Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
File:                     2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft (raw, json)
Hash identifier:          v4iigZdGYyWZKXf1UVJWgNSHkow9gv65iWEbMMc8nc4=
Subject key identifier:   6D:9C:AD:5F:7C:2B:A5:A3:66:60:C4:D7:2D:11:E2:82:A6:DC:18:59
Authority key identifier: D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53
Certificate issuer:       /CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
Certificate serial:       019F9248076CD4370422FEC8AC563910C73A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
Manifest number:          07D1
Signing time:             Fri 24 Jul 2026 04:00:21 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:21 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:21 +0000
Files and hashes:         1: 2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl (hash: /LAuhB3tHqFHN7yYRPx80Pl0t65WHMvms7/5cg03om8=)
                          2: TCpyx_sVvP5JGxVQQH4mzcKulrU.asa (hash: rOUVgrvkKatP5Bi9OoZO4FGXksJVZPYhgmSbWckcqFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:07:6c:d4:37:04:22:fe:c8:ac:56:39:10:c7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d811dd22f7eaf272bc4bf3ebb152d364bb4d9753
        Validity
            Not Before: Jul 24 04:00:21 2026 GMT
            Not After : Jul 25 04:00:21 2026 GMT
        Subject: CN=6d9cad5f7c2ba5a36660c4d72d11e282a6dc1859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:a7:9c:70:9f:bf:8e:09:81:d7:83:05:08:
                    c4:10:52:0a:c3:ce:dc:3e:30:40:5f:d1:71:57:fb:
                    d4:9e:5b:30:60:93:b7:0c:57:24:4e:01:1a:61:9a:
                    af:b9:7a:98:90:c4:b1:4c:22:fb:02:64:bb:2a:8c:
                    34:28:ba:37:06:de:57:12:26:c0:2b:0f:41:3d:03:
                    49:a8:ed:fa:39:8b:08:12:56:74:c3:67:54:48:9b:
                    0b:f5:e9:fe:18:05:fe:3d:5e:d3:0a:eb:f4:b6:dc:
                    aa:5d:13:19:bf:5e:a5:ed:11:d1:51:8d:a0:82:b8:
                    df:35:f2:52:b7:e4:8a:75:82:e1:85:86:35:ca:57:
                    7a:a3:ce:6c:74:6e:11:09:3f:f6:d7:1e:47:1c:ae:
                    31:6d:20:89:eb:0f:58:81:33:5a:29:af:07:58:e8:
                    2e:ef:0a:a9:59:17:d9:c3:2a:ec:d6:40:df:9b:0a:
                    ce:32:02:31:46:4b:03:8f:58:e8:86:28:dc:70:37:
                    a4:f8:88:83:e6:9f:d9:52:0a:cc:77:5b:36:04:41:
                    86:e4:a0:4f:d1:be:e8:bc:38:2e:d7:bc:54:22:63:
                    0a:1a:d5:77:05:7d:59:97:a3:4b:c3:44:21:dd:ea:
                    1d:03:49:5d:d7:55:0b:de:10:5c:d5:04:41:e1:21:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9C:AD:5F:7C:2B:A5:A3:66:60:C4:D7:2D:11:E2:82:A6:DC:18:59
            X509v3 Authority Key Identifier:
                keyid:D8:11:DD:22:F7:EA:F2:72:BC:4B:F3:EB:B1:52:D3:64:BB:4D:97:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BHdIvfq8nK8S_PrsVLTZLtNl1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4762c6-5eaf-4e7c-a824-f70adf1dc0fe/1/2BHdIvfq8nK8S_PrsVLTZLtNl1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0a:d3:61:f7:a3:bf:09:29:ac:ad:44:7e:91:a1:ba:12:b9:
         47:bc:de:ad:7e:38:f8:ec:57:18:54:93:58:a1:22:9f:93:61:
         0a:13:24:c7:7a:73:d0:ea:0e:93:dd:b0:24:c8:e3:ef:e7:7f:
         a1:f7:40:ec:0a:3a:24:94:ae:4f:04:e7:34:6f:2e:e2:8f:41:
         43:e7:5a:c2:4d:09:35:08:d2:26:13:5b:db:4f:4a:2a:97:5a:
         4d:ec:64:d6:e1:8c:07:4e:5e:6b:bf:79:b0:98:4a:d5:76:b9:
         bc:a0:c6:e3:e1:0e:7b:69:d7:45:1f:13:54:fd:cc:bc:38:67:
         24:59:8d:35:8e:ab:fd:90:3e:95:34:48:b0:66:86:1a:ea:fe:
         2f:ac:a7:94:8f:04:c3:c2:67:27:00:fa:2d:d9:64:c3:36:b3:
         62:a1:a9:39:92:3e:84:a9:d3:c9:cb:22:de:db:e7:89:b4:93:
         b3:fd:fa:45:92:9d:48:33:9f:30:ba:15:43:86:a1:ea:36:b9:
         39:d9:68:92:e0:eb:b9:e8:3a:89:87:27:f8:80:17:59:e9:ec:
         88:b4:fc:d9:f1:f9:d3:27:d2:aa:e7:82:76:90:87:36:99:18:
         37:a6:6b:03:2f:8b:04:b0:be:51:bc:d9:7e:96:2f:74:0f:58:
         c7:73:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:14 2026 by rpki-client