Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File:                     2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier:          ofBVRQwlFEUVLtZB2GoMNLFtBtVaBnrIouBOIYYlvD8=
Subject key identifier:   62:C4:3C:5C:51:8D:39:FD:40:EA:0C:F0:24:CC:84:C7:42:38:B7:CD
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer:       /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial:       019F905A2305B4FAFA334C222FF6B4964DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number:          143E
Signing time:             Thu 23 Jul 2026 19:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:54 +0000
Files and hashes:         1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: WNyDlWI9oXy5/67G+Z9cmQbSxBafpUtprfmJmfqDkjk=)
                          2: ah_59veV9YghWbpFZMyNLGkp8ws.roa (hash: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:23:05:b4:fa:fa:33:4c:22:2f:f6:b4:96:4d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
        Validity
            Not Before: Jul 23 19:00:54 2026 GMT
            Not After : Jul 24 19:00:54 2026 GMT
        Subject: CN=62c43c5c518d39fd40ea0cf024cc84c74238b7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:f1:9e:4d:b4:8a:1d:2f:2b:f8:56:08:e4:
                    e3:b8:eb:8b:84:55:68:9c:76:9e:11:e0:37:6f:5e:
                    8d:d1:9f:80:0e:88:46:70:e6:d1:c5:2f:b2:41:2e:
                    1a:1a:97:d3:93:6a:84:3e:8a:75:85:1a:61:e5:e9:
                    aa:b9:e5:09:6d:32:77:ec:2f:81:e3:80:69:81:ee:
                    6a:b6:d7:34:d1:3f:00:7d:a4:0d:d6:48:65:8b:00:
                    26:fd:e4:ef:70:9b:34:1b:d7:2a:08:78:3f:3f:47:
                    5b:5d:06:b0:a7:6b:8e:44:9f:25:01:60:74:97:5f:
                    08:91:ec:66:5a:0c:d9:21:e0:a6:a6:0c:a9:df:1f:
                    de:a9:9e:1e:25:8b:c2:87:7f:7b:20:f5:c2:05:43:
                    d1:ea:77:9f:16:dd:69:a6:fb:61:e3:13:88:19:7c:
                    a3:53:f2:fc:97:4c:7a:4c:fc:c9:ba:ce:3f:c8:14:
                    e5:e5:36:1a:41:5c:29:85:6e:6c:da:9e:a5:eb:0e:
                    12:93:db:ed:70:64:25:57:99:28:d8:33:e5:bd:fc:
                    93:31:0e:0d:1c:06:aa:5a:63:4d:cc:45:91:49:b4:
                    50:cd:71:47:c3:27:2f:31:9b:45:3a:f0:3d:6e:f7:
                    83:4c:bb:43:55:e7:06:a4:8f:6f:d4:64:ad:d9:da:
                    68:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:3C:5C:51:8D:39:FD:40:EA:0C:F0:24:CC:84:C7:42:38:B7:CD
            X509v3 Authority Key Identifier:
                keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a5:b5:b1:5b:4d:54:a2:96:c9:0a:38:96:84:ce:a0:29:e9:
         10:fc:31:5f:92:f6:1b:1c:54:03:39:d9:df:c3:a7:33:38:44:
         d7:0f:ea:81:f0:93:3e:06:5e:ef:c6:34:f3:43:2c:36:f1:b0:
         fe:12:a1:58:44:ed:af:68:60:87:df:17:13:40:e6:93:1c:73:
         e3:ec:1f:f5:dd:1d:92:75:0a:90:2f:ff:b4:8e:b5:84:e1:d2:
         0e:9e:87:c3:92:01:8e:05:53:b2:e7:77:32:3c:98:06:7c:8c:
         a3:3a:45:9b:f7:4d:c5:62:0d:34:6b:f5:ea:1f:db:45:d5:57:
         b4:b9:2a:56:21:dd:5a:f4:b6:74:24:63:4d:72:9b:a0:bc:8c:
         22:72:d1:6c:64:af:ff:fd:8c:0e:df:75:12:09:b4:f7:65:ba:
         0b:4d:4c:03:7f:e8:a5:da:07:2c:e4:48:b1:14:b2:e9:d1:8f:
         0a:d4:46:04:61:16:c7:ba:26:5a:3f:91:dc:cc:82:92:db:31:
         dd:cb:a2:fb:b3:2e:36:4e:a5:0a:99:96:5d:57:99:2d:04:cb:
         2f:9b:f6:d1:67:ee:4a:cf:ac:28:87:49:22:01:38:b9:97:4b:
         e8:71:c0:d8:b2:2b:62:63:24:99:a4:19:4d:33:9a:e1:63:13:
         44:ba:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:44 2026 by rpki-client