Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
File:                     P2TX2Py26n88U-wAJA2Owcl3Zqc.mft (raw, json)
Hash identifier:          Qh/FH699PVUhswDyilaVFttuVWHVxh1AsYDa1JHucfs=
Subject key identifier:   5B:82:2B:17:24:9E:A9:FD:86:E5:53:7C:4D:9A:EB:03:9E:69:83:C7
Authority key identifier: 3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7
Certificate issuer:       /CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
Certificate serial:       019F8F47A12DD76DFA7B7B87C39032E9A1DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
Manifest number:          018D
Signing time:             Thu 23 Jul 2026 14:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 14:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 14:01:03 +0000
Files and hashes:         1: P2TX2Py26n88U-wAJA2Owcl3Zqc.crl (hash: 8bVyc7IQMYm97vzE4QGFQaDlZYa5TGYEz6cSMVcEOks=)
                          2: sSJSF0Ef5iNGBXgop50-6zZdD2k.asa (hash: 2H0jdgMOud4+cQqq8gHUDsGfxxUMnvX/NXbs1EyPhbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:a1:2d:d7:6d:fa:7b:7b:87:c3:90:32:e9:a1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
        Validity
            Not Before: Jul 23 14:01:03 2026 GMT
            Not After : Jul 24 14:01:03 2026 GMT
        Subject: CN=5b822b17249ea9fd86e5537c4d9aeb039e6983c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d1:15:63:51:51:ae:88:54:b7:d3:8d:75:cc:
                    c6:79:67:d4:ba:d2:62:a6:ee:00:ad:a4:a1:f6:c5:
                    19:e2:49:be:9f:91:b6:52:2c:60:d2:30:d6:c6:73:
                    6c:07:e0:85:39:92:47:9e:b6:b2:6d:4a:47:6f:8b:
                    a8:9d:de:48:7a:66:bc:42:f5:55:ed:55:7f:4e:3f:
                    d0:5c:9f:89:ab:b6:be:01:cf:31:40:af:e3:09:21:
                    97:80:dd:48:e0:d0:56:f8:a4:e5:3e:7d:d7:2c:d4:
                    e0:e7:18:bd:7a:27:cc:3d:88:21:ed:7e:95:65:e2:
                    dd:0b:20:1e:6b:e2:16:5d:96:f4:73:91:0e:55:84:
                    cc:f7:e9:1c:59:a1:5b:27:1d:3c:3c:48:a1:fe:7d:
                    5e:cb:3e:ee:19:ab:d7:01:80:ff:59:7a:f4:97:fc:
                    2e:72:bd:b3:17:65:84:c4:2a:4a:24:bc:7b:45:34:
                    31:9e:81:98:e7:28:a2:3d:e0:ba:39:ce:07:a3:0a:
                    a9:04:bd:55:98:39:9d:2f:56:c7:f6:26:de:f6:09:
                    e9:10:cd:a9:d1:3f:3a:73:a8:51:5a:85:ea:45:cc:
                    8d:92:62:dc:6e:cb:3d:90:c7:c9:f0:ef:4e:ed:17:
                    5e:93:d5:f9:6c:d8:f8:8f:52:1d:df:13:1d:e3:dd:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:82:2B:17:24:9E:A9:FD:86:E5:53:7C:4D:9A:EB:03:9E:69:83:C7
            X509v3 Authority Key Identifier:
                keyid:3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:c1:be:f3:62:95:79:a6:f8:20:0c:15:c2:7e:a4:10:b8:
         fc:33:e6:97:18:68:b1:c5:e7:22:47:d0:c9:b8:61:8f:ad:72:
         cc:c3:19:47:18:64:94:ca:cd:e6:6a:0c:74:67:37:cd:c3:53:
         3c:3a:31:f2:03:9c:05:30:71:e3:50:3e:08:b0:0a:51:f7:d7:
         13:74:7f:0a:3b:a4:94:06:cc:90:79:54:cd:ac:d2:c9:5d:2d:
         63:e6:22:c4:0d:1a:15:64:78:01:81:d2:f2:3d:57:4a:6d:03:
         f1:84:54:3e:84:91:3c:bc:80:5c:8e:9a:fa:2c:5d:c9:5b:13:
         ab:53:6c:8b:6b:47:7b:1d:a3:72:05:75:6c:12:17:a6:02:da:
         36:93:0c:77:ff:99:34:62:c6:b8:89:43:cf:22:42:a0:82:00:
         8f:fa:00:fe:1f:ed:23:f9:01:76:51:8d:da:62:55:90:bf:9e:
         c5:c2:09:fd:63:df:4e:21:ed:72:37:cf:f8:9b:e0:d7:06:f2:
         67:23:ab:12:09:0f:14:d2:98:a9:41:b8:53:5e:56:4b:de:32:
         34:91:da:40:0f:a6:54:50:0c:c6:b4:8b:cd:ce:70:3f:b9:6d:
         ab:bd:02:ed:a1:42:3d:72:96:3c:6f:19:9a:79:c2:11:ee:9a:
         32:6b:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:25 2026 by rpki-client