Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File:                     2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier:          w79d97rYOCGlvzEvu3fkqDwu8/TZcKxJ39w5JflMsiA=
Subject key identifier:   7C:E6:91:40:40:B6:82:7F:6D:AE:C1:D5:52:E6:33:57:61:93:D6:DF
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer:       /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial:       019F92ED11A7D9056FC8CC945A7B08EF5BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number:          17B7
Signing time:             Fri 24 Jul 2026 07:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:37 +0000
Files and hashes:         1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: AbkwGPyMBK6kZSZ70dXk5Yf4L6Ov4X/dFa7kkWAeIlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:11:a7:d9:05:6f:c8:cc:94:5a:7b:08:ef:5b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
        Validity
            Not Before: Jul 24 07:00:37 2026 GMT
            Not After : Jul 25 07:00:37 2026 GMT
        Subject: CN=7ce6914040b6827f6daec1d552e633576193d6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:85:4a:33:35:6e:90:e6:b4:4b:0c:47:a8:
                    06:c3:b6:24:dc:b3:1d:66:96:99:27:a1:52:77:0e:
                    a7:78:9b:e6:bd:4a:03:93:1d:e3:14:b3:c3:03:6c:
                    92:f6:d3:73:69:4d:cc:81:cc:99:e7:72:77:4e:05:
                    19:73:1c:85:f6:bf:95:52:dc:60:10:9f:56:80:65:
                    93:0a:ac:7a:35:23:52:b8:80:8c:9a:4e:00:d1:6e:
                    70:10:be:f2:ce:25:5c:82:25:7e:67:43:96:bd:5e:
                    db:f7:12:83:e6:92:2d:de:4b:1a:95:c6:f2:db:8f:
                    49:27:42:fd:7e:b6:20:b4:6d:de:0e:39:93:df:02:
                    d3:4e:42:62:0c:6d:a7:cb:7a:b8:86:a5:08:0b:b8:
                    52:5a:33:07:e5:f9:0a:1d:30:20:9d:ba:4b:c0:5d:
                    85:a5:44:e0:f8:4a:d7:e6:3d:08:df:34:82:43:ea:
                    00:80:bc:d9:2a:b9:9e:d4:14:fe:fb:a9:3b:e2:f0:
                    ff:26:92:5a:1d:7f:04:cb:68:f2:db:7c:62:44:34:
                    92:30:e1:a3:54:dd:ca:3c:a9:18:99:f1:af:ae:22:
                    1f:35:24:09:54:3a:b8:e7:79:54:3e:7d:ab:4c:7a:
                    75:07:27:82:33:bb:eb:d7:56:11:8f:25:eb:a5:bd:
                    f8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E6:91:40:40:B6:82:7F:6D:AE:C1:D5:52:E6:33:57:61:93:D6:DF
            X509v3 Authority Key Identifier:
                keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5c:e7:e6:e3:6f:ec:b4:98:09:45:59:fe:51:ba:a6:58:a4:
         11:8e:61:d5:cd:51:03:ba:37:3b:f4:07:13:a5:3f:2c:d9:7e:
         f4:16:f9:c5:1c:ad:85:2d:87:0b:a9:cb:17:a7:9e:f8:8e:1e:
         e6:89:3c:61:59:e6:51:52:da:0b:79:09:72:6f:4c:27:0f:ab:
         8a:17:a5:dd:e0:df:fd:ce:e7:6c:ab:dc:48:ce:c4:9b:b5:b1:
         2d:98:7a:95:71:35:f1:e4:1e:41:27:ad:02:62:a5:b9:da:f9:
         d1:01:62:a1:51:e7:6e:bd:ba:ba:aa:bc:e2:46:b9:9f:c3:b9:
         82:60:54:f8:3d:4a:00:7a:49:fa:09:09:4b:a0:36:36:f3:7b:
         6e:1d:a2:e4:b7:20:4a:16:e2:a5:e9:3c:7c:6f:9d:07:d2:be:
         90:c5:52:0b:39:4a:01:6e:56:d5:b3:9d:8c:74:46:d9:55:d1:
         b0:12:72:56:92:bb:b3:37:ec:1a:57:68:a7:67:0f:28:68:79:
         87:e1:f0:50:30:06:fc:96:ec:f7:0a:25:82:9e:9b:75:d2:df:
         cb:0a:3e:6a:b6:7b:87:5e:19:66:3d:3f:12:f5:be:94:85:85:
         a9:d7:9c:d9:12:95:e6:2a:37:3c:be:05:94:21:be:ce:2a:f1:
         c1:6a:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:20 2026 by rpki-client