Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File:                     2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier:          EgZBJg/osmysCK5+hiBqj7q56b+kKe4GqwP0/1g5+sc=
Subject key identifier:   99:5A:3D:A5:CB:69:C6:69:6E:84:33:61:29:CB:B9:DC:4C:57:52:BB
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer:       /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial:       019F9022FB67D31BC4429438259BE8A0D8FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number:          03F1
Signing time:             Thu 23 Jul 2026 18:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:39 +0000
Files and hashes:         1: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: ZzsW5nl6rgovSknlwFzXw4uJ1eMqPH2/jAcAryluDsE=)
                          2: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (hash: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4=)
                          3: 6DOrz3928TU7wZXRvfoe5TIHe2A.roa (hash: dkoX6rsv82LKW6X0aXjN4hG4E9xoboCySwytbCJljwU=)
                          4: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (hash: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A=)
                          5: Cj_kS8CojscD3FHU0iwPbQS5gtU.roa (hash: nfkDC61Z5WwgijGGYwT5yxFtloghLLfXYDg9Swlfx80=)
                          6: tO8JfL8o2lxqSuHpAZ6C6GhjbyE.roa (hash: h3EOE0t1hAZwpAYmP52GauiFUEPdoygwHGZs0//8gfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:fb:67:d3:1b:c4:42:94:38:25:9b:e8:a0:d8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
        Validity
            Not Before: Jul 23 18:00:39 2026 GMT
            Not After : Jul 24 18:00:39 2026 GMT
        Subject: CN=995a3da5cb69c6696e84336129cbb9dc4c5752bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:ef:a2:19:10:70:06:cc:6a:de:56:47:8c:
                    2c:60:1e:a1:48:e6:89:6d:a6:a6:33:c8:71:0f:fb:
                    61:3d:b7:ea:77:6d:3d:6e:d4:53:e2:98:bc:95:8b:
                    0c:25:80:70:04:d0:64:02:bd:20:bb:1a:56:f9:1f:
                    bc:df:75:6a:69:12:b7:04:79:bd:f7:d7:18:ce:30:
                    7e:16:dc:c8:76:c1:08:01:5c:ff:c2:26:82:76:6d:
                    dc:24:e8:69:12:12:f5:dd:a3:3d:37:6f:a0:9f:ed:
                    eb:f4:70:28:35:56:ef:83:18:6b:c8:43:1b:11:f0:
                    91:4d:a7:98:aa:e9:3a:25:49:03:8d:37:cf:61:5f:
                    35:ac:e3:58:89:77:ac:92:27:43:a4:91:b4:86:ae:
                    3f:4e:d2:ff:9b:ac:e9:59:ab:82:40:e2:9d:1a:a7:
                    1d:fc:78:31:54:77:e5:63:5b:99:d2:af:0e:d0:f2:
                    81:59:1a:f7:c6:e0:c9:86:4a:a1:7f:03:13:2c:d2:
                    49:cf:ef:cf:2c:0b:82:f5:35:8b:21:e5:88:cb:d6:
                    79:4b:bf:83:c7:ef:4f:c0:43:ce:0c:91:54:49:88:
                    94:46:f3:df:16:dc:17:77:38:6f:1a:e9:eb:51:5d:
                    dd:30:2a:96:0d:f4:96:31:ff:39:a2:17:47:f9:59:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5A:3D:A5:CB:69:C6:69:6E:84:33:61:29:CB:B9:DC:4C:57:52:BB
            X509v3 Authority Key Identifier:
                keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:32:58:be:6d:10:9a:6c:ed:c3:70:f3:95:74:d7:fa:7f:
         51:93:d1:6e:aa:74:fa:33:ac:3a:92:14:3e:3f:2b:8f:0f:be:
         2d:36:74:d2:51:54:f9:02:dd:c5:47:26:eb:8a:2e:db:b0:f8:
         12:d6:11:14:c8:c3:eb:c4:15:3b:ec:e0:24:1e:83:b2:f1:be:
         61:24:4f:db:f3:cf:4b:d4:89:55:e2:37:2e:f8:f8:a9:b9:db:
         30:5b:b3:ae:f9:6f:d5:e3:ff:80:f0:57:4a:01:34:26:47:be:
         62:f3:b4:3c:7c:dc:25:c4:93:8c:29:64:30:3d:47:a6:cf:0e:
         b3:ea:a9:60:39:f1:75:de:55:21:ea:8a:74:5b:6c:af:89:ba:
         57:f8:fa:07:b3:73:33:de:6e:11:db:26:e9:e8:85:14:6f:07:
         dd:ab:5c:19:83:83:02:86:67:75:3a:11:de:0c:6f:a3:6b:36:
         03:75:7e:ed:cf:cf:bb:cb:46:fe:94:af:55:ae:85:c6:f1:53:
         de:ce:33:86:36:8b:94:d0:fb:ff:b9:3a:c3:7e:4e:a7:eb:66:
         87:70:c2:fd:aa:1d:54:b7:4e:45:a8:47:2e:6d:58:88:c4:f3:
         da:d3:e2:68:e4:4e:49:f2:a8:74:0f:08:3e:0c:a1:cc:40:5b:
         11:5c:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:30 2026 by rpki-client