Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File:                     2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier:          Tby71pm6/ltXgLWej2bREtFHEqS7JDTH/6F3naodbqY=
Subject key identifier:   D3:DE:2D:86:67:1A:75:EB:8A:AB:62:15:6D:BD:6B:80:BD:26:22:EE
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer:       /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial:       019F90599C01DAA30CAE71085369DD3C43DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number:          19C2
Signing time:             Thu 23 Jul 2026 19:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:19 +0000
Files and hashes:         1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: e1u1ugy3ZzWVVex8Vs8yuQTFNT3sQS5542CxmvBY0cs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:9c:01:da:a3:0c:ae:71:08:53:69:dd:3c:43:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
        Validity
            Not Before: Jul 23 19:00:19 2026 GMT
            Not After : Jul 24 19:00:19 2026 GMT
        Subject: CN=d3de2d86671a75eb8aab62156dbd6b80bd2622ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:92:b1:ab:c0:33:7f:a9:46:ba:9d:96:0e:
                    b4:73:26:17:6e:ed:6d:18:d1:bb:e5:b3:91:7d:7f:
                    2b:81:52:d7:bd:81:d2:cd:51:50:b2:15:67:2a:f5:
                    e4:82:b5:23:3d:7d:19:f3:af:7f:c7:82:90:e3:8f:
                    20:30:72:8f:30:e2:27:4e:0a:4d:e2:21:8a:aa:12:
                    e3:e9:8d:db:76:b2:38:ad:e6:f8:f0:06:24:9d:83:
                    61:05:d8:1f:fa:01:e9:9e:7b:35:b0:c4:77:4d:e4:
                    5a:18:e0:14:24:e5:5b:ce:f2:c3:ea:3b:3a:a9:ac:
                    32:fc:1b:16:df:86:c9:f6:37:9b:57:a5:2f:a9:db:
                    98:61:bd:fa:2f:eb:7b:78:4c:8e:bf:b7:e3:56:bd:
                    d0:c3:b0:9d:70:da:4c:bd:d7:72:29:78:76:c3:9d:
                    ef:b5:1f:82:09:e0:0f:43:1e:53:a1:6f:1f:f7:d2:
                    1c:d4:20:01:ef:cf:37:b2:df:72:b2:c1:53:04:99:
                    97:05:53:b1:39:64:55:fa:e7:12:69:e8:a5:c1:98:
                    49:f6:15:f4:97:05:8c:c3:1c:f8:92:1f:60:b9:9d:
                    f1:ab:a8:98:93:b3:08:10:f8:50:83:5b:34:1a:95:
                    36:9f:cb:87:30:c1:87:02:4c:91:40:e6:f7:a5:dc:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DE:2D:86:67:1A:75:EB:8A:AB:62:15:6D:BD:6B:80:BD:26:22:EE
            X509v3 Authority Key Identifier:
                keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e1:68:a4:3f:58:25:40:e1:26:8f:d5:95:16:af:98:84:e8:
         e4:34:23:6f:50:d2:44:21:6b:38:1c:5e:2e:42:d9:56:10:a6:
         b0:79:17:91:d3:c9:96:50:c1:48:f0:9d:a8:b5:9a:56:de:b9:
         d5:14:b0:30:22:52:ca:a7:0b:57:1e:d0:d3:ff:b9:7c:92:5f:
         c4:63:0a:90:19:28:f1:c8:07:5c:ae:38:9f:3b:65:79:a5:9d:
         e0:84:11:a4:f8:cc:68:18:87:40:c6:5b:b4:67:7b:cb:82:da:
         f5:ec:c0:ae:0d:76:a7:29:55:49:35:2b:42:37:17:08:bb:10:
         ac:fe:5d:30:49:a6:b9:ea:19:7e:b3:41:cc:a8:68:87:cc:6a:
         08:51:7f:2b:1e:f6:fe:bb:cf:03:33:92:9b:2f:2e:0f:ce:16:
         e4:9e:a5:37:c2:f7:46:4b:fe:8d:47:ba:5f:fa:69:ae:26:48:
         24:90:35:b9:2d:93:d3:98:d5:56:d1:5c:51:e5:5a:d2:d3:81:
         15:59:38:a4:ad:51:02:ea:20:55:b5:5b:9c:17:18:5a:91:c4:
         77:2c:b3:db:4e:60:15:10:77:69:83:64:f9:27:51:89:71:fb:
         e3:c6:71:04:09:15:e7:13:2d:42:b1:87:80:d7:07:d5:6a:49:
         60:df:a8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:48 2026 by rpki-client