Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File:                     2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier:          7Y0VzzfM9HeoucxcptW6mYgweYAkQk82cLX28nEk0Gk=
Subject key identifier:   72:70:4F:5E:E9:8D:F8:55:EC:EC:1A:BE:EB:66:61:A6:8C:36:21:35
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer:       /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial:       019FAA5049587504DA4CA177E49450E3B625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number:          06D5
Signing time:             Tue 28 Jul 2026 20:00:16 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:16 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:16 +0000
Files and hashes:         1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: +/dVXwXhuIhJ/EPo3Ylq5iPHN0cxz4ovYavh7tmk04k=)
                          2: QEDVpN2G6A8jozHnkTczP5khLY4.roa (hash: ZdNXvCdfzs3xB6Mj6+mdd2fmrySxnZPGoHLzOwpr9Qw=)
                          3: SLONluzu2xwR72NqplrGtpQrZpo.roa (hash: NPfEmtRHn9vSpI84XMYUKyQXNZvZB0z0PHOCtt/9Ui4=)
                          4: ZlTEmYMpffAOZqhQ8mdN5HhC8JU.roa (hash: AqWjrA8SVcF0FHIW5EIMMdA7ZJxrbLWslrcFVwHu7Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:49:58:75:04:da:4c:a1:77:e4:94:50:e3:b6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
        Validity
            Not Before: Jul 28 20:00:16 2026 GMT
            Not After : Jul 29 20:00:16 2026 GMT
        Subject: CN=72704f5ee98df855ecec1abeeb6661a68c362135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:e2:c6:59:f0:04:b7:d7:45:2b:aa:0f:94:
                    e2:de:2c:ea:86:61:88:f3:83:1b:d7:54:d8:8a:38:
                    17:04:49:ba:97:cc:6e:6a:c5:3d:24:e8:4f:5a:40:
                    1c:a5:7f:59:ff:51:b8:19:70:d8:4a:95:05:42:4a:
                    01:09:59:25:0a:df:b2:98:a0:40:4a:3f:ac:02:38:
                    63:5b:b8:e3:dc:41:7e:89:a9:7b:79:0c:2e:d4:7a:
                    35:6d:31:bc:92:57:8f:48:ec:a5:d1:c4:e9:a0:df:
                    fd:1e:e3:85:52:62:85:3f:1c:66:ab:ed:5d:1c:01:
                    e6:96:38:d3:06:d8:e2:d9:bb:1b:a2:b3:92:16:73:
                    65:d9:9e:4d:03:2f:72:34:08:49:65:94:f0:84:8b:
                    42:c8:61:e2:2e:f3:4c:50:35:89:b0:34:8a:0b:13:
                    11:05:a4:2f:17:fd:8b:80:d0:17:f1:d1:57:18:0e:
                    df:65:bc:02:d3:de:5e:7f:74:9c:d0:e3:0a:e8:6e:
                    79:2b:a3:04:e0:50:3b:44:0d:76:84:46:98:b4:56:
                    75:b9:8d:55:0e:a4:cc:04:81:1e:7c:9f:49:e0:9c:
                    43:4a:d9:1d:e1:4c:f5:21:7d:a8:a7:42:44:95:08:
                    cf:48:3a:f4:d5:c7:b0:a0:10:09:3e:42:bc:a0:ec:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:70:4F:5E:E9:8D:F8:55:EC:EC:1A:BE:EB:66:61:A6:8C:36:21:35
            X509v3 Authority Key Identifier:
                keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:d0:ab:9e:10:68:5e:a2:66:0b:64:86:4c:b1:9a:53:38:
         65:37:70:88:2a:f8:f1:02:12:f5:f2:21:e6:55:19:a0:52:1d:
         b3:7f:0a:c7:c9:5f:3f:28:f8:ce:d6:6c:7f:98:0f:d1:c3:dc:
         1e:51:11:52:73:32:69:6b:29:f2:61:23:7f:ee:95:d6:54:dc:
         d9:12:39:25:d0:ed:8e:37:bb:51:d0:3d:47:39:16:10:27:11:
         db:f5:bb:12:9b:60:af:6d:68:69:e8:0d:1f:0d:69:6b:83:df:
         8f:49:f9:3a:1a:ff:c9:03:53:a2:a5:b9:83:08:a5:25:59:be:
         b0:bd:91:89:f1:b3:8c:2a:ed:db:24:a0:f9:49:02:7b:09:79:
         f4:3e:18:52:a6:90:06:45:83:0d:4c:2c:89:a1:3b:fa:e4:d2:
         00:2b:d8:39:4f:8b:e5:3d:5e:1e:ca:30:cd:54:de:66:36:bb:
         44:9c:95:37:e4:ea:b7:f2:25:c0:f7:e3:91:f8:a7:33:fc:dd:
         16:71:5c:ff:21:4c:ff:b3:6f:b1:c1:52:de:e4:1d:7f:d3:45:
         ea:12:cd:f4:1b:ca:79:3a:b4:9d:6f:d4:44:4e:e4:8e:ff:44:
         d3:90:20:79:d4:8e:34:12:e1:0c:a3:21:6a:9b:b2:3d:0b:7d:
         df:8f:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:35 2026 by rpki-client