Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          S5Th/SzyDCItuVS53jWrTXNSXKQY6ut0VPrF8LoWObs=
Subject key identifier:   1E:C0:C0:D1:DF:25:F7:27:25:37:B1:98:CC:58:36:30:9B:EF:FE:5A
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019FA93DABDB274B8ABAC22E384CF6493967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 15:00:18 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:18 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:18 +0000
Files and hashes:         1: 1-X9f31YmOI6sGDiMsygwz3v06EQ.roa (hash: lBKrn9OkfPE6uE/SW8MJqqSzuyUTtFebuy/HpzOS5Gw=)
                          2: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: kf8hd9npLX0v7wqQQyEo2QN8y+6mzOGp1GEFVC/nnrM=)
                          3: FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa (hash: HY7azWr+1lDIeYP4uBd4A0p2MAT8AwHdslPwrQq6vgY=)
                          4: SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa (hash: r7gescwog8g3OhaT+uiQpA9jU7IQngckD+CGfZrI6kY=)
                          5: dr0WTbKAOdZCmM023BVBdPDWRk8.roa (hash: QpYxSWr/vVLdYe2PKpH5AUkh/HBsOurm0FmWy5lE2hA=)
                          6: sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa (hash: mG9f/0+7q2d/QWjgfY6kLzwp92/dXDDFf1IO0cmQvoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:ab:db:27:4b:8a:ba:c2:2e:38:4c:f6:49:39:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Jul 28 15:00:18 2026 GMT
            Not After : Jul 29 15:00:18 2026 GMT
        Subject: CN=1ec0c0d1df25f7272537b198cc5836309beffe5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c7:76:e4:75:0d:39:17:a7:54:84:b1:9b:5f:
                    4a:45:54:61:e9:06:b7:ef:c0:b1:7e:bd:a9:96:5b:
                    a2:ee:a2:a4:fe:5a:d8:6a:07:38:bf:e7:3c:a4:01:
                    a4:18:3b:b0:22:cb:bb:d6:2a:17:8b:ad:f6:e5:03:
                    29:ad:b6:a7:e2:21:32:bc:e0:30:aa:79:e0:83:03:
                    fb:00:7a:d4:da:9e:8d:21:d8:5d:cf:50:e4:ee:a6:
                    37:87:e3:28:01:98:8c:89:74:f2:77:27:5e:15:02:
                    79:0d:0c:d1:b1:0f:08:71:ba:cb:f2:e2:8e:08:c6:
                    c6:f0:32:69:33:e5:f5:4d:32:55:d0:e2:6a:e3:f5:
                    f0:d0:16:e7:3a:16:f4:b6:b8:d1:52:7f:41:41:2b:
                    da:5d:0b:de:c8:f4:de:43:0a:f0:a2:62:97:f6:e3:
                    d2:90:49:f9:f2:14:6d:44:39:62:41:0f:13:b4:07:
                    8c:42:4b:91:5a:fe:82:46:29:96:4d:01:74:c6:cd:
                    4e:dc:4b:c7:d3:73:ff:af:84:04:6e:ad:1a:f3:f6:
                    ac:4c:ce:18:e2:94:f6:5b:1d:2f:e3:56:cc:ce:6e:
                    4d:e4:b1:d2:21:f9:db:77:56:47:01:cb:49:94:34:
                    52:1e:10:9e:d6:59:9d:f8:d7:49:c3:7c:33:4e:d4:
                    50:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C0:C0:D1:DF:25:F7:27:25:37:B1:98:CC:58:36:30:9B:EF:FE:5A
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1a:36:ba:09:e8:0f:a8:08:ac:cf:0f:35:74:00:5f:16:64:
         3a:f6:16:a2:aa:e4:24:cd:e6:3b:b8:3a:dd:cc:ce:2e:d0:01:
         c0:42:2b:b7:05:dd:33:00:74:74:b9:d3:06:12:54:37:aa:df:
         62:8d:da:87:57:2c:d2:4e:7c:16:ae:40:36:f8:c7:75:f6:03:
         ab:38:ea:d0:dc:f3:5c:fa:c9:a5:82:98:ed:9a:90:de:9c:b5:
         0c:93:5c:78:3e:29:86:95:e4:ed:5b:76:c6:e7:da:97:05:7d:
         e6:19:3d:a6:d4:44:6c:bf:66:17:6c:a0:1f:24:58:24:14:98:
         9f:d3:24:03:a4:1f:92:71:70:60:a3:8b:bc:c4:04:4f:5e:a2:
         66:0e:da:ed:32:d6:e4:f2:2c:53:85:16:04:3c:8f:e9:0e:36:
         29:29:b0:56:f2:1e:9f:d3:19:ec:d4:f0:8c:eb:e1:53:60:97:
         72:b3:e1:81:5d:20:aa:28:47:bf:84:d2:6c:ff:4a:25:d7:a8:
         ed:08:b9:af:af:66:95:2e:ca:a0:ba:40:c3:61:47:ff:5f:b8:
         4e:4c:4e:c6:cd:a3:05:79:42:05:50:c5:83:9e:23:19:e6:c1:
         41:66:63:ab:d4:16:33:a9:c2:21:fb:b8:11:52:37:80:7b:d1:
         82:1e:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:55 2026 by rpki-client