Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File:                     2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier:          rw234soo9+TSTrSOEgsjpCQokVuXKXYKuS8J6ZJHvHI=
Subject key identifier:   CB:9A:A9:29:68:33:E9:C8:9E:4A:86:DC:11:2D:38:CE:C1:AA:9C:E5
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer:       /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial:       019F91A3767C2F8F34F663DB8EB9D210857E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 01:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:36 +0000
Files and hashes:         1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=)
                          2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: 8ifdPl1i1p9V3my2CJfYvOG533bOsLv5/1tcwPV/TF0=)
                          3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=)
                          4: MGhj0X-R9sE8_bxGpuMofPiVOac.asa (hash: DvQwv9R87PLKWjVN3/wl/o55noyjeNHEbII9CUCtA+0=)
                          5: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=)
                          6: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=)
                          7: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=)
                          8: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=)
                          9: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=)
                          10: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:76:7c:2f:8f:34:f6:63:db:8e:b9:d2:10:85:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
        Validity
            Not Before: Jul 24 01:00:36 2026 GMT
            Not After : Jul 25 01:00:36 2026 GMT
        Subject: CN=cb9aa9296833e9c89e4a86dc112d38cec1aa9ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:e3:55:8b:9e:5c:88:7a:e0:23:8b:15:79:
                    bb:ae:8f:03:4e:22:30:fc:f7:fd:2c:e1:8f:b5:86:
                    af:50:ca:30:de:21:11:fb:90:5a:5d:36:76:9b:c0:
                    87:1e:6b:d1:6f:95:16:85:6c:67:06:02:c2:78:ef:
                    52:00:7a:60:37:0b:fd:15:bd:a0:09:09:81:8e:c0:
                    a6:a3:b1:9a:de:37:f7:8c:ea:e6:63:b9:df:68:fa:
                    dc:b0:43:e7:82:61:16:1c:b6:1b:78:f3:d5:48:9f:
                    2a:ec:7f:e2:27:ed:f0:5e:88:a3:b7:55:7c:ff:1b:
                    5e:9b:db:46:42:eb:00:95:51:f3:ca:23:9c:67:54:
                    39:27:70:1c:fd:86:56:a7:b5:98:c5:66:71:b0:e5:
                    31:05:f3:05:96:28:55:c4:03:e0:10:86:63:cc:36:
                    d1:03:9a:60:7b:1d:55:38:2b:c6:a4:8c:d0:f3:12:
                    75:79:30:01:a1:e8:6b:c9:11:bc:e9:ff:44:ef:e0:
                    54:58:f4:18:48:0d:7a:c7:7e:b6:5b:b5:2c:f4:cd:
                    24:f2:d8:5b:99:1a:da:b8:67:7f:e5:9f:ab:25:24:
                    82:8a:b5:d2:79:55:12:2c:96:cb:3b:e7:4e:c3:cd:
                    ec:78:f4:6f:09:61:e7:a2:a8:79:e6:c3:21:3b:f0:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9A:A9:29:68:33:E9:C8:9E:4A:86:DC:11:2D:38:CE:C1:AA:9C:E5
            X509v3 Authority Key Identifier:
                keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1c:74:36:0b:82:f8:94:81:77:2a:4c:87:c4:dc:35:4a:e3:
         b1:c8:fc:cd:55:8f:88:14:04:8e:88:04:1c:eb:71:ff:c9:80:
         d0:03:40:4d:20:34:2e:83:45:62:20:d1:f7:ce:26:3a:f1:c7:
         2c:05:ac:da:71:14:24:9c:09:2c:c6:bb:70:af:5e:4b:dc:70:
         44:cf:82:8f:64:88:8a:80:48:66:2b:9b:5e:b9:19:0f:30:52:
         15:48:30:f6:23:42:17:a0:09:2f:1d:61:7d:42:11:cd:fe:4b:
         c2:f5:9c:71:59:67:74:14:c8:ab:35:29:e6:4e:61:89:0e:bd:
         89:c2:ff:17:ce:a7:2a:53:13:aa:2b:d9:ad:d1:c1:fa:2b:d1:
         a5:3b:61:da:46:64:8c:db:7e:c0:b9:4b:e4:8f:69:67:2b:d9:
         a1:27:2d:84:ea:d9:d6:3b:da:ea:b7:cf:8f:aa:c4:92:b9:31:
         b0:ac:5b:c3:8a:ae:25:63:fa:5c:42:f0:08:a6:29:54:02:d0:
         ce:2a:0e:76:33:ae:84:5f:a8:4d:4b:0e:58:e8:16:dd:6e:62:
         c0:77:9a:f9:b1:c6:83:aa:0e:b5:92:bb:74:81:13:a5:96:24:
         37:22:80:01:3c:fa:0b:c1:c3:6e:0e:5a:67:c1:2e:9e:7b:cf:
         4f:74:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:56 2026 by rpki-client