Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File:                     2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier:          Wk4JbgNoOEAw1MWn16rP54pp0Vs/yIO+eP78olQGAHk=
Subject key identifier:   DC:7D:11:43:36:62:9B:7B:C2:0A:5E:40:0E:42:34:B9:0A:79:BC:5C
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer:       /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial:       019F905A70A3619C90DE67B7EEEB21A7AB3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number:          044E
Signing time:             Thu 23 Jul 2026 19:01:13 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:13 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:13 +0000
Files and hashes:         1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: 5sEddhUI0CdEu/OYI+xe5eTHcVijENg7wwiUW8CiLRI=)
                          2: qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa (hash: BsW/+9betY20XfYjkexlN+8vCvy84YAaJnRdNAcmTYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:70:a3:61:9c:90:de:67:b7:ee:eb:21:a7:ab:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
        Validity
            Not Before: Jul 23 19:01:13 2026 GMT
            Not After : Jul 24 19:01:13 2026 GMT
        Subject: CN=dc7d114336629b7bc20a5e400e4234b90a79bc5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:c9:77:2b:54:69:53:c8:5b:3f:9a:79:b3:
                    e8:d9:37:fd:58:f2:bf:1c:01:69:ba:9a:a1:e7:d5:
                    9b:d8:fe:40:f5:0b:ac:ce:ab:ab:f7:f5:67:5c:8f:
                    a1:be:02:3f:8b:2c:46:8e:e0:6c:ae:8d:24:a2:d9:
                    2d:01:4b:be:bf:b8:4f:af:a8:f6:ef:0b:a2:cf:99:
                    25:22:d9:b9:3c:59:a2:0b:a0:f2:8a:a3:1a:6a:6d:
                    10:61:02:77:60:26:04:fd:38:ef:87:fd:96:ab:08:
                    c8:1b:05:63:0d:a7:22:00:ba:8d:fc:63:de:f2:2d:
                    a1:7a:10:ad:31:d8:2a:1e:8f:72:d9:cb:ba:dc:b8:
                    14:bb:ad:3f:90:12:cc:31:5a:6b:23:f6:66:15:26:
                    53:0c:14:3e:8f:8b:bf:19:a1:75:6d:46:41:fc:2f:
                    38:2e:d8:9f:7c:2f:15:8a:82:d8:2a:c3:3a:f6:7d:
                    2b:74:ef:13:88:fd:80:e8:40:34:25:25:8a:9f:9e:
                    e2:85:58:15:1f:37:54:87:0e:3f:48:eb:b4:76:3f:
                    bb:ff:0d:10:d9:3f:ba:91:3e:71:5e:8b:02:7e:0c:
                    53:57:e9:62:8e:ab:94:2e:60:c2:15:d8:47:cb:e0:
                    1e:6f:10:d9:d9:22:89:2b:96:d6:3a:4a:cb:a4:fc:
                    e6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7D:11:43:36:62:9B:7B:C2:0A:5E:40:0E:42:34:B9:0A:79:BC:5C
            X509v3 Authority Key Identifier:
                keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a6:c1:1d:84:84:e7:59:ff:ff:b2:fe:82:d9:cb:16:e4:24:
         f7:81:12:49:77:b1:19:e6:b2:bd:ab:56:0b:3f:79:53:85:4c:
         69:4d:53:e2:99:2f:61:ee:dc:ad:5d:f6:ce:fa:47:92:43:de:
         6e:a1:53:33:f0:37:3f:c4:8b:f0:18:b1:c8:9b:19:4c:50:ea:
         4d:26:44:0a:b3:6a:62:46:b8:c4:81:10:c8:65:c7:f1:d2:d0:
         58:23:e2:14:7c:38:4b:2c:e3:75:2a:45:e9:82:06:2b:d6:67:
         77:08:91:6c:94:1d:49:77:4c:54:e8:96:50:37:46:72:8e:f5:
         ea:42:10:76:59:c9:e2:cc:55:ed:a2:54:cf:07:c1:d4:e1:7d:
         4d:2b:50:56:56:5c:00:48:57:da:82:56:42:a9:44:72:6f:42:
         c3:0c:e0:49:8c:2c:a1:2a:4c:46:9b:5d:33:cc:d6:4c:36:8a:
         4d:f7:d9:04:20:74:d8:9f:0d:ff:fa:51:71:f3:3e:39:3b:70:
         9b:e7:ab:ea:fd:a2:7e:5a:2f:07:15:e9:36:15:cc:9d:03:f3:
         8d:fb:ea:6c:e5:42:42:19:fe:d9:5f:7b:dd:e0:50:8e:58:3b:
         46:ec:eb:cf:70:41:82:26:21:ff:60:93:18:e3:36:46:30:f2:
         fe:bd:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:39 2026 by rpki-client