Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
File:                     L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft (raw, json)
Hash identifier:          NK87mFIbLkFHEgaYNImjNub7ayPnJYikXFlUP7rY53M=
Subject key identifier:   74:0E:D5:60:27:C2:17:DC:06:91:39:F7:F7:20:EC:CE:07:0E:9A:3D
Authority key identifier: 2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
Certificate issuer:       /CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Certificate serial:       019F8F46EDFF039114A6725EB8DA213FD2F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
Manifest number:          0180
Signing time:             Thu 23 Jul 2026 14:00:18 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:18 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:18 +0000
Files and hashes:         1: L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl (hash: 3yTEMpgxvN4PSvEPlJvUCbhBG5Ng2KJJSmJfHF8uDdo=)
                          2: W19ujnq5zmLk5Ey2K1kacGWH2JY.asa (hash: RQn3eQA/eV9y1T80EJok00M34sgWyNFRnnz0Rki534s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:46:ed:ff:03:91:14:a6:72:5e:b8:da:21:3f:d2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
        Validity
            Not Before: Jul 23 14:00:18 2026 GMT
            Not After : Jul 24 14:00:18 2026 GMT
        Subject: CN=740ed56027c217dc069139f7f720ecce070e9a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:81:fc:c4:9b:d2:73:00:35:1d:3c:48:c1:
                    1a:50:58:4a:c5:bb:02:88:86:63:d3:3e:d9:5f:8f:
                    26:fc:5e:83:67:f5:9b:39:fe:57:31:16:26:ea:1a:
                    a0:a4:15:f3:ff:2b:f1:fa:16:ce:62:af:24:13:bd:
                    7d:44:a7:f6:94:3c:23:8c:8b:4e:9f:ca:2c:da:93:
                    04:5e:6f:b6:1f:7b:6a:7f:fb:0d:20:46:9b:55:ba:
                    b9:4a:62:2b:14:67:7e:2a:b3:87:c7:40:7c:e2:f8:
                    1b:4d:53:f0:f5:bd:c6:08:0d:60:dc:4d:c0:be:f2:
                    01:76:81:c1:34:49:10:e0:77:37:bd:59:22:20:5f:
                    2c:59:21:c3:d3:2a:86:bc:39:11:00:56:a3:cc:8b:
                    bb:68:7c:63:0a:78:02:68:75:23:f5:13:fc:ad:06:
                    58:88:50:fe:f6:bd:c7:07:01:85:35:20:ba:ce:3e:
                    3a:1c:89:53:fb:82:5d:fe:05:85:18:08:6a:da:88:
                    ba:c9:2a:5a:ab:ba:a0:3e:a1:66:39:b8:01:35:28:
                    78:8d:f5:38:76:3c:26:79:d4:a7:8b:40:9a:5f:6d:
                    04:05:82:91:86:b9:d0:49:45:35:9a:08:70:fd:58:
                    e2:32:f5:6f:f6:a4:c2:e1:bd:df:e1:34:da:16:c3:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0E:D5:60:27:C2:17:DC:06:91:39:F7:F7:20:EC:CE:07:0E:9A:3D
            X509v3 Authority Key Identifier:
                keyid:2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:66:5e:6f:30:ec:d7:a5:a2:60:05:be:0c:f5:af:5c:38:4b:
         62:67:ec:0f:6c:38:d3:42:9c:24:23:e1:eb:5d:0d:f8:3a:d0:
         03:47:33:8d:24:66:08:a8:21:d9:0b:d4:dd:6b:55:01:94:c3:
         aa:11:9f:ab:4d:d1:76:f5:16:9b:3f:c4:6f:f6:f8:f0:51:a5:
         40:3e:51:88:d5:0c:7a:b1:57:06:7a:74:bf:db:3d:d8:e1:eb:
         3b:0c:d4:5d:59:7c:0d:be:ac:30:0a:d6:3c:f6:7a:e6:b1:89:
         96:2b:32:de:f6:fb:35:d1:42:ac:92:4f:3b:9c:36:17:20:6c:
         23:a4:3e:9e:33:9e:75:22:c8:c0:1a:38:64:6e:bc:f6:33:bd:
         de:9f:a4:c9:0a:52:95:e5:07:ae:d7:e6:b0:f9:9e:f9:8d:e8:
         75:6e:89:00:78:25:fd:3b:d8:ab:d8:26:aa:0b:11:be:7e:fb:
         7e:f3:6a:45:1f:ff:6d:5b:23:c2:68:e6:18:7b:a2:4e:9b:9b:
         a3:74:51:46:fa:de:4f:44:8a:47:41:30:8f:78:c8:4b:62:c4:
         51:02:11:22:da:e4:8b:e1:64:4b:7b:a0:16:ba:bc:e1:e3:f4:
         ac:ac:86:67:4f:7b:a4:42:5a:db:6e:36:38:0c:e0:5e:b2:6c:
         06:b4:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:13 2026 by rpki-client