Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File:                     2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier:          hla+WWTmq9Wan61PFIq7zGeel0DB/+zBpkT6+s+N050=
Subject key identifier:   75:F0:6A:77:56:AD:76:E9:3F:57:8E:55:11:34:2F:2C:A3:38:59:B9
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer:       /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial:       019FA93E192C9419B5B5A722E81AE6C1AE83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 15:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:46 +0000
Files and hashes:         1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
                          2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: vaTr6oSV20e7q0YvcdbYO6+wczKt0yQlD6nqgQ9jJ88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:19:2c:94:19:b5:b5:a7:22:e8:1a:e6:c1:ae:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
        Validity
            Not Before: Jul 28 15:00:46 2026 GMT
            Not After : Jul 29 15:00:46 2026 GMT
        Subject: CN=75f06a7756ad76e93f578e5511342f2ca33859b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:ea:2d:47:1c:29:2e:e7:9a:6e:ab:c7:03:
                    c7:38:ea:f7:00:68:67:6e:ec:bb:f7:a6:f7:6d:1e:
                    af:8b:12:f5:99:1e:92:d8:75:b5:b0:1c:a1:ce:b5:
                    b5:dc:d7:48:b9:e6:ee:5f:ad:ce:71:34:4d:08:33:
                    a8:51:99:7f:f8:c1:26:6e:9e:6a:0a:58:4e:c8:11:
                    e4:f1:c5:96:25:c2:bb:f4:aa:b5:22:3c:fd:e2:23:
                    17:0a:a0:e8:e5:ec:69:d0:f2:69:bb:cd:38:2d:c8:
                    fe:39:3e:4b:7c:de:85:c2:24:67:6e:f8:43:8d:89:
                    d7:e5:5b:92:4c:4c:7e:30:fb:70:69:e7:35:e3:d8:
                    51:38:b3:56:1b:27:a8:96:a9:9b:61:f0:d3:c2:d3:
                    3b:33:31:1e:cb:86:9c:e0:42:1f:c7:84:7e:38:1f:
                    a8:19:cb:ba:40:c4:54:c1:81:09:6e:e4:82:ea:f2:
                    16:b8:5c:f6:92:ee:68:4e:c8:9b:2b:cc:4f:d4:89:
                    9d:e8:ad:bd:51:5f:c9:dc:73:96:d5:fc:84:24:c5:
                    88:33:74:d1:6a:ca:90:88:64:96:b5:ae:28:66:7f:
                    94:5d:54:56:b9:d3:13:20:14:f9:e2:be:bf:b3:3b:
                    2f:ca:81:a5:96:23:bc:79:0c:77:03:80:5c:56:c3:
                    df:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:6A:77:56:AD:76:E9:3F:57:8E:55:11:34:2F:2C:A3:38:59:B9
            X509v3 Authority Key Identifier:
                keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:11:c9:4f:cf:fb:ee:f1:a2:8a:d5:b7:50:2b:03:35:26:29:
         2f:49:17:c3:ee:7d:8f:96:f2:06:7e:e3:9d:3d:d3:45:b1:b2:
         44:3c:46:7f:84:59:10:82:ca:2b:7b:3e:fc:af:53:38:f0:2c:
         96:b9:5a:2e:f1:ed:03:08:c8:1f:8e:53:3a:c2:8e:a6:d5:c5:
         d4:7e:c4:25:bd:8c:46:73:91:83:45:2d:50:df:0d:2a:95:09:
         c1:4e:e3:1c:39:1f:59:48:5f:4a:cc:ad:44:f3:10:14:f6:a8:
         4c:7b:7f:8d:71:ab:e5:23:0a:d5:91:ec:ad:70:be:d1:0d:91:
         73:be:22:f5:95:23:a3:87:5c:99:e7:3d:ca:2f:cc:51:7e:9d:
         05:a3:74:56:c1:81:25:1d:e9:89:0f:23:33:31:70:3a:66:e7:
         24:b9:a9:d9:d2:f5:0f:06:d7:7f:5a:c9:2a:13:35:e1:de:99:
         0e:86:c2:6b:7c:ef:fb:d4:f7:7f:95:c4:d6:72:c4:3d:4d:11:
         bd:65:3a:a1:b7:5d:3c:83:04:1b:29:de:36:15:7c:65:0d:35:
         3a:b0:d5:29:1d:22:10:1c:1c:80:93:8f:1a:e1:60:d5:75:b2:
         92:b5:b7:9d:1e:5e:64:68:0a:65:ec:3d:86:f7:09:3c:4b:ec:
         1e:69:cd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:25 2026 by rpki-client