Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File:                     2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier:          FWa0wy3V4vMLyMLlYwkZd6lbxbZnEqM/6kS3beCYvKA=
Subject key identifier:   52:21:D5:15:AC:23:B0:E3:2E:C3:DF:28:E5:DF:FC:49:D8:2D:97:51
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer:       /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial:       019F91DAF6A2B5E212752C78D7975ADF249C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number:          08FC
Signing time:             Fri 24 Jul 2026 02:01:14 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:14 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:14 +0000
Files and hashes:         1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: 5IhPvE3ZQTqx/dpfvx2MES6Hj5ffc8wix2JNJkcwkG4=)
                          2: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (hash: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:f6:a2:b5:e2:12:75:2c:78:d7:97:5a:df:24:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
        Validity
            Not Before: Jul 24 02:01:14 2026 GMT
            Not After : Jul 25 02:01:14 2026 GMT
        Subject: CN=5221d515ac23b0e32ec3df28e5dffc49d82d9751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:1a:98:1d:c0:2f:65:31:44:de:ef:c4:93:
                    9c:c6:f8:cc:de:71:9f:a9:f1:1f:85:15:98:23:5f:
                    3d:db:33:9b:02:d3:ad:de:db:65:6e:73:c8:5e:46:
                    4c:d3:34:79:d3:0e:93:c5:a4:0b:2b:cb:a5:18:3c:
                    e7:84:86:0e:0a:ea:b7:27:95:fd:19:59:14:56:0d:
                    dd:a9:06:7f:bd:b6:4d:88:36:b7:1a:fa:fd:e6:fd:
                    6e:53:26:36:af:88:1d:78:78:ed:f7:4e:cd:79:f2:
                    65:f3:b1:29:0d:d6:a6:45:a9:cf:6d:75:c9:c7:3e:
                    18:b9:a9:ad:9d:64:fd:28:e5:65:fe:e3:69:75:58:
                    18:95:43:07:79:f2:e2:1d:44:b2:0a:d7:5d:26:3b:
                    76:44:ae:be:ba:99:1a:8d:d4:19:82:d5:51:2f:98:
                    81:f2:e6:30:59:4f:cc:0f:1c:60:9f:76:0b:44:5d:
                    57:39:84:56:e8:a4:87:c8:45:d8:c0:1b:72:28:6c:
                    4b:ec:f8:4e:2d:40:ed:03:7d:0c:3a:17:19:87:0a:
                    2d:6a:51:85:52:eb:8e:f1:e1:f7:f2:ce:d5:f0:4c:
                    f1:da:45:64:47:cb:92:ba:81:0e:1a:62:11:14:6e:
                    2d:bb:6f:32:c5:b1:db:c3:c6:28:17:b1:a7:dc:0c:
                    56:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:21:D5:15:AC:23:B0:E3:2E:C3:DF:28:E5:DF:FC:49:D8:2D:97:51
            X509v3 Authority Key Identifier:
                keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:af:24:64:f3:13:05:6d:04:3b:68:3b:3f:85:8c:0a:d4:c7:
         8a:96:1c:74:cc:fb:72:75:82:de:bb:81:ba:06:e6:fc:5e:ae:
         57:a9:d9:cc:59:7a:68:63:49:43:b9:b8:d2:f7:c9:41:87:1e:
         3d:a1:ad:12:e2:40:20:75:f2:62:60:83:cc:9c:f1:c6:b9:8d:
         f6:56:14:01:7e:20:b3:fa:da:25:fa:24:b4:64:98:a2:19:f8:
         f2:d1:5d:ea:9c:8f:95:6f:67:5a:e0:3d:6a:13:ff:48:a4:3d:
         35:55:92:3b:13:0b:33:58:fb:b4:99:bd:17:5d:2f:a3:ec:d9:
         ee:c0:47:21:91:e0:b6:dc:65:aa:c3:55:3c:c7:62:8c:98:cd:
         c4:48:a5:cf:c1:60:42:4f:5c:8d:3d:53:e8:7c:63:a3:b9:a5:
         90:80:e8:23:33:6d:11:e1:ac:90:0c:a6:a1:18:84:75:91:72:
         9c:76:d0:b7:74:66:6b:c1:4c:e3:a5:bf:d1:71:0a:e1:3b:a0:
         e9:06:4c:06:ae:7a:e7:91:3a:a0:9b:38:3a:d4:62:4e:ae:96:
         6f:7b:60:21:be:bd:c0:8e:4c:e0:71:63:90:db:80:73:55:28:
         42:40:30:62:44:68:c3:f9:8a:40:33:f5:f9:3e:bd:17:16:ae:
         de:16:e8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:41 2026 by rpki-client