Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File:                     2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier:          S46DyZhiiaiwoLodPcnrvDXrewJYGYT5nnoTAaV6O3Q=
Subject key identifier:   DA:0C:E3:57:5C:8A:D9:B8:F2:F5:68:BF:E4:44:48:F8:48:11:2E:C2
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer:       /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial:       019FA907439F93FBD773B892C79311578F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number:          19E5
Signing time:             Tue 28 Jul 2026 14:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:53 +0000
Files and hashes:         1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: tpVJs3O2SWNIHLX6wB26PBI8Na8FavA7SGz7XX9n39c=)
                          2: NCNcQSJc0TGzJY4u8AfMXCbg0RE.roa (hash: olrbYNRVZ37d5DGlOqhZmdOWpkC0qMK5uUX2T/dHnwk=)
                          3: NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa (hash: zQ014lIcxxnh0W92J1yApdSlVAvsQefsim3FPRGCxsw=)
                          4: S-F0eq4A_ozaGKmyidwMC5Jy5Ro.roa (hash: x3y+oF+ZdUAZ9Uf6wr7xaiGLxbD/kDc2LpvrGJEYeAM=)
                          5: tvjO7d2OruGUM05e3v_9VK0Tnvg.roa (hash: av53I/iTLdQRU3qkC6MQBoQi4smDbLlIv8oPMv9ZXBY=)
                          6: wet2iRU-DIcI7ecq9nOLNfx3URM.roa (hash: ukbv/ID6Q3IjhclCaom/PoiMdbvmxstujbtE/kfKRtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:43:9f:93:fb:d7:73:b8:92:c7:93:11:57:8f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
        Validity
            Not Before: Jul 28 14:00:53 2026 GMT
            Not After : Jul 29 14:00:53 2026 GMT
        Subject: CN=da0ce3575c8ad9b8f2f568bfe44448f848112ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:ea:6a:86:20:95:f5:b6:26:b8:1d:df:42:
                    0b:df:e2:38:be:15:51:59:55:21:5c:90:ad:2d:19:
                    06:4d:18:ca:bf:4d:4a:fa:a5:34:1c:75:10:35:f9:
                    ad:d9:cb:95:d5:d1:a2:18:3e:90:08:8d:c6:08:30:
                    97:20:bd:bc:3b:87:7c:28:11:86:c6:4f:44:1a:28:
                    7d:84:00:3c:37:ae:b1:35:8a:79:47:ba:7b:5b:5f:
                    33:cc:db:c4:42:b4:ef:ba:87:c2:f9:15:67:17:08:
                    c2:5c:2e:33:6e:7c:e6:4e:6a:ca:b5:83:e6:32:66:
                    ce:ec:49:ce:42:77:c4:bf:0b:93:cb:99:15:af:ca:
                    70:3a:97:b7:b7:3f:10:21:c6:77:40:22:20:fa:48:
                    ab:f6:1e:4c:cf:45:42:a1:41:2c:65:63:25:5f:cf:
                    98:9a:6d:ac:63:b7:00:f8:8d:e1:fb:87:17:6f:ef:
                    3b:7b:ce:91:28:9b:1e:24:5b:d2:42:4c:06:60:bf:
                    24:a6:39:3d:b3:87:38:7a:9b:b6:81:99:58:39:33:
                    e7:54:fd:db:a5:bf:ca:88:71:4e:b1:35:5c:41:cd:
                    85:9b:a9:4d:7f:c5:2f:cc:97:6d:15:82:e2:6c:d2:
                    9f:5d:ae:12:ab:75:3e:ca:ac:56:5c:08:60:a8:98:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0C:E3:57:5C:8A:D9:B8:F2:F5:68:BF:E4:44:48:F8:48:11:2E:C2
            X509v3 Authority Key Identifier:
                keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0d:fb:f0:70:70:f7:ad:a1:b5:ee:ad:03:0b:f6:70:5a:03:
         cc:66:20:43:4f:21:87:fb:4b:a2:d4:c6:cf:c8:51:b4:97:c9:
         19:a7:ae:1d:75:91:a2:3a:ff:ca:32:a6:25:c4:01:29:7a:32:
         10:17:40:13:31:0c:ab:b9:65:9c:2f:a8:06:d2:bd:72:11:37:
         8f:e4:e5:67:38:e4:06:1b:00:0f:f9:c3:22:cb:4f:69:3c:4d:
         5a:e0:e8:a6:75:7e:fa:22:09:20:81:b6:b6:a5:06:60:f9:37:
         09:12:c1:f3:1c:29:a3:82:1c:55:22:e7:a4:25:b3:36:7b:d3:
         fd:ae:18:07:88:5c:8f:7e:a9:21:0c:c5:cb:ab:95:5f:09:60:
         31:d2:a6:3a:86:79:26:c9:3d:8d:e1:79:d1:66:42:79:7f:d9:
         a6:cc:2c:22:5d:1c:bb:3a:8e:68:7e:c4:37:6b:e7:30:30:86:
         3d:d8:a0:53:2f:64:e2:bf:10:55:5f:a5:e4:44:04:18:2f:2d:
         35:06:d1:4d:24:a0:09:19:54:24:7c:42:45:93:f7:dc:6e:7b:
         22:a6:e4:86:93:f1:20:34:ee:d3:80:16:1b:4a:6e:2a:15:db:
         bf:1b:f3:bd:ea:9e:d1:6a:26:22:4e:07:77:25:06:0d:99:4d:
         05:82:2a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:14 2026 by rpki-client