Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File:                     2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier:          a/rrMkPPfeQBh09TmQcJMiJVkdAPCjLY9Gw39dKdGN4=
Subject key identifier:   38:F4:2B:14:07:3A:72:7A:8D:3D:8A:E0:13:84:FE:BE:08:74:A4:35
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer:       /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial:       019F91DB29B0774C3E2866334FC20203670A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number:          1438
Signing time:             Fri 24 Jul 2026 02:01:26 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:26 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:26 +0000
Files and hashes:         1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: 2KVEw/eIvTGHFQC+HmQ4ILHIK1RAc5HN37Vh5EIsT6M=)
                          2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:29:b0:77:4c:3e:28:66:33:4f:c2:02:03:67:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
        Validity
            Not Before: Jul 24 02:01:26 2026 GMT
            Not After : Jul 25 02:01:26 2026 GMT
        Subject: CN=38f42b14073a727a8d3d8ae01384febe0874a435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:b9:14:18:e6:50:69:03:67:a4:32:6e:8e:
                    76:1f:52:2e:93:74:aa:b1:d4:90:08:a0:60:73:c1:
                    ac:eb:81:3a:52:57:9d:ce:97:ef:0b:4c:26:46:19:
                    95:de:4a:fb:ef:2f:10:35:ba:d6:80:8b:5e:f8:7d:
                    4d:02:bf:6b:65:32:42:cb:50:9c:f3:34:6f:a5:df:
                    c2:82:c1:23:e6:92:61:94:85:52:4b:51:9f:b8:bb:
                    f7:18:ae:b0:7b:e4:aa:0f:55:6e:9c:71:a9:61:a4:
                    e3:b1:ce:68:6a:b4:40:70:cf:e8:0a:dc:3a:23:59:
                    d6:e7:28:f5:62:23:ec:6a:b1:07:3f:16:06:72:cd:
                    d6:42:1a:fe:c4:ee:e0:b7:55:87:51:1e:01:02:e2:
                    3f:3f:cf:44:0f:87:7b:ea:c2:3a:89:5f:61:14:c2:
                    e9:f7:f6:c9:11:1b:6d:e8:d4:cc:d7:96:bb:cd:6f:
                    67:69:15:e5:32:15:21:d5:67:21:c5:45:d7:a6:2c:
                    19:2e:7a:da:e8:1b:d8:86:3f:7e:08:9d:54:93:31:
                    9d:fb:7c:65:e5:4d:75:57:3d:e3:b5:f3:3b:5e:9c:
                    c8:2f:5a:83:84:57:71:1a:66:3d:b3:4f:a7:d6:16:
                    47:45:6c:4d:3d:f5:83:da:bb:80:c5:b8:05:c6:41:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F4:2B:14:07:3A:72:7A:8D:3D:8A:E0:13:84:FE:BE:08:74:A4:35
            X509v3 Authority Key Identifier:
                keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:4a:87:d4:29:89:62:7e:99:37:ec:3b:54:c6:70:86:f3:
         4b:37:72:f5:8b:dd:bf:ea:a7:6b:7f:47:98:c9:86:a3:04:51:
         92:db:04:21:25:e7:4e:95:bc:9c:6c:4e:93:d9:9f:bc:77:4b:
         5b:76:af:c7:b8:9d:bf:30:90:33:cd:a4:f2:41:40:9e:c0:80:
         ba:5e:65:06:fa:fa:56:f9:cf:cd:58:9c:bd:ec:32:14:cc:b1:
         a3:22:a4:a2:a7:b0:f5:e5:bf:d8:5a:1a:a1:eb:1b:41:63:ef:
         c6:af:99:79:ae:5a:fb:80:83:e1:9e:a6:36:cf:bc:74:93:04:
         da:94:2d:d8:5a:69:7d:eb:45:b3:0e:40:9e:19:58:b6:51:97:
         ec:99:5e:4e:2d:7d:a3:5e:d9:10:e2:5c:a0:6d:c2:a5:ec:31:
         7b:b2:54:7d:b3:4f:89:32:2c:ab:8e:59:9a:4e:0c:53:dd:26:
         7e:60:f8:0d:1f:1a:97:1a:d6:cb:b9:b4:db:16:ef:9e:6a:05:
         9c:b5:5d:58:13:19:e3:56:8f:bf:d2:85:78:a6:11:eb:69:d0:
         ad:ef:4e:bd:ac:04:51:1c:72:1d:11:18:d5:5f:e7:e4:d7:67:
         b7:5b:9b:0b:e3:79:8e:af:39:0d:f2:77:f2:dc:f8:7d:ec:9b:
         e1:70:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:49 2026 by rpki-client