Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
File:                     2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft (raw, json)
Hash identifier:          QnLit+4zuWxwS6nseyK9x5r9dmwHX+8FEAmtEk8ptLE=
Subject key identifier:   81:79:3F:EF:1F:96:9B:B1:C5:53:9A:4B:4D:C8:9D:69:1F:74:13:AC
Authority key identifier: D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
Certificate issuer:       /CN=d886f55b45a068985743450b7ae50f4ca73d6109
Certificate serial:       019F8F7F323329860461C32BCDC219582BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:45 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:45 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:45 +0000
Files and hashes:         1: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl (hash: XVcOLKmzbFyQuN6NPYuDO4Vu+8E3SQEzBnVW8dLKslI=)
                          2: Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa (hash: KPC+Yho2dQqrDOutkpVTQuErt//lueC69aRryj2hiHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:32:33:29:86:04:61:c3:2b:cd:c2:19:58:2b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d886f55b45a068985743450b7ae50f4ca73d6109
        Validity
            Not Before: Jul 23 15:01:45 2026 GMT
            Not After : Jul 24 15:01:45 2026 GMT
        Subject: CN=81793fef1f969bb1c5539a4b4dc89d691f7413ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:8a:d3:56:2d:eb:aa:74:ed:78:84:28:34:
                    58:23:19:2e:8c:c2:f1:63:45:a3:ec:eb:c9:82:fc:
                    2e:fe:f7:dd:d1:c9:e4:27:cd:a0:10:a6:55:09:e9:
                    04:dd:34:c0:d9:5c:16:cd:2c:52:78:31:f8:a2:b5:
                    b7:5b:e8:57:29:9f:9c:f2:4e:1a:55:b0:7e:ce:3d:
                    b4:39:07:f4:40:3c:24:bf:11:9c:0a:04:25:27:cb:
                    a5:91:28:40:9c:aa:5d:e4:ae:f8:ca:9d:d0:46:5d:
                    35:b9:f2:d7:af:0c:6e:31:7d:57:b0:8c:9a:03:a6:
                    cc:c4:8e:20:8f:7a:5c:93:f9:53:f8:f2:ba:4b:f3:
                    d5:e8:56:01:c8:3b:90:c1:dc:fd:c9:41:4d:12:30:
                    e1:3c:b2:0c:0d:85:25:cc:24:c8:52:9c:22:a3:eb:
                    03:1e:cc:c6:2f:9b:d4:be:60:41:50:d2:9e:83:01:
                    c4:96:f7:23:07:6e:4c:56:d4:b1:40:67:2f:bd:ba:
                    02:41:bd:8b:c5:d2:c9:f9:1b:93:ff:30:a8:5f:e8:
                    24:b1:68:f6:ef:53:f5:9a:a1:3d:46:96:bf:2e:6d:
                    f6:e1:86:1f:74:d7:8c:9e:17:9b:98:54:7f:f9:db:
                    32:07:e2:ce:c7:7b:fe:d5:2f:06:f6:d9:0c:6f:9f:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:79:3F:EF:1F:96:9B:B1:C5:53:9A:4B:4D:C8:9D:69:1F:74:13:AC
            X509v3 Authority Key Identifier:
                keyid:D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:8e:58:1e:cd:6e:0e:fe:49:38:f5:d9:ff:43:76:c3:ee:
         ce:51:82:4a:ed:68:51:2e:6a:84:e2:21:f3:bb:86:79:e8:aa:
         2f:d4:ca:f8:6d:59:7c:48:01:ff:e4:db:77:de:61:6c:2a:4b:
         95:92:7c:d5:a1:a0:82:13:38:36:bb:d2:c9:be:c6:80:e5:54:
         80:79:99:86:24:20:65:47:f7:37:ef:79:5d:4f:2c:2e:00:b2:
         33:d5:79:73:ab:13:9a:f8:46:57:4a:94:81:13:49:91:e0:8d:
         72:f6:e4:cc:03:11:98:a6:a6:48:7c:8e:c8:b8:a0:d9:12:29:
         ef:b9:44:d6:f1:c7:80:ee:d5:be:b2:05:0e:fd:e9:fe:8a:88:
         3f:34:fb:ea:05:de:f7:f0:7f:ce:e7:63:59:9a:4e:40:fe:ac:
         83:14:7e:99:00:5c:71:e8:d4:a9:b5:83:22:27:ce:42:9c:6d:
         f2:05:0b:65:6e:c8:bc:cb:9e:b9:02:77:86:ec:d6:fc:8f:2c:
         54:29:e7:06:54:78:bb:ae:45:f7:38:07:c0:54:42:da:a9:24:
         38:1c:c7:e4:7f:1f:1d:3a:da:34:7e:b1:a6:7f:2b:9d:33:a6:
         79:19:e5:7f:d9:48:29:4e:22:b1:ae:1a:c1:8e:a9:0c:a0:1b:
         b0:7b:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:49 2026 by rpki-client