Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File:                     2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier:          RfoMEC47mOrvWoRKo+zITFYLqHN5EMc014FtKftKyhw=
Subject key identifier:   6F:9B:E6:F4:17:28:12:1D:20:FD:1D:3F:A3:23:BD:70:20:ED:0A:22
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer:       /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial:       019FA8628176DD697BF93DD5DE529ED13A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number:          0931
Signing time:             Tue 28 Jul 2026 11:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:55 +0000
Files and hashes:         1: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: PXoNovIj1x8iU3IL01DPPf8LdKOuuKDdnB36wUimOOo=)
                          2: 5_M5mOxDjDkgwkAca1tXv2jpthQ.roa (hash: xBboSwWLCofMIytfTnyu9mKMvX+dSAJG4UOMJtzKnkA=)
                          3: JvCqnDgnG_NMUFGCTVJgzecfD7c.roa (hash: AcWZWGCS7jwVQ2QXY4DUEvQhQzrEr9Bgn3uL02QHLvA=)
                          4: q2cwbHgodll5mTiws3YOiqyA-i8.roa (hash: p3hYIacztdEjHfwDJyx/+pczxs7JhRz6S+sXnyC782Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:81:76:dd:69:7b:f9:3d:d5:de:52:9e:d1:3a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
        Validity
            Not Before: Jul 28 11:00:55 2026 GMT
            Not After : Jul 29 11:00:55 2026 GMT
        Subject: CN=6f9be6f41728121d20fd1d3fa323bd7020ed0a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:11:cf:1d:c0:6c:71:bc:d7:05:9c:fd:b9:
                    d9:5f:28:9f:9e:fa:f5:fe:a4:c3:62:a5:cc:e7:6e:
                    fb:43:3b:4f:a8:02:0d:b1:37:9a:0d:b6:b1:ea:4f:
                    2b:44:f8:27:c7:c6:26:34:2c:7e:93:ec:6c:7d:80:
                    62:64:d3:11:92:f8:15:56:76:13:47:83:c3:2f:89:
                    f7:cf:a8:8e:61:7e:ee:6d:7e:af:15:3b:8c:c7:ba:
                    78:5a:54:7d:ef:b4:61:ad:a2:2b:1f:0f:4d:fc:8b:
                    69:e3:0d:c4:db:65:f6:03:29:08:23:1e:de:73:16:
                    57:12:de:b0:f8:3f:b2:3d:a9:c1:e0:3a:1f:66:8a:
                    58:19:0e:eb:d8:13:e0:32:86:e9:5c:d4:30:05:f3:
                    61:f8:29:95:0e:4f:b0:92:a7:b0:13:01:a5:66:77:
                    09:61:e1:4e:79:2f:58:22:0a:bb:ab:f0:1e:a0:ae:
                    1b:7b:8c:61:88:ee:30:e0:bb:2f:4b:7e:37:2f:d3:
                    ea:74:16:cf:02:c8:4d:21:03:bb:47:bc:3b:77:d3:
                    e4:be:99:be:0b:0d:be:e0:ed:55:32:fb:33:91:6c:
                    95:b2:ab:39:0a:1f:b1:12:75:70:47:51:59:b6:c7:
                    ef:91:79:58:d4:cf:93:45:5b:81:84:6c:a1:43:3c:
                    f7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9B:E6:F4:17:28:12:1D:20:FD:1D:3F:A3:23:BD:70:20:ED:0A:22
            X509v3 Authority Key Identifier:
                keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:23:42:ab:4a:19:a0:92:ac:79:1c:cf:7d:f7:2c:7e:13:23:
         88:62:8b:91:3a:11:ea:65:fc:42:be:4d:68:ef:a9:1e:f0:42:
         de:96:2d:c4:81:f1:c4:f3:ac:c2:49:27:24:5b:f1:d3:da:18:
         9a:73:c6:82:91:5c:76:3b:6a:ba:8e:3a:64:c9:db:ea:01:31:
         5f:cd:8c:73:3a:af:be:5f:33:94:f3:f6:c1:0b:4b:8f:22:f3:
         0a:78:bc:e0:19:05:54:cb:02:70:93:17:3c:8b:75:26:83:2d:
         26:30:9e:1b:56:cc:ae:62:4b:7d:81:2e:7e:75:2d:41:b1:92:
         14:78:df:76:ef:06:ec:ba:2c:b7:d6:69:cb:57:bd:65:b6:7e:
         5c:22:90:b8:15:9c:92:fa:1f:ba:f0:58:64:67:c8:91:17:a6:
         cf:53:5b:eb:ac:03:39:35:9f:b5:ba:9b:ba:0e:65:89:57:34:
         7e:ef:87:1b:68:f7:05:14:af:7b:f7:8f:42:3e:3d:f8:ac:48:
         66:04:60:89:90:b5:27:5b:9f:83:9a:e3:1d:12:f1:63:d1:bb:
         a9:4f:4a:60:e1:63:ee:7a:c3:ae:02:65:0f:af:eb:c1:53:ef:
         51:ce:62:17:6d:e4:58:e8:03:7b:6f:46:05:d1:27:53:fc:f5:
         f2:4e:6d:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYoF23Wl7+T3V3lKe0To7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjgyZmQ4OTczMTdjMmNhZGQ3YjEzOTY5ZjZmMDE1YzM5
N2UwNWQwHhcNMjYwNzI4MTEwMDU1WhcNMjYwNzI5MTEwMDU1WjAzMTEwLwYDVQQD
Eyg2ZjliZTZmNDE3MjgxMjFkMjBmZDFkM2ZhMzIzYmQ3MDIwZWQwYTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK8Rzx3AbHG81wWc/bnZXyifnvr1
/qTDYqXM5277QztPqAINsTeaDbax6k8rRPgnx8YmNCx+k+xsfYBiZNMRkvgVVnYT
R4PDL4n3z6iOYX7ubX6vFTuMx7p4WlR977RhraIrHw9N/Itp4w3E22X2AykIIx7e
cxZXEt6w+D+yPanB4DofZopYGQ7r2BPgMobpXNQwBfNh+CmVDk+wkqewEwGlZncJ
YeFOeS9YIgq7q/AeoK4be4xhiO4w4LsvS343L9PqdBbPAshNIQO7R7w7d9Pkvpm+
Cw2+4O1VMvszkWyVsqs5Ch+xEnVwR1FZtsfvkXlY1M+TRVuBhGyhQzz3ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+b5vQXKBIdIP0dP6MjvXAg7QoiMB8GA1UdIwQY
MBaAFNsoL9iXMXwsrdexOWn28BXDl+BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlndjJKY3hmQ3l0MTdFNWFmYndGY09YNEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iN2NlYjgtNDg1Ni00NDYzLWI3Yjgt
MzUzYmM2MjY2ZWU2LzEvMnlndjJKY3hmQ3l0MTdFNWFmYndGY09YNEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iN2NlYjgtNDg1Ni00NDYzLWI3YjgtMzUzYmM2MjY2ZWU2
LzEvMnlndjJKY3hmQ3l0MTdFNWFmYndGY09YNEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzCNCq0oZ
oJKseRzPffcsfhMjiGKLkToR6mX8Qr5NaO+pHvBC3pYtxIHxxPOswkknJFvx09oY
mnPGgpFcdjtquo46ZMnb6gExX82Mczqvvl8zlPP2wQtLjyLzCni84BkFVMsCcJMX
PIt1JoMtJjCeG1bMrmJLfYEufnUtQbGSFHjfdu8G7Lost9Zpy1e9ZbZ+XCKQuBWc
kvofuvBYZGfIkRemz1Nb66wDOTWftbqbug5liVc0fu+HG2j3BRSve/ePQj49+KxI
ZgRgiZC1J1ufg5rjHRLxY9G7qU9KYOFj7nrDrgJlD6/rwVPvUc5iF23kWOgDe29G
BdEnU/z18k5tmg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:03 2026 by rpki-client