Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
File:                     2TwNCKbGLnc4LoBBfocgmABMpOw.mft (raw, json)
Hash identifier:          XNntLKzYvDJoYlUIeun/LZuwnbXMVSO7YXGtwWrcORg=
Subject key identifier:   73:35:EA:BE:92:34:B6:53:81:4F:37:06:B3:0B:DA:40:60:2C:F2:36
Authority key identifier: D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC
Certificate issuer:       /CN=d93c0d08a6c62e77382e80417e872098004ca4ec
Certificate serial:       019FABD1B22622E4F1BD2881C47EDC6CBE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
Manifest number:          01BF
Signing time:             Wed 29 Jul 2026 03:01:14 +0000
Manifest this update:     Wed 29 Jul 2026 03:01:14 +0000
Manifest next update:     Thu 30 Jul 2026 03:01:14 +0000
Files and hashes:         1: 2TwNCKbGLnc4LoBBfocgmABMpOw.crl (hash: 1VS4XfYasI3O2n5V/vykr9scbdJ5XsMtH97/YnMHKQY=)
                          2: gymKXorNDDp8x3PYy2044v75QFA.roa (hash: 0rzdf9ANtdDtf/hP67m2732x5lm9z0lPUGsmoQ5Cu10=)
                          3: p1uSbL-UUVgMZUo_Jd2UtMfEjhg.roa (hash: 7ew9SV6essXaEgFcCj2o+LahCeQ3dZ5MSY5zyuMRzxM=)
                          4: wlE-n-v4vhVQ0V8BrCRy7vygKkk.roa (hash: GtlwHi8+nqqIfT+DJBH/zU6X+J1M23P7PC88GLuf8Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:b2:26:22:e4:f1:bd:28:81:c4:7e:dc:6c:be:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93c0d08a6c62e77382e80417e872098004ca4ec
        Validity
            Not Before: Jul 29 03:01:14 2026 GMT
            Not After : Jul 30 03:01:14 2026 GMT
        Subject: CN=7335eabe9234b653814f3706b30bda40602cf236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:04:41:e9:82:1f:d9:77:7f:79:1b:ca:d2:
                    24:65:1a:fd:82:4d:cd:3a:b8:95:f5:bc:94:62:0f:
                    c1:33:ab:e8:a5:20:8c:9d:3d:4f:69:a8:78:f1:3d:
                    b7:d8:cc:48:d9:9a:da:fe:7f:21:a8:a9:20:ff:d7:
                    3b:bf:2e:c4:a4:63:2f:4b:09:ef:a2:3f:3a:bd:d7:
                    e0:82:34:da:e4:e2:5f:41:ff:df:9f:1a:fb:95:dc:
                    18:f5:86:0c:fa:c1:7b:6a:76:37:69:ed:f1:34:0b:
                    b2:4a:62:cb:7d:89:c1:a0:d9:71:a5:7a:e2:b4:6a:
                    7e:87:a7:66:64:30:ce:f0:7e:b0:e9:87:a6:c1:1d:
                    fe:b2:05:6e:95:1d:42:65:02:eb:04:60:a8:89:a8:
                    d8:d7:88:46:64:3c:fa:67:60:7d:c5:6b:ac:c3:35:
                    24:3e:0f:63:21:76:3e:d5:69:dd:be:7d:1b:c5:20:
                    12:14:c7:89:43:91:4c:f5:b6:c4:96:aa:dd:90:9d:
                    df:4a:a3:e3:97:bd:7c:4a:0e:ca:c8:ad:8b:e6:58:
                    2e:b3:00:29:5c:46:b4:65:35:54:10:b2:c6:47:c7:
                    b2:28:6d:72:3a:83:5e:90:8b:40:2c:20:1f:15:eb:
                    28:6f:f0:00:72:01:a0:06:69:a7:8e:ba:1c:dd:07:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:35:EA:BE:92:34:B6:53:81:4F:37:06:B3:0B:DA:40:60:2C:F2:36
            X509v3 Authority Key Identifier:
                keyid:D9:3C:0D:08:A6:C6:2E:77:38:2E:80:41:7E:87:20:98:00:4C:A4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TwNCKbGLnc4LoBBfocgmABMpOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e798b1-4b2d-4c1e-ba37-9e92625cda97/1/2TwNCKbGLnc4LoBBfocgmABMpOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:51:3f:5d:eb:c5:33:d9:b6:6a:29:49:7a:c7:3d:89:c6:12:
         b7:d4:8c:9d:1e:39:3a:12:49:0d:5f:6a:30:01:18:29:9c:c0:
         09:a7:b6:de:8c:4c:dd:5d:6c:39:20:27:c7:d2:ac:83:cb:9a:
         d8:c6:86:00:e4:56:ba:cf:ee:44:8a:06:17:d3:b2:c2:d4:28:
         e8:7d:1f:a1:ca:c4:4f:90:08:e1:8b:08:66:0f:af:ae:c9:aa:
         4d:48:0c:31:a5:a8:b5:22:03:b6:5d:22:27:3f:d6:1e:d7:be:
         1e:8d:52:e1:53:e0:f0:9f:e4:3f:8c:35:a3:5e:13:dd:49:3a:
         5f:59:b0:83:7c:0f:07:f8:30:e2:a6:6a:37:99:f7:62:21:a7:
         39:83:f9:6f:00:1f:cd:3c:44:e9:37:b1:8a:29:0b:e7:25:1f:
         3b:bd:1a:24:08:3f:29:6c:f6:12:e2:8c:6a:c1:fd:f8:7f:6c:
         75:ce:59:32:97:7d:7e:87:b9:9d:e5:bd:c2:12:48:f2:8f:53:
         b9:6f:ac:c5:92:9c:c3:46:62:32:50:4c:1a:1a:d6:f7:9e:2d:
         ae:7c:0a:0c:72:3e:b9:b3:bf:c3:52:fb:51:b9:ca:66:f6:24:
         46:de:16:6a:11:5c:a2:2f:8a:14:e9:f2:80:d1:3c:e7:de:e0:
         95:65:d9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:21 2026 by rpki-client