Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File:                     2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier:          cQUPCM4RZnPpaPbsLefnMdP8bZ/BELTk1UlLJoAznTE=
Subject key identifier:   7B:EE:2E:0E:BD:62:24:74:D7:4A:6A:5F:5E:03:10:71:46:59:DB:6D
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer:       /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial:       019F913585C1E4F59EDA998AC06DF2E6C140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number:          0BD2
Signing time:             Thu 23 Jul 2026 23:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:31 +0000
Files and hashes:         1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: Ye8VK0hyHapLoTrPLBGJxZmH4fagxVrxaHF37aqSnmA=)
                          2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:85:c1:e4:f5:9e:da:99:8a:c0:6d:f2:e6:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
        Validity
            Not Before: Jul 23 23:00:31 2026 GMT
            Not After : Jul 24 23:00:31 2026 GMT
        Subject: CN=7bee2e0ebd622474d74a6a5f5e0310714659db6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a0:e0:08:d3:c5:0b:64:c4:dc:47:37:e2:51:
                    bc:a1:75:1f:91:2e:c4:e2:8b:cc:a0:9f:ce:74:76:
                    40:dc:b9:7a:77:cb:b7:58:bb:4e:28:e1:95:d4:02:
                    53:b8:08:5d:30:4f:1a:ef:e8:d6:e2:c4:20:f2:f0:
                    93:f9:c9:3f:be:24:0a:48:98:fb:1f:01:e0:07:d8:
                    88:fe:05:27:44:bb:a0:c1:ec:5e:95:08:fa:cc:45:
                    46:fa:8b:29:5e:3f:49:51:8c:b8:a6:6a:3a:97:7c:
                    6b:28:a6:4f:c8:ba:fa:1a:d2:83:6c:00:a8:06:fa:
                    c2:7e:72:9f:2d:b1:a5:2a:43:77:73:7e:7a:db:73:
                    e3:e3:5f:88:f4:f9:28:5e:e3:a5:ae:77:4d:5f:60:
                    0d:29:67:c6:fd:c5:e1:35:05:55:0b:32:f0:ab:e6:
                    c1:81:37:1c:f9:94:4f:82:83:71:8b:89:b7:c8:57:
                    07:ed:08:01:97:f3:b2:91:a3:24:69:e5:04:97:7a:
                    5a:61:1e:4a:1a:ac:4e:2b:9c:95:4e:0f:85:83:a3:
                    52:78:ad:36:53:0e:6f:a8:ea:c1:d9:82:3b:c3:fe:
                    1f:e5:09:1f:37:12:de:e4:b3:de:55:c1:36:6b:c8:
                    00:e9:f4:ea:57:8d:8c:0b:ff:9d:2a:32:59:cb:de:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EE:2E:0E:BD:62:24:74:D7:4A:6A:5F:5E:03:10:71:46:59:DB:6D
            X509v3 Authority Key Identifier:
                keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:68:7a:05:23:a2:72:0c:b3:89:2b:fe:ad:ea:4a:04:bb:4a:
         91:a7:95:e8:0f:d4:73:45:66:55:96:73:a1:7c:9a:a9:ec:1a:
         6a:c1:68:c6:6d:98:50:73:3c:1f:25:3b:51:e4:b5:5a:55:72:
         ab:18:ef:51:a5:5a:6c:cc:61:f6:6c:c7:07:7d:03:34:55:f4:
         82:99:9b:e4:b6:17:36:de:ad:37:16:35:bf:6c:5a:1b:2f:4e:
         28:13:ae:2f:2d:07:8d:f3:35:45:b1:3c:dc:a3:0a:72:c9:a2:
         09:14:b8:d1:15:d9:0e:54:40:25:64:ae:bc:25:3a:59:39:c3:
         81:f4:29:18:22:b5:44:3a:49:97:3b:71:5a:6f:40:e2:87:e4:
         6d:8c:b0:82:0a:6c:13:f0:57:3e:58:9d:e1:f3:ba:5b:2c:12:
         6f:fb:2d:30:44:6e:1f:e1:ab:79:d5:18:50:e7:8e:e0:d9:e6:
         75:dd:04:bc:dc:d5:91:84:85:1c:dd:05:8d:1b:32:17:5b:b8:
         5d:3e:81:7e:c9:aa:36:6d:5e:e3:22:7a:96:06:c2:7b:0a:2d:
         fa:f2:16:56:9b:b8:72:6c:f7:8a:e5:09:b6:ad:34:f6:a5:20:
         fa:80:5d:9c:8d:1c:4d:96:ec:9b:bd:e8:a0:a6:e3:39:64:18:
         ab:d3:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:40 2026 by rpki-client