Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File:                     2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier:          hBMD0gKUp6j0DbrtztZolP8MXm7P9YEZwAeYAvW//rw=
Subject key identifier:   7C:46:62:13:48:CC:52:79:D9:42:35:DF:DA:B5:41:34:F8:5E:07:45
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer:       /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial:       019FA907AF8C92CC0F25CA00BD71450E4D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number:          19DA
Signing time:             Tue 28 Jul 2026 14:01:20 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:20 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:20 +0000
Files and hashes:         1: 0LQRzIDRNUdWBd9Dydr2N_iC5jw.roa (hash: JhEvtgcGlQ0ucbJzBQZW4Y2YIF7BmFzYqZx6rOiR+Uc=)
                          2: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: pkld45evf3W40f6U+7Cx/hbGpDEktRnyvJ4zUIG+b4I=)
                          3: 3wh0CT_8NfW3KeKbg66Zbntk-98.roa (hash: XNvg+YgzCvz98HEiUChpuE5wzEJ7vEAr5EwgyO9TGdU=)
                          4: 5XJ-DEXD7beUVnBEqtMJ7gNlRBw.roa (hash: aC0+p4R1V2InyynQLchWTNU+ke3PRpV6ML3PSthcq44=)
                          5: VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa (hash: Nbg44V0Y4hgBCfwuZPycL8mZRJRdH9RK2S/1UriBDlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:af:8c:92:cc:0f:25:ca:00:bd:71:45:0e:4d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d894365b28a082834a751a97771b791124524dec
        Validity
            Not Before: Jul 28 14:01:20 2026 GMT
            Not After : Jul 29 14:01:20 2026 GMT
        Subject: CN=7c46621348cc5279d94235dfdab54134f85e0745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:b9:90:0a:23:72:62:ab:4a:32:2f:ea:63:
                    0b:b1:87:8e:26:4f:38:24:4b:37:15:f7:94:fd:fa:
                    3b:8c:f0:07:d2:a2:67:08:eb:de:7e:50:08:d6:a2:
                    d5:18:8e:2b:a9:55:0e:60:4c:33:02:3a:b0:31:ff:
                    9f:09:00:85:fd:26:a3:fe:11:72:20:66:82:b5:8b:
                    6a:a0:79:b5:8f:be:9d:30:11:25:bb:13:18:d3:79:
                    2c:46:29:66:76:62:db:28:8e:48:0a:e0:a9:98:59:
                    d0:3c:49:c8:10:1f:88:99:04:df:a0:23:6d:78:24:
                    f5:c6:1d:3e:cf:0a:80:db:42:01:af:02:dd:12:b5:
                    61:71:81:a9:b7:03:02:22:69:c8:68:74:58:07:77:
                    2b:32:0d:fe:16:be:72:7f:2d:8d:b2:f0:8d:9b:ac:
                    93:4a:eb:23:a3:13:12:8a:e6:2b:78:67:7d:53:72:
                    8d:38:29:d1:b9:c8:99:77:3e:99:58:53:d1:3e:49:
                    93:8c:5d:fc:ac:98:b7:aa:af:4e:c4:59:67:af:a7:
                    3b:4c:2e:b7:1e:6d:ba:69:ab:50:c7:a1:3f:92:2d:
                    3c:08:7e:8f:b9:e4:45:09:94:b2:df:84:8c:2c:14:
                    dd:16:ed:d8:0f:cd:7c:96:bc:62:13:03:ff:55:81:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:46:62:13:48:CC:52:79:D9:42:35:DF:DA:B5:41:34:F8:5E:07:45
            X509v3 Authority Key Identifier:
                keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d5:e5:4d:19:78:84:10:65:df:14:05:95:56:19:30:7e:f5:
         a5:b2:ef:72:7b:d7:e0:1a:df:70:9b:6a:f1:67:42:8a:fc:34:
         c2:c7:61:ea:a0:15:e7:63:4c:28:0a:af:be:93:70:bd:ae:58:
         aa:08:8f:23:65:ce:5c:34:f1:0b:ad:f7:bf:53:36:6f:68:4f:
         8a:f1:03:f9:77:e2:20:b3:a8:c3:81:2f:10:46:87:e7:b9:de:
         18:c9:32:d2:cb:db:c9:4a:84:51:cc:5b:2c:f0:97:ca:f6:7b:
         88:e2:5b:81:23:a2:db:a0:33:61:3b:6e:58:06:77:8c:75:91:
         bf:71:3e:89:07:60:62:44:5e:cb:03:28:ad:fa:45:0c:fd:45:
         c6:d1:d7:21:b2:b8:1a:cc:bd:17:fa:1a:54:3a:0b:15:bd:8c:
         a9:fd:3e:d9:bf:ec:af:b5:38:4c:af:92:6a:14:e7:ba:bb:be:
         07:c9:48:f7:0f:1a:d3:36:bd:0c:34:b7:ea:3c:dd:e1:a9:52:
         e3:b6:3e:08:45:62:e6:c7:34:40:fb:53:8e:b2:3b:da:9b:8b:
         c9:ea:27:b7:f1:a5:52:36:05:81:74:43:24:d9:81:4c:8e:69:
         2d:c6:b4:a1:14:59:50:90:db:00:61:34:bf:bc:57:42:e7:bc:
         f7:4d:80:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB6+MkswPJcoAvXFFDk1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTQzNjViMjhhMDgyODM0YTc1MWE5Nzc3MWI3OTExMjQ1
MjRkZWMwHhcNMjYwNzI4MTQwMTIwWhcNMjYwNzI5MTQwMTIwWjAzMTEwLwYDVQQD
Eyg3YzQ2NjIxMzQ4Y2M1Mjc5ZDk0MjM1ZGZkYWI1NDEzNGY4NWUwNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3De5kAojcmKrSjIv6mMLsYeOJk84
JEs3FfeU/fo7jPAH0qJnCOveflAI1qLVGI4rqVUOYEwzAjqwMf+fCQCF/Saj/hFy
IGaCtYtqoHm1j76dMBEluxMY03ksRilmdmLbKI5ICuCpmFnQPEnIEB+ImQTfoCNt
eCT1xh0+zwqA20IBrwLdErVhcYGptwMCImnIaHRYB3crMg3+Fr5yfy2NsvCNm6yT
SusjoxMSiuYreGd9U3KNOCnRuciZdz6ZWFPRPkmTjF38rJi3qq9OxFlnr6c7TC63
Hm26aatQx6E/ki08CH6PueRFCZSy34SMLBTdFu3YD818lrxiEwP/VYE/lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxGYhNIzFJ52UI139q1QTT4XgdFMB8GA1UdIwQY
MBaAFNiUNlsooIKDSnUal3cbeREkUk3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEt
MjE0NjE3OWQ4ZTJiLzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEtMjE0NjE3OWQ4ZTJi
LzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNXlTRl4
hBBl3xQFlVYZMH71pbLvcnvX4BrfcJtq8WdCivw0wsdh6qAV52NMKAqvvpNwva5Y
qgiPI2XOXDTxC633v1M2b2hPivED+XfiILOow4EvEEaH57neGMky0svbyUqEUcxb
LPCXyvZ7iOJbgSOi26AzYTtuWAZ3jHWRv3E+iQdgYkReywMorfpFDP1FxtHXIbK4
Gsy9F/oaVDoLFb2Mqf0+2b/sr7U4TK+SahTnuru+B8lI9w8a0za9DDS36jzd4alS
47Y+CEVi5sc0QPtTjrI72puLyeont/GlUjYFgXRDJNmBTI5pLca0oRRZUJDbAGE0
v7xXQue8902Auw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:31 2026 by rpki-client