Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File:                     2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier:          cdd1iWDe1O4gFuWDRLjMwRYiLmFDit83TwLCFSNQz6s=
Subject key identifier:   18:BA:01:A3:4C:A8:8A:3D:DD:DC:19:FA:F5:3B:71:F0:AA:EC:2E:B5
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer:       /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial:       019FA97565F11BE7D3BCD6DE09CA1BA2F530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number:          144B
Signing time:             Tue 28 Jul 2026 16:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:10 +0000
Files and hashes:         1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: XHJb82Nfgzcy08Y59/1HTxYKkH5cUUDcVgnsgxJ86xw=)
                          2: ah_59veV9YghWbpFZMyNLGkp8ws.roa (hash: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:65:f1:1b:e7:d3:bc:d6:de:09:ca:1b:a2:f5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
        Validity
            Not Before: Jul 28 16:01:10 2026 GMT
            Not After : Jul 29 16:01:10 2026 GMT
        Subject: CN=18ba01a34ca88a3ddddc19faf53b71f0aaec2eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:ab:ad:fd:15:b9:d5:b3:60:74:d2:8b:7d:
                    df:ea:c5:bc:fb:11:68:4c:87:ad:cd:93:9d:ea:86:
                    bf:f4:73:d6:bc:be:1d:bd:e7:f2:5c:ba:d0:6b:d8:
                    c8:f3:a5:55:38:7f:2f:60:6a:81:28:3f:24:a0:69:
                    d0:69:44:86:9f:7a:8a:d0:f8:28:0c:f4:5b:98:6b:
                    78:a2:8e:16:12:18:8c:0a:fc:51:4e:27:e6:5e:3b:
                    a5:18:5a:6d:48:dd:2c:6a:99:95:d0:13:1a:f4:e5:
                    bd:44:86:c0:11:46:12:38:25:0f:73:5c:f2:61:6e:
                    5c:82:f1:a4:a5:b1:60:b9:7c:58:4c:fc:d3:f0:da:
                    5b:f7:ca:41:1a:07:c9:15:d4:f4:be:f2:cf:eb:95:
                    e4:60:11:ce:f6:48:ab:35:d6:85:5e:92:05:45:10:
                    59:bb:a6:c9:e6:cc:4a:a4:b0:c8:63:11:90:3e:be:
                    1a:bf:93:75:95:a5:e7:73:71:ee:58:c1:b8:f6:40:
                    ea:ac:67:ed:09:af:0f:b9:26:a2:d8:a2:66:c6:51:
                    01:71:bd:07:06:db:df:46:05:5a:8a:e2:e5:d3:f6:
                    59:00:fe:c5:0f:0b:b4:2d:53:b1:a9:1a:1b:44:d3:
                    cc:a5:b6:9f:b7:b5:c6:d0:9c:9d:af:09:4d:f3:bd:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BA:01:A3:4C:A8:8A:3D:DD:DC:19:FA:F5:3B:71:F0:AA:EC:2E:B5
            X509v3 Authority Key Identifier:
                keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d6:7b:e6:88:82:f3:d4:5f:4f:e9:6f:a8:b6:52:38:a4:86:
         57:05:28:fb:0a:b3:fa:24:d5:14:e6:5c:7e:2f:05:58:c9:49:
         5d:08:82:e3:1b:ad:94:78:fc:22:22:5b:fb:57:64:60:da:04:
         8e:36:c9:4b:c7:dc:19:12:4d:9d:fd:a0:2b:3e:b9:06:54:d9:
         3d:13:19:a4:32:d6:e3:39:43:00:9f:f4:d4:e5:f7:23:63:c9:
         e8:6f:c9:d9:ce:ed:ed:81:9e:8d:49:66:87:d4:28:5a:a0:44:
         a6:8a:a1:6c:52:47:e5:a3:dc:47:3a:e0:c3:a5:c1:54:8e:69:
         83:b5:b7:99:05:0d:18:87:53:8d:f9:4d:ca:c2:e0:ed:46:e1:
         12:82:b6:ce:02:2d:d5:94:f9:17:46:05:3b:86:9f:fd:a8:31:
         02:30:32:bb:30:a6:a9:09:3b:ff:5c:59:84:53:75:cc:5a:64:
         fd:0e:d8:b7:11:22:37:46:87:17:09:b9:e9:4b:9c:5f:45:b5:
         88:9f:99:1e:43:9f:cb:db:c0:8b:62:94:4e:f4:37:0f:98:5b:
         d2:62:4e:57:be:83:02:37:d2:ef:e9:3b:b8:8c:65:60:f3:72:
         2f:b0:45:16:7d:e4:2e:21:86:ab:16:13:91:d9:a5:59:75:f0:
         ca:51:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:26:02 2026 by rpki-client