Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File:                     2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier:          eO0PQVASa1VUwbEclf0mzSrdLIuXAeeeUy0HzpZ3wRc=
Subject key identifier:   84:44:9E:3C:D8:9D:80:C5:B4:EA:0F:45:D4:4F:C1:18:EF:C2:E4:70
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer:       /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial:       019FA8D098501EEC92CA33DB17F8BE924263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number:          07DF
Signing time:             Tue 28 Jul 2026 13:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:10 +0000
Files and hashes:         1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: aceOdHbKH+4jsyvCjXdiboHzVRlm8KkH04uonayzZj0=)
                          2: 7pzFf_iNoDngDs0Av_ZSMgawRG4.roa (hash: 9rYKYzez5K3YGGCA+xWy6+JbqzejGQR6adseKr3AGNo=)
                          3: a3MACvt7XrPEY_fMvOjs2dGCc8I.roa (hash: BnSZeJBjA6bMn5RCXClcc6mDzKBCwKOx+bVKk38vQdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:98:50:1e:ec:92:ca:33:db:17:f8:be:92:42:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
        Validity
            Not Before: Jul 28 13:01:10 2026 GMT
            Not After : Jul 29 13:01:10 2026 GMT
        Subject: CN=84449e3cd89d80c5b4ea0f45d44fc118efc2e470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e5:dc:ba:8d:30:90:e6:8c:8e:2a:b9:b9:6c:
                    59:16:de:25:19:d3:55:5e:fd:5d:f4:a1:46:7f:dd:
                    80:18:fb:e8:75:25:54:99:69:1d:6a:b6:d1:37:79:
                    4f:19:4e:a6:f3:bd:07:63:d5:66:46:68:4a:cb:d8:
                    6c:10:ae:b2:a9:a1:78:44:44:f6:11:b2:ed:26:4f:
                    35:18:9e:e1:c2:a6:bf:8f:54:e5:ea:fb:60:1d:9a:
                    e0:b3:b2:a5:db:55:b2:56:a7:1a:39:df:cc:48:2f:
                    12:12:77:47:af:cc:74:2e:ce:4b:a7:62:bf:45:2a:
                    dd:cb:54:9c:a9:49:cf:be:2e:22:54:da:64:71:e1:
                    52:fc:b2:dd:8e:f1:25:29:7d:57:a2:79:f2:7c:b2:
                    3d:16:5b:43:b7:8a:20:6b:d9:ff:90:44:e5:01:32:
                    2b:02:6c:1f:6d:e7:ab:8f:fc:b0:de:58:6f:7b:e3:
                    88:92:75:fd:7a:2b:dd:f0:66:ad:a0:fa:04:73:f8:
                    c1:b7:8a:e4:e1:41:88:0b:fd:c3:fb:0e:03:ce:fc:
                    cc:a9:a6:4a:d9:99:4a:45:c7:f9:9d:e0:d9:44:26:
                    d5:39:8d:71:c1:b4:aa:7e:87:2a:50:ef:fb:07:10:
                    f5:2c:d7:ce:52:da:fa:b5:d4:13:e6:af:29:22:35:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:44:9E:3C:D8:9D:80:C5:B4:EA:0F:45:D4:4F:C1:18:EF:C2:E4:70
            X509v3 Authority Key Identifier:
                keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:28:6b:f9:93:ac:91:86:91:5a:9e:8c:85:eb:f5:b5:53:b1:
         b1:6e:bb:74:21:de:62:53:86:eb:99:91:80:7e:b5:dd:46:36:
         48:45:16:f3:04:13:15:3a:55:3c:35:66:bc:31:ba:7f:e2:58:
         ab:a7:7f:41:1e:c2:86:6c:99:ca:83:7d:3e:bd:ca:11:53:7f:
         f5:cf:35:25:b3:b2:f7:40:cf:9b:3a:31:dc:eb:dc:d6:a2:82:
         a9:a4:4a:5b:64:3e:df:8f:08:86:1a:48:cc:58:3c:4b:4a:0b:
         9e:67:ab:5b:b1:b4:89:24:5f:62:28:32:4c:9b:ae:47:97:03:
         a5:12:8f:1c:3a:59:ad:ef:24:c7:f2:fb:2a:1c:1c:35:79:37:
         fa:8d:9d:f9:57:af:bd:70:91:e4:7a:86:ca:85:5f:39:66:9f:
         db:3e:6d:46:66:81:23:32:f4:2d:c1:74:9a:27:38:dc:d3:88:
         8f:40:ba:95:31:93:f3:09:15:52:b7:f0:45:5a:2f:44:86:56:
         d1:83:88:a9:15:37:87:07:c2:9f:6a:95:0b:a2:61:a7:df:d2:
         0b:56:49:fb:0b:bb:18:cc:b6:1b:31:ac:91:94:b0:91:ee:2a:
         d6:03:6a:fe:52:10:99:67:ec:40:e1:12:e3:b0:c9:d7:80:a7:
         cf:fe:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:31 2026 by rpki-client