Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
File:                     P2TX2Py26n88U-wAJA2Owcl3Zqc.mft (raw, json)
Hash identifier:          NQ/U5otiNWNoiFml4V17wTRBp6axPNQ4dhgtgjLsykI=
Subject key identifier:   7B:86:C7:CF:3F:79:1E:A2:13:26:D1:94:C4:C9:67:5E:54:2C:EC:90
Authority key identifier: 3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7
Certificate issuer:       /CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
Certificate serial:       019FA8626B543DD2D5E29880689452A3E2FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
Manifest number:          019A
Signing time:             Tue 28 Jul 2026 11:00:49 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:49 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:49 +0000
Files and hashes:         1: P2TX2Py26n88U-wAJA2Owcl3Zqc.crl (hash: 9SiiR71LKKOVWVUqXQDnalueCzU4KOVplPdwNrk5V/s=)
                          2: sSJSF0Ef5iNGBXgop50-6zZdD2k.asa (hash: 2H0jdgMOud4+cQqq8gHUDsGfxxUMnvX/NXbs1EyPhbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:6b:54:3d:d2:d5:e2:98:80:68:94:52:a3:e2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
        Validity
            Not Before: Jul 28 11:00:49 2026 GMT
            Not After : Jul 29 11:00:49 2026 GMT
        Subject: CN=7b86c7cf3f791ea21326d194c4c9675e542cec90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:ef:6c:6c:7f:65:0f:1f:e9:a6:d4:43:ed:
                    9d:22:3d:1a:92:3b:e5:cf:7f:a5:a0:41:88:dc:83:
                    b6:83:2e:39:cd:bb:6f:74:85:04:f7:4b:f2:bb:81:
                    cf:43:e1:66:2f:de:c3:e9:bc:ac:cc:14:c1:cf:6a:
                    7e:d7:69:a5:91:f9:86:2a:35:03:ac:58:52:56:24:
                    c7:38:7d:da:4c:00:2e:59:4c:ed:24:e2:5c:1c:c2:
                    84:13:9f:bd:30:65:16:4d:02:19:c9:f9:91:ef:1b:
                    19:37:3b:5b:00:f2:1e:2d:89:c1:ef:1a:d7:91:01:
                    79:f1:42:b8:a9:27:7f:2d:fb:a3:d5:3b:df:1a:3d:
                    12:1d:9a:a6:c7:1f:b7:36:de:2c:ae:c5:33:f4:e1:
                    af:c4:9e:9e:b4:cf:71:6c:96:7d:3e:70:5a:19:d7:
                    10:43:a2:cf:e6:7d:42:98:9b:67:f8:48:97:98:17:
                    c5:b2:64:d3:b9:b8:30:b3:16:9a:d2:f2:8e:b3:85:
                    a9:f8:7e:7a:1e:ea:67:a1:49:cf:ac:37:90:4d:06:
                    57:0b:63:42:77:68:52:df:ee:ab:91:1a:ce:e4:08:
                    13:a1:52:9a:2b:b3:8b:37:3b:f6:1f:9e:27:b4:84:
                    bc:18:0f:46:e0:db:9e:83:bb:d3:6f:3c:5c:b8:a9:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:86:C7:CF:3F:79:1E:A2:13:26:D1:94:C4:C9:67:5E:54:2C:EC:90
            X509v3 Authority Key Identifier:
                keyid:3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:05:fb:0c:eb:76:eb:5a:ce:df:99:25:d2:af:9b:99:b7:7a:
         41:41:08:10:a8:06:79:9a:be:4f:de:66:0b:ab:8b:af:ff:82:
         9f:5d:67:f3:4c:53:fb:e5:6e:f8:9b:99:68:25:b6:08:e5:fa:
         a1:f2:20:40:14:eb:58:71:ae:d7:0e:a2:d7:96:f8:73:98:b0:
         da:29:56:78:69:e8:54:eb:54:20:83:b4:5b:b3:7e:c1:1f:5a:
         8a:31:ad:a7:4e:6d:28:0f:6a:34:87:4c:8d:70:0f:a2:ed:2b:
         03:92:6e:db:86:2c:90:7a:e1:df:e5:58:89:f1:96:f9:21:ff:
         90:20:7a:e2:58:71:9e:84:30:da:1e:bf:5a:49:8b:39:9d:c4:
         56:b0:07:80:e9:1c:70:2f:80:a4:94:80:c4:10:d7:ce:54:ff:
         a7:25:d9:24:0e:32:c8:6e:95:5b:95:5e:de:9e:db:c3:33:94:
         df:ed:1f:c0:64:5e:7d:9d:7b:13:38:f0:ab:68:1f:79:9a:9e:
         c4:4c:1c:61:be:50:a0:87:9a:a7:47:41:47:d0:2a:9b:c4:14:
         8f:dd:b1:68:e2:01:07:57:9f:e8:98:33:e6:ad:b0:08:db:1b:
         20:95:e3:f8:55:4b:5e:eb:af:e7:bb:3c:3a:f4:43:e0:a0:b9:
         11:ff:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:20 2026 by rpki-client