Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File:                     2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier:          O369XB5AWOYYUNDuVswC3vEj+e2ipgocWQF15dqcB2E=
Subject key identifier:   F4:23:16:0F:5C:40:B3:55:08:37:DA:9A:C5:62:4E:81:38:31:5C:45
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer:       /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial:       019F909114A7548828E7512EE4CD6D653380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number:          1033
Signing time:             Thu 23 Jul 2026 20:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:54 +0000
Files and hashes:         1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: gMkJ/dZ3VBvq08viRNdgkgnaH/UpemFg4G955dTvqZY=)
                          2: 30R6wB6gk0tAdQUb1nh5pGtizL0.roa (hash: 3d2YX3XYruYbRwjkdhZqOWEla3AbBvwumGbHye9XwtA=)
                          3: N1AbqW-LglnJHa8JDMfRFCkNqAg.roa (hash: pucNpOTLMDRyvd9Y5PyCoo7bgwR3bl/sj/khCUp1yHs=)
                          4: g9DlwoPcP__m6NZqUMdk9BeZ8_s.roa (hash: kBEZ3OB5J/nHjPA7g4sqM3oE29ycmGA4VRa1os8i/Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:14:a7:54:88:28:e7:51:2e:e4:cd:6d:65:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
        Validity
            Not Before: Jul 23 20:00:54 2026 GMT
            Not After : Jul 24 20:00:54 2026 GMT
        Subject: CN=f423160f5c40b3550837da9ac5624e8138315c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:20:9b:aa:2d:7b:3d:f0:4c:a6:24:89:f0:
                    3d:60:a5:57:96:10:27:f0:0e:3c:8a:0d:97:ee:a0:
                    a8:b2:00:41:c9:16:37:64:fc:4d:cd:12:a9:9c:40:
                    ca:01:ed:05:84:ef:e3:d1:40:ad:47:cb:77:ad:29:
                    b3:61:7e:10:47:72:ce:c3:a8:81:ab:59:f1:3e:cd:
                    9b:13:77:8b:be:59:cf:69:7d:8c:b8:37:e8:31:bd:
                    89:fa:5c:c4:0e:d3:50:5c:64:32:58:9e:91:b8:44:
                    a0:ca:41:c9:84:f9:0d:da:bc:10:ab:65:62:fb:3f:
                    b7:58:94:c1:97:bd:87:b6:1d:6a:52:4c:63:9e:6a:
                    a8:96:0a:4b:4b:72:0a:fa:5c:eb:38:b2:65:fd:fb:
                    93:71:3d:c0:53:4b:ce:5a:24:b5:b1:c9:c0:81:51:
                    07:e9:e7:d3:52:8f:96:ef:da:8a:02:f3:43:77:90:
                    01:08:b4:01:34:88:4f:61:96:7b:ba:be:6b:f6:0a:
                    ce:c2:47:22:b3:ef:02:fe:ae:c2:5a:2d:56:24:46:
                    06:a9:10:c9:be:99:1e:64:28:06:e4:58:45:26:54:
                    2b:72:b9:89:df:0a:96:ae:d6:17:a9:a1:f8:04:7b:
                    7d:f1:4a:73:76:3b:c2:23:e1:0b:90:ab:38:03:29:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:23:16:0F:5C:40:B3:55:08:37:DA:9A:C5:62:4E:81:38:31:5C:45
            X509v3 Authority Key Identifier:
                keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:42:23:50:42:bf:9e:b9:a9:ac:7a:54:1f:15:59:a8:f1:82:
         8f:e4:e4:2f:77:fa:3c:6f:7b:49:da:11:93:8c:c8:30:f4:38:
         d7:42:e4:82:4d:3c:71:31:a2:00:92:4c:3c:21:74:df:ff:5b:
         c5:87:7c:78:b8:33:ec:b8:b5:6c:64:9d:5a:86:e5:ca:31:31:
         2b:04:11:f0:99:9e:33:7d:de:eb:5c:d9:c8:60:e2:c7:f1:58:
         06:00:88:f2:5d:9e:7c:5e:43:ea:0e:4e:e9:45:93:8d:31:49:
         88:54:71:a5:89:87:f6:1c:58:4a:70:5b:c1:f4:af:88:31:fe:
         87:a6:58:9b:9c:07:9e:6d:93:3b:93:b5:05:d4:14:e3:9c:86:
         29:ec:6a:0a:33:0e:dd:c8:ab:db:01:c2:e8:f8:51:d9:55:a6:
         b8:08:a8:99:10:83:0a:56:d6:c7:0b:f2:d8:e1:10:49:60:40:
         a7:09:09:d3:03:17:b7:a4:a2:91:f5:40:ca:3c:6f:9f:82:14:
         3d:1d:b4:1d:30:bc:66:64:8d:f5:c1:e3:87:af:74:b4:7c:c0:
         f7:00:ae:8e:b5:e9:cd:f5:4d:d7:1e:dd:eb:53:06:33:be:ae:
         59:d5:11:b8:b2:cf:c1:65:71:93:77:57:01:1c:fe:b6:73:4d:
         0e:9c:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:06 2026 by rpki-client