Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
File:                     2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft (raw, json)
Hash identifier:          23MJ9jMaexm9CfxOcRzsM5+WjFS5K1Kw8IqNxHA9O6A=
Subject key identifier:   58:C5:E9:73:0D:4D:A0:F2:C1:2E:98:D7:7C:8A:72:B3:94:F8:FF:8E
Authority key identifier: DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54
Certificate issuer:       /CN=daf3570c75849768d6e0cdd2b77527142d715554
Certificate serial:       019F8F7EEF601E1E8340B4E9BA9F17F9D89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:28 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:28 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:28 +0000
Files and hashes:         1: 2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl (hash: NgjuQxiZdYTiGd/dgEv/q+f+uj37KiHwp5Lzd1Vr+EA=)
                          2: HmX3WrOK4Lothw1YNZ_5hQwRPLw.roa (hash: qXXJjyn66lMh76djAuMwFFUTchPWx0RZgcoqaccSxA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:ef:60:1e:1e:83:40:b4:e9:ba:9f:17:f9:d8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daf3570c75849768d6e0cdd2b77527142d715554
        Validity
            Not Before: Jul 23 15:01:28 2026 GMT
            Not After : Jul 24 15:01:28 2026 GMT
        Subject: CN=58c5e9730d4da0f2c12e98d77c8a72b394f8ff8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5b:93:01:ad:55:33:c4:6d:52:41:19:82:db:
                    21:bb:60:fc:17:fa:ee:0f:ba:13:e1:bc:04:62:d5:
                    24:db:c8:28:21:10:ba:0c:fd:51:29:9c:04:d0:13:
                    05:2a:52:00:cf:e6:d5:4e:84:86:d9:8c:15:9b:25:
                    c7:a5:22:ec:94:04:b5:10:1f:29:8f:3a:02:7c:68:
                    27:92:60:6f:b5:71:5b:51:3d:84:0a:17:81:a5:1f:
                    39:8d:82:8d:54:98:f8:2d:65:c3:cc:8e:f9:11:9f:
                    bb:44:bb:de:02:50:e2:32:a6:2a:f2:db:c4:d9:fb:
                    43:5e:03:e3:65:5a:86:f4:20:ac:2d:e5:95:7e:b1:
                    bb:da:b8:0c:f2:68:5c:17:02:72:11:1f:02:4e:0d:
                    b2:f7:b0:4c:96:22:70:c5:bb:62:85:a0:ce:28:87:
                    a7:1f:1a:05:39:c8:4f:5a:a2:97:4f:d1:89:f4:c8:
                    ac:9b:ae:ba:60:d2:30:6d:7f:12:5d:d8:31:7d:68:
                    54:23:be:7e:0d:da:42:cb:69:5c:66:6d:95:b4:44:
                    24:43:99:8c:c4:a2:f3:72:5b:7e:c1:c3:07:c6:a0:
                    f6:0d:76:5e:28:0e:34:11:1f:f4:bf:e9:c1:e7:55:
                    f7:2a:ee:74:84:6a:50:00:da:ed:11:63:01:2e:40:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C5:E9:73:0D:4D:A0:F2:C1:2E:98:D7:7C:8A:72:B3:94:F8:FF:8E
            X509v3 Authority Key Identifier:
                keyid:DA:F3:57:0C:75:84:97:68:D6:E0:CD:D2:B7:75:27:14:2D:71:55:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vNXDHWEl2jW4M3St3UnFC1xVVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/2vNXDHWEl2jW4M3St3UnFC1xVVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2c:32:05:72:12:48:71:68:2b:b6:34:b2:2e:bb:0b:55:aa:
         a0:79:90:9a:93:52:9c:46:da:c5:02:61:24:75:5c:ad:3f:c6:
         15:8b:8d:f9:8c:e6:a2:b3:81:55:93:56:56:f6:ea:c3:41:28:
         64:e3:88:18:c6:08:79:33:0c:20:ec:11:88:fb:23:cd:62:d5:
         bd:5d:72:02:65:cc:f2:52:6a:9a:a1:76:de:e3:47:28:f6:37:
         d1:bd:9d:3e:e6:f3:ce:de:49:a3:62:78:f8:fd:49:66:da:ed:
         1c:47:5f:42:9d:e6:1a:7d:0a:fe:50:88:8f:d9:7c:d9:80:c4:
         e7:78:31:a8:a3:4c:3b:41:6b:12:88:1a:03:ee:62:67:17:2e:
         db:bb:e6:f1:6e:dc:2d:48:00:02:a0:f8:4d:c1:8e:6e:66:9a:
         9b:a8:bc:83:d4:7d:fe:71:bd:dd:13:15:0d:e3:76:91:d1:d2:
         86:a4:56:a4:24:78:4c:29:e4:50:c4:f2:cc:cc:5f:6d:7b:12:
         e0:ab:85:63:a1:ab:98:c6:52:04:9e:ec:55:40:e3:aa:0c:5d:
         ac:97:72:c1:ad:9c:bd:f4:c2:4d:2f:23:f5:cf:11:c8:98:61:
         d7:fa:73:c5:97:47:a6:af:d2:eb:8e:ce:18:6b:38:c1:90:f3:
         6a:dc:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:21 2026 by rpki-client