Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
File:                     2lPr-vXBh42KIqk44XMqigdxTzU.mft (raw, json)
Hash identifier:          CS56xTQhC6Yznc4zc4PbDUtgCDws/wCUbrL5Rkr8i1Y=
Subject key identifier:   28:80:D6:85:39:A7:70:82:75:96:AA:98:28:E2:31:83:F7:1E:85:73
Authority key identifier: DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35
Certificate issuer:       /CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
Certificate serial:       019F9248CA19356ED41DC31A5DD2B75D81B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
Manifest number:          19C3
Signing time:             Fri 24 Jul 2026 04:01:11 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:11 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:11 +0000
Files and hashes:         1: 2lPr-vXBh42KIqk44XMqigdxTzU.crl (hash: 1xJCfYSU3v/U24kJukE3rPb7VWgJeQV0E61NaUjykws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:ca:19:35:6e:d4:1d:c3:1a:5d:d2:b7:5d:81:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
        Validity
            Not Before: Jul 24 04:01:11 2026 GMT
            Not After : Jul 25 04:01:11 2026 GMT
        Subject: CN=2880d68539a770827596aa9828e23183f71e8573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:7e:70:c5:de:52:3e:95:54:0e:05:58:88:
                    18:08:f5:be:f3:e2:a7:ea:60:0f:11:8c:9b:42:c1:
                    b2:b0:59:fa:d6:c8:49:18:85:0b:47:ce:62:07:a5:
                    44:4c:a4:25:93:57:98:eb:c9:7d:89:df:a0:42:a0:
                    24:e1:23:ef:33:34:aa:a0:b5:0a:45:76:9c:95:07:
                    f2:68:3b:cf:a9:e6:5b:7c:e9:29:ba:2e:96:db:65:
                    07:4d:d8:25:ea:75:f2:79:9b:93:dc:7e:d5:c9:44:
                    5b:11:3b:98:7d:2f:85:50:9d:71:7c:45:5c:50:bb:
                    ab:58:24:04:40:c7:11:47:be:49:9f:02:2b:a0:23:
                    7c:9c:68:98:e2:a1:44:49:a1:91:72:3b:fc:34:a6:
                    9a:a3:05:59:b8:3f:2c:7f:8e:b4:cc:33:3f:6e:65:
                    f3:59:2a:e3:28:4f:5a:07:34:5d:14:35:f8:c6:6f:
                    07:d1:f9:65:e5:3d:05:07:5c:0d:56:2d:c4:7a:73:
                    53:66:d2:14:e9:ab:91:bb:7b:b2:89:ef:8b:61:23:
                    99:41:30:86:aa:80:b1:9c:2c:d2:42:26:63:7b:09:
                    cb:51:fe:20:f1:7d:a4:9d:b1:0a:0f:b0:cc:df:ed:
                    47:92:a8:71:74:4f:7a:51:29:5a:28:a9:f1:21:1a:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:80:D6:85:39:A7:70:82:75:96:AA:98:28:E2:31:83:F7:1E:85:73
            X509v3 Authority Key Identifier:
                keyid:DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:ac:02:3d:df:4e:8f:0b:f1:bd:28:16:19:02:f7:cc:6b:
         e7:2a:e0:07:a0:30:4e:06:cb:c6:13:4f:bc:0b:4c:b9:a0:a1:
         bd:25:9b:79:9b:68:5e:f8:cb:22:00:33:86:e0:2e:82:75:ba:
         9f:c8:4e:51:6d:dd:3e:2e:c3:16:50:17:dd:27:77:a0:09:2e:
         7e:82:48:bf:af:5a:c2:72:5c:85:7a:5b:7a:3d:77:eb:76:0b:
         f7:07:12:1a:02:6d:c6:02:df:2a:eb:20:5f:6b:7b:fa:d2:dc:
         71:7b:34:b4:14:7d:e8:2a:b1:ac:6d:5a:2e:1f:fc:b1:81:72:
         3b:29:5a:65:cd:e0:35:09:a9:85:9d:98:a4:33:a6:3f:d4:cc:
         48:ce:94:5c:26:27:27:b5:df:c8:39:1e:d0:4f:b7:e9:be:49:
         a8:54:46:1e:1d:f2:6e:68:d9:a8:6f:e0:9c:30:c7:e5:97:aa:
         d6:22:f1:27:84:24:07:75:28:01:1d:41:55:ff:cd:13:ce:26:
         de:32:f9:bc:f7:62:44:25:16:76:ff:fb:ef:71:8e:30:46:2f:
         8c:ff:03:ca:b6:e9:6f:04:04:53:0c:78:9e:42:f3:90:88:1d:
         f4:92:8e:5f:ad:b5:0a:8c:54:38:ba:81:55:7e:17:fe:bc:6e:
         75:a7:70:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSMoZNW7UHcMaXdK3XYG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTNlYmZhZjVjMTg3OGQ4YTIyYTkzOGUxNzMyYThhMDc3
MTRmMzUwHhcNMjYwNzI0MDQwMTExWhcNMjYwNzI1MDQwMTExWjAzMTEwLwYDVQQD
EygyODgwZDY4NTM5YTc3MDgyNzU5NmFhOTgyOGUyMzE4M2Y3MWU4NTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdh+cMXeUj6VVA4FWIgYCPW+8+Kn
6mAPEYybQsGysFn61shJGIULR85iB6VETKQlk1eY68l9id+gQqAk4SPvMzSqoLUK
RXaclQfyaDvPqeZbfOkpui6W22UHTdgl6nXyeZuT3H7VyURbETuYfS+FUJ1xfEVc
ULurWCQEQMcRR75JnwIroCN8nGiY4qFESaGRcjv8NKaaowVZuD8sf460zDM/bmXz
WSrjKE9aBzRdFDX4xm8H0fll5T0FB1wNVi3EenNTZtIU6auRu3uyie+LYSOZQTCG
qoCxnCzSQiZjewnLUf4g8X2knbEKD7DM3+1HkqhxdE96USlaKKnxIRoB9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiA1oU5p3CCdZaqmCjiMYP3HoVzMB8GA1UdIwQY
MBaAFNpT6/r1wYeNiiKpOOFzKooHcU81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxQci12WEJoNDJLSXFrNDRYTXFpZ2R4VHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xYzdjMGUtMjNhMS00MTQyLWJlZTgt
OTNjOWU2YjA5M2JjLzEvMmxQci12WEJoNDJLSXFrNDRYTXFpZ2R4VHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xYzdjMGUtMjNhMS00MTQyLWJlZTgtOTNjOWU2YjA5M2Jj
LzEvMmxQci12WEJoNDJLSXFrNDRYTXFpZ2R4VHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbX6sAj3f
To8L8b0oFhkC98xr5yrgB6AwTgbLxhNPvAtMuaChvSWbeZtoXvjLIgAzhuAugnW6
n8hOUW3dPi7DFlAX3Sd3oAkufoJIv69awnJchXpbej1363YL9wcSGgJtxgLfKusg
X2t7+tLccXs0tBR96CqxrG1aLh/8sYFyOylaZc3gNQmphZ2YpDOmP9TMSM6UXCYn
J7XfyDke0E+36b5JqFRGHh3ybmjZqG/gnDDH5Zeq1iLxJ4QkB3UoAR1BVf/NE84m
3jL5vPdiRCUWdv/773GOMEYvjP8DyrbpbwQEUwx4nkLzkIgd9JKOX621CoxUOLqB
VX4X/rxudadwPg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:52 2026 by rpki-client