Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft
File:                     R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft (raw, json)
Hash identifier:          GajCkdI1fKNF1fIuc3IcebsXvT+EBRcTYE8xGpwZbD0=
Subject key identifier:   17:53:C4:2F:16:7E:60:CD:0E:E9:25:93:4A:07:51:F4:E2:60:01:EF
Authority key identifier: 47:62:10:66:AF:4F:4F:58:C6:3E:E4:3F:EF:9B:52:F5:C8:FC:42:A9
Certificate issuer:       /CN=47621066af4f4f58c63ee43fef9b52f5c8fc42a9
Certificate serial:       019FAD518AFBEC10BDA695B43921C67F76B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft
Manifest number:          0105
Signing time:             Wed 29 Jul 2026 10:00:29 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:29 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:29 +0000
Files and hashes:         1: R2IQZq9PT1jGPuQ_75tS9cj8Qqk.crl (hash: EvLWoO1+d+ztfb78iZ1HMDBWEVCWKtnySzKOvOb58Mo=)
                          2: Z39nPiyL47Feha5WgnFZCSCcy3g.roa (hash: 9mJiZv7ItrIrPIwP8G0w4T0RBvTILri5Zzv8pQIllIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:8a:fb:ec:10:bd:a6:95:b4:39:21:c6:7f:76:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47621066af4f4f58c63ee43fef9b52f5c8fc42a9
        Validity
            Not Before: Jul 29 10:00:29 2026 GMT
            Not After : Jul 30 10:00:29 2026 GMT
        Subject: CN=1753c42f167e60cd0ee925934a0751f4e26001ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:25:89:38:c5:38:bf:18:04:b9:49:0d:77:
                    0b:a6:dd:38:98:58:2a:14:5b:7f:2b:86:2e:c8:80:
                    ab:7b:89:c9:d3:43:4f:27:0c:f8:03:8c:5a:c4:dd:
                    ca:95:18:fb:1f:09:bf:a8:83:75:60:77:36:ce:d1:
                    00:11:67:06:cf:65:01:75:c7:1f:d5:13:43:bc:32:
                    a7:89:ee:23:df:53:08:6d:79:77:1e:23:ba:d1:9f:
                    01:d2:3c:0b:08:89:5a:57:10:27:db:aa:cf:b6:b0:
                    1e:e1:95:6a:71:9c:fe:1f:92:c9:8c:d8:16:38:af:
                    f2:a0:f4:c9:d5:97:7a:f4:c3:75:8b:3e:e8:67:b8:
                    b3:53:8a:1e:eb:68:3f:83:bf:08:4e:17:27:93:0d:
                    71:0a:c3:bf:96:31:95:44:99:bf:32:4d:4f:0f:d9:
                    be:5b:86:6d:89:9a:7b:ae:b6:63:26:1b:f7:df:f1:
                    5b:a1:3f:0a:76:64:dd:32:03:6b:b2:2f:34:9b:dd:
                    6d:b2:be:54:ef:58:7b:9d:f8:ab:13:3b:74:09:7a:
                    0b:b0:28:fa:57:59:ef:9c:c0:85:2e:ce:f4:37:85:
                    e4:c0:38:16:7a:c4:8a:10:1d:25:91:ee:2c:da:51:
                    a8:8b:22:36:18:81:36:96:77:0a:bf:5e:e8:e1:dd:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:53:C4:2F:16:7E:60:CD:0E:E9:25:93:4A:07:51:F4:E2:60:01:EF
            X509v3 Authority Key Identifier:
                keyid:47:62:10:66:AF:4F:4F:58:C6:3E:E4:3F:EF:9B:52:F5:C8:FC:42:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:90:56:c5:34:5c:b6:98:a0:a0:20:a4:e1:db:e4:79:af:74:
         d5:32:d9:f8:7a:82:34:da:73:a4:b4:ff:03:ca:d5:6d:2d:26:
         7c:c7:c5:61:46:ba:bb:b1:68:7d:55:ae:ae:a2:2f:da:a7:6e:
         1e:83:9f:35:65:66:b2:ee:a1:90:0b:f8:0d:fa:33:f2:59:f4:
         32:9d:68:15:96:55:01:5b:3d:d5:5e:11:d2:e5:3b:45:bc:8a:
         2e:3b:21:a7:a8:69:f6:7a:58:af:9c:48:05:4a:6e:cd:f9:06:
         31:ad:63:84:b9:42:0e:8c:30:c5:e0:41:e7:ef:72:98:13:3e:
         f7:71:51:49:cb:92:3e:71:be:77:26:ec:14:ac:da:11:50:2e:
         b7:71:48:0d:a2:e0:d7:c6:66:07:64:c9:0d:ca:39:48:72:7c:
         f5:47:d5:8b:b6:57:22:41:9c:52:ed:90:3b:45:7a:05:ac:ed:
         2a:51:54:ff:3e:17:4f:e4:7a:db:d0:bd:4e:04:35:0e:50:b1:
         9c:92:da:e6:97:1d:37:71:b2:6d:a4:c8:07:d3:5d:42:26:fa:
         ef:e9:62:d0:2b:99:8c:9e:c1:00:2f:fc:0d:a7:be:0b:73:fb:
         12:45:6f:b1:25:3e:07:97:9f:b1:f9:ee:3c:75:dc:25:19:6a:
         ee:e3:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:42:32 2026 by rpki-client