Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
File:                     m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json)
Hash identifier:          DHoogfRpwjWMjQvjCM8bydmSYnwXjqx/617Amet7I64=
Subject key identifier:   BE:EF:D4:6A:76:72:55:2E:BA:8B:56:B3:E3:48:75:86:8E:0A:66:C2
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Certificate issuer:       /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial:       019FAA878EF19B4387DFF8FAC98BDCDFA896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
Manifest number:          1909
Signing time:             Tue 28 Jul 2026 21:00:38 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:38 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:38 +0000
Files and hashes:         1: NGSRZ0UFf37oBgMflKRqMJVzu1A.roa (hash: QQl6ufsi4HXmy3ASinxAh+zaiJ4iVflIUzf0L3Srl8Q=)
                          2: cnqrVuurtzefRH7SXfJZEmIqN0c.roa (hash: Vh3D8b6qjUnsJyNx9UNrDRqqXIGsiNFhU3lLE/75w7s=)
                          3: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: gzP4cWskc8latpbPpxAIoBLerLxAJDbvcIbKekfQWNY=)
                          4: sPNW9L7nvdJWjHEG7P1B2mLSY6I.roa (hash: GJ8bFB5CbpvRHqB9ftaag6jbvrupCXTR5QaGBQCK/Ms=)
                          5: uLKZdDovNYh-DpBqqKP-yEKFq6g.roa (hash: VXKMVBqqwBpyEzSrFgtoLzoyOdF5dlP0dTicEmqV8zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:8e:f1:9b:43:87:df:f8:fa:c9:8b:dc:df:a8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
        Validity
            Not Before: Jul 28 21:00:38 2026 GMT
            Not After : Jul 29 21:00:38 2026 GMT
        Subject: CN=beefd46a7672552eba8b56b3e34875868e0a66c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:a6:58:21:59:53:6d:dc:95:12:1a:8b:d8:
                    0b:6c:e2:8e:b0:5c:1a:13:8f:6e:b7:51:e9:e8:53:
                    ae:2e:39:e9:12:d5:c4:19:28:ef:72:62:dd:9f:66:
                    ec:51:d1:da:5a:a7:15:28:ff:84:f2:0a:b7:14:d0:
                    48:75:2d:49:6e:eb:b8:8a:60:b3:aa:b4:02:ea:bb:
                    22:76:fb:7d:f6:f1:b4:1d:29:63:57:52:dc:8d:c0:
                    14:df:ce:06:80:d5:ba:3f:94:a4:bf:2e:13:f0:dc:
                    57:ab:66:af:31:7c:b8:ef:57:36:65:23:5e:43:c9:
                    fd:5a:6c:9f:ab:7c:be:c0:61:22:82:f8:65:4a:72:
                    a7:92:0b:39:22:23:3a:17:f1:49:a8:74:3c:32:1a:
                    1a:23:eb:c8:d5:99:18:19:1e:38:08:67:c5:45:30:
                    4b:8e:04:bd:4b:ce:87:5f:56:ce:ae:4c:0d:d0:10:
                    1e:ec:4f:3d:85:b8:1a:ed:10:00:62:fd:2a:fe:66:
                    32:21:86:37:79:00:de:eb:0a:cc:ea:39:20:fc:98:
                    56:c4:d8:8a:e2:1f:0f:bf:c2:7a:e5:30:21:25:21:
                    b1:54:5a:b0:65:12:88:e4:d7:25:83:9b:56:3e:37:
                    57:92:e9:c0:bd:3a:44:a8:c1:6c:53:00:74:4a:74:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EF:D4:6A:76:72:55:2E:BA:8B:56:B3:E3:48:75:86:8E:0A:66:C2
            X509v3 Authority Key Identifier:
                keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:92:23:81:da:93:68:f8:56:e0:3b:13:76:1b:8f:3b:eb:82:
         aa:87:ef:4e:6f:87:52:e6:28:e8:3c:cb:56:22:ee:a4:04:b5:
         9a:fc:72:1b:f8:93:64:22:e5:e5:92:f9:32:51:7e:42:ee:cd:
         54:39:29:86:c2:d1:ab:52:ec:45:cb:6f:ce:e1:c3:09:c4:8f:
         48:37:64:56:c5:24:e0:ab:a9:b2:3a:3d:29:98:73:52:94:26:
         92:01:20:8e:db:bb:ac:25:14:81:59:ec:97:49:bf:bb:49:57:
         d9:92:c5:70:4c:d5:be:02:70:93:2e:bd:4a:08:89:0d:3c:e2:
         8b:2e:bb:c0:37:3a:c2:02:42:f6:ea:60:82:b3:94:d7:21:d4:
         ed:4e:db:a4:5f:71:9d:8f:4e:37:f1:cf:7a:35:f5:d5:11:1b:
         b9:ab:b6:52:f0:fd:d8:4f:7c:2e:ca:04:15:d6:60:55:d7:be:
         9f:e0:4c:71:8a:04:07:b8:3e:66:38:00:a1:4c:b9:30:d7:ed:
         e1:ce:1f:db:27:32:91:d5:14:da:6a:7e:ee:9c:46:bb:e6:75:
         7c:0b:64:79:c1:20:3d:1f:ce:ab:99:3d:1e:52:73:6b:35:2b:
         18:1a:2b:c3:b0:d8:59:77:79:84:13:d4:a8:d0:cf:14:54:72:
         53:95:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:15 2026 by rpki-client