Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File:                     2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier:          f5h2CXrYB6kdrkI080Sbjl+cG6pGzy1IfU+K5tzG1js=
Subject key identifier:   4A:02:49:6A:3B:C8:E5:3B:A4:E5:BF:5E:ED:B0:8F:BA:F2:7A:BF:54
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer:       /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial:       019FA899D30565066A09400ECE7D77EEA61B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number:          05DD
Signing time:             Tue 28 Jul 2026 12:01:21 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:21 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:21 +0000
Files and hashes:         1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: 7sluShEMOOlxYVSzR5rLYVz3vYqxfLDvHNd1Ur7h3Cg=)
                          2: XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa (hash: U5AFVavv4y8bxwhEhQQ2exL+ZJwtyEE2Q3oN6TBpcsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:d3:05:65:06:6a:09:40:0e:ce:7d:77:ee:a6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
        Validity
            Not Before: Jul 28 12:01:21 2026 GMT
            Not After : Jul 29 12:01:21 2026 GMT
        Subject: CN=4a02496a3bc8e53ba4e5bf5eedb08fbaf27abf54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:b8:33:ca:89:e2:1b:bc:92:3d:af:fd:8c:
                    8a:07:d3:00:75:6c:78:cb:4c:de:53:d9:4c:75:52:
                    8c:69:05:ba:f7:ea:73:a8:2c:b7:30:1c:9f:ff:8f:
                    5b:5d:ed:1b:da:9e:b5:6f:ad:11:11:3f:51:03:4f:
                    e0:41:e1:53:8c:0d:b2:3e:2b:77:41:6c:4e:27:04:
                    bb:f1:4e:c2:2f:ff:dc:53:40:65:85:9c:03:38:e0:
                    8f:0b:67:f2:50:66:ee:75:a6:fa:ac:e3:53:df:39:
                    d1:60:23:8b:26:57:d2:06:7f:d9:81:53:4c:2d:9f:
                    54:f1:fc:73:ed:67:f6:2a:65:12:50:b7:52:48:f9:
                    e0:9c:b2:c0:27:84:33:c2:2c:db:e4:67:a5:6d:cd:
                    f9:60:21:22:f1:3e:91:69:ec:b3:8b:8b:fe:9c:90:
                    3e:b6:1b:08:62:1c:68:0a:23:f0:9e:50:1e:20:90:
                    3b:be:51:dd:44:10:a9:ea:9f:2e:65:86:15:d0:20:
                    40:b5:d5:20:41:09:55:c4:31:29:39:43:46:bc:f2:
                    12:e0:f8:75:07:2c:1f:54:89:d0:57:03:d2:2a:ba:
                    1b:2a:50:11:51:e6:8e:f7:05:5a:5d:f3:e6:f3:47:
                    84:cb:a7:39:2e:26:6f:0e:22:00:44:08:fe:1e:9e:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:02:49:6A:3B:C8:E5:3B:A4:E5:BF:5E:ED:B0:8F:BA:F2:7A:BF:54
            X509v3 Authority Key Identifier:
                keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:aa:2f:00:4f:35:95:d4:4d:cd:43:49:e4:fc:08:00:34:
         0a:e0:19:97:07:ba:fa:2e:45:75:30:58:05:96:c6:79:98:4f:
         a4:8d:c2:b8:2d:f6:3d:59:6e:e7:31:d3:a8:19:86:bb:07:e2:
         e1:bc:ce:81:8b:2f:1e:48:82:b1:37:81:32:aa:4e:62:d9:9b:
         6b:4b:ec:a7:a6:69:a2:80:1c:eb:4c:98:96:cb:06:06:0e:bd:
         f6:95:00:b9:3d:33:84:6d:94:18:57:55:de:c3:06:92:34:9c:
         c2:48:ea:63:0b:5b:ad:0b:4c:00:cd:57:c2:a8:b5:f4:91:58:
         52:10:f8:ba:25:ba:3d:de:38:6f:53:49:9b:24:94:f1:e9:00:
         09:fe:66:9d:e8:37:cf:96:07:16:d2:ec:c6:c3:63:77:44:8e:
         97:36:bc:e3:73:eb:9d:8e:aa:4c:a4:f6:f8:aa:be:12:1d:98:
         02:e6:4c:28:d2:cc:02:05:65:ef:f3:c4:f0:77:34:1a:30:f8:
         45:b2:f8:5b:53:08:a3:6a:3d:f1:f3:5e:db:4d:c1:02:3f:7b:
         2a:00:f7:6c:a9:50:3e:d4:47:a4:c9:74:e4:66:f5:b8:4e:21:
         65:a6:98:94:76:34:38:1e:9f:97:8e:e3:48:ec:81:e9:e7:63:
         f3:f3:07:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omdMFZQZqCUAOzn137qYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmVmOTdjYTAxMGJhZDRmZjU5ZWY3ZDJiNmJjOTA3Nzg2
MGFhYjIwHhcNMjYwNzI4MTIwMTIxWhcNMjYwNzI5MTIwMTIxWjAzMTEwLwYDVQQD
Eyg0YTAyNDk2YTNiYzhlNTNiYTRlNWJmNWVlZGIwOGZiYWYyN2FiZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllq4M8qJ4hu8kj2v/YyKB9MAdWx4
y0zeU9lMdVKMaQW69+pzqCy3MByf/49bXe0b2p61b60RET9RA0/gQeFTjA2yPit3
QWxOJwS78U7CL//cU0BlhZwDOOCPC2fyUGbudab6rONT3znRYCOLJlfSBn/ZgVNM
LZ9U8fxz7Wf2KmUSULdSSPngnLLAJ4Qzwizb5Gelbc35YCEi8T6Raeyzi4v+nJA+
thsIYhxoCiPwnlAeIJA7vlHdRBCp6p8uZYYV0CBAtdUgQQlVxDEpOUNGvPIS4Ph1
BywfVInQVwPSKrobKlARUeaO9wVaXfPm80eEy6c5LiZvDiIARAj+Hp5I9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoCSWo7yOU7pOW/Xu2wj7ryer9UMB8GA1UdIwQY
MBaAFNr++XygELrU/1nvfStryQd4YKqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgt
YmZhOTRlYjFhYTAyLzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgtYmZhOTRlYjFhYTAy
LzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWqqLwBP
NZXUTc1DSeT8CAA0CuAZlwe6+i5FdTBYBZbGeZhPpI3CuC32PVlu5zHTqBmGuwfi
4bzOgYsvHkiCsTeBMqpOYtmba0vsp6ZpooAc60yYlssGBg699pUAuT0zhG2UGFdV
3sMGkjScwkjqYwtbrQtMAM1Xwqi19JFYUhD4uiW6Pd44b1NJmySU8ekACf5mneg3
z5YHFtLsxsNjd0SOlza843PrnY6qTKT2+Kq+Eh2YAuZMKNLMAgVl7/PE8Hc0GjD4
RbL4W1MIo2o98fNe203BAj97KgD3bKlQPtRHpMl05Gb1uE4hZaaYlHY0OB6fl47j
SOyB6edj8/MHHA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:13 2026 by rpki-client