Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
File:                     2y7CKma1skmGOV_u1_tbkOKMm-Q.mft (raw, json)
Hash identifier:          VW0nWjxtJ+tE2zD50OF2wE3B1BO+V+5eHvhI+B8bCxI=
Subject key identifier:   B9:01:CA:2C:0E:0E:95:0E:D9:BC:9B:6C:DC:86:C6:58:9A:55:31:FA
Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
Certificate issuer:       /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Certificate serial:       019F8FEC0B2BE3588B3C52A9AF84FDC47B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
Manifest number:          01F5
Signing time:             Thu 23 Jul 2026 17:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:38 +0000
Files and hashes:         1: 2y7CKma1skmGOV_u1_tbkOKMm-Q.crl (hash: aCkMjwcpdzpurLa81RVRCwbSzbLT/VW0AhZzAZrGvgM=)
                          2: 5OcccwQslADzpJ8HL6Y7KqGcVVU.roa (hash: irYRIWXEtiw19tZuoevHJTgjYRjpfkAs2mq69Ns5wSo=)
                          3: 6RGkspdxkAWpYvFpm-8ta5s8IEs.asa (hash: SMkfixcVMM4K7Z6BHPlzlnNfBWBe+ZvLZ06HB1RuIn0=)
                          4: Wc5ljSD5VjkVZd4v1ISBd1k6dNQ.roa (hash: jyDuHZmz8mqWG2X7hHBWucB2QcY/4S07R3yhK3xzlzg=)
                          5: t-YR2UdrGJYsX4ZnfkqO15T5g9I.roa (hash: 21jzaahsgBvVI66l1ZAF+dhUPihnDJv9H/MfKJOkhNs=)
                          6: uOrZo6gF2WVlF4nc6xlIIShI6cM.roa (hash: 4dFwviDJ3qVWkRoE0eY86El9WripywfdZeQ8NNS5Yl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:0b:2b:e3:58:8b:3c:52:a9:af:84:fd:c4:7b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
        Validity
            Not Before: Jul 23 17:00:38 2026 GMT
            Not After : Jul 24 17:00:38 2026 GMT
        Subject: CN=b901ca2c0e0e950ed9bc9b6cdc86c6589a5531fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:c3:05:b5:18:71:e5:03:59:0a:35:b9:a5:
                    b5:f0:8f:3e:22:38:0d:a7:6b:db:2c:1b:af:b0:3a:
                    34:03:36:ef:2e:aa:2e:2f:06:e8:64:78:88:c8:25:
                    78:b3:4b:f2:7f:61:d3:58:1c:29:e9:1d:85:3c:2a:
                    27:0e:66:60:9c:e1:1d:30:f7:be:64:c7:2e:58:54:
                    21:e0:b9:0f:da:6d:db:63:3e:e5:2a:a9:ad:25:b2:
                    d4:ef:f5:81:09:7a:31:66:c0:c3:3f:2b:f8:51:bf:
                    42:a1:89:4c:7b:33:e8:93:e0:b5:4c:a2:cb:b9:be:
                    e3:ee:7d:bd:2f:27:a7:62:cd:17:a0:b0:ba:9f:1b:
                    2e:98:2c:2a:e8:d4:3a:e3:fc:30:1f:ba:ce:3d:54:
                    92:d3:f2:84:6b:de:e8:e6:5c:31:b9:7b:a8:e2:8b:
                    24:46:22:55:b5:da:02:57:e8:66:f0:5f:99:df:d9:
                    05:c7:85:8e:d4:cd:79:71:93:d3:0c:f9:02:07:51:
                    e4:ca:49:f3:12:90:27:42:66:15:d7:59:8e:ed:bb:
                    b8:18:48:c1:70:a2:4e:a5:40:27:f2:46:ef:d1:91:
                    4f:b6:31:c9:ab:f2:ae:40:b8:8c:50:4a:ec:ad:cc:
                    92:7d:4e:67:91:d3:61:79:b7:26:be:97:3d:16:d8:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:01:CA:2C:0E:0E:95:0E:D9:BC:9B:6C:DC:86:C6:58:9A:55:31:FA
            X509v3 Authority Key Identifier:
                keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6b:29:65:5a:6c:1d:6b:eb:19:e0:eb:48:99:d4:8e:6c:e4:
         2f:5f:91:8f:5b:ca:85:59:c4:40:db:f8:db:c5:34:c0:bd:84:
         22:27:ad:c1:98:2a:bd:04:1a:27:c8:8a:95:12:45:29:b0:7f:
         a6:18:57:a9:50:cb:fa:7d:5a:da:78:89:8e:48:12:1f:b8:53:
         ca:f5:71:48:65:d4:6a:96:bd:c5:db:34:95:8b:af:1a:b7:59:
         69:b2:9c:bd:5f:0e:b4:7e:09:2a:17:4d:7d:84:ae:b9:df:7e:
         6f:5d:e0:c5:4d:f2:fe:af:dc:5e:ce:f5:f6:e1:e4:00:e5:88:
         44:6d:ce:7b:94:3c:5e:80:52:bf:eb:91:68:80:6c:b3:0d:ae:
         fc:c4:6e:12:80:ef:1e:b8:92:88:6e:5a:70:07:85:5a:44:3b:
         07:d0:56:e0:37:4c:37:a8:7c:3e:ca:ae:ad:92:53:c8:63:90:
         73:dc:b7:ab:39:6b:d2:61:a8:6f:b7:28:ec:bc:23:27:67:f2:
         66:66:97:c0:fa:d7:17:04:c6:bb:33:c6:4d:8f:ec:b3:2b:7a:
         32:8e:b2:5a:04:70:60:ee:35:19:eb:3f:11:bf:5a:7a:e8:0a:
         9b:bd:67:b4:65:d0:ba:ca:0c:18:ec:7f:b6:b0:96:04:6b:15:
         b4:78:44:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:50 2026 by rpki-client