ce:32:b4:6a:38:0c:e0:43:d1:83:06:e7:e2:c8:b6:a5:
         bb:f4:39:af:0a:89:ad:3d:1c:b9:de:45:a9:71:28:13:19:4b:
         e7:75:ee:84:3e:67:e2:ac:06:c1:40:57:b2:28:af:fb:d2:5b:
         00:ef:f9:cd:32:c1:a1:6c:c5:c8:d2:03:17:7a:7c:0a:db:bb:
         03:76:fb:7b:93:fe:82:5e:8c:86:10:d1:a4:3f:68:a4:a8:b0:
         ac:06:d9:f2:30:a6:b6:84:a7:57:69:d4:70:63:1e:bf:34:5a:
         b6:7b:fc:85:28:1f:f5:a2:ca:03:98:57:31:d9:cb:86:1c:23:
         b4:af:f2:a4:67:d7:03:84:72:8a:04:e7:05:b7:17:55:c2:cb:
         df:8f:2e:31:9d:7e:44:b0:0a:d8:65:4b:ee:8d:0c:26:27:10:
         11:bb:58:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:42 2026 by rpki-client