Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          dSW85eRSP+qaWNJ1mepTntxYhvUqU9Dkrpv9mLzoeg0=
Subject key identifier:   F0:C0:D9:23:58:50:8E:73:6F:6E:BE:8D:48:42:22:40:1E:FF:2F:E7
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       019FA9ABAC2949F1A0AD58FA2490C814A6CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          16D2
Signing time:             Tue 28 Jul 2026 17:00:27 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:27 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:27 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: HlPY9phof+GvMpVaOP8U0iW5QS1hYOHykmu6fndrYIQ=)
                          2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
                          3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
                          4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
                          5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:ac:29:49:f1:a0:ad:58:fa:24:90:c8:14:a6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Jul 28 17:00:27 2026 GMT
            Not After : Jul 29 17:00:27 2026 GMT
        Subject: CN=f0c0d92358508e736f6ebe8d484222401eff2fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:7f:cc:5b:67:2a:bc:ef:8b:19:63:00:e7:
                    ec:6d:79:d0:d7:dc:ba:e7:48:d0:af:f0:a1:fb:f5:
                    28:69:73:98:cc:be:3f:05:76:e0:42:68:a7:86:c2:
                    b1:0b:b7:a8:5c:a4:44:1b:64:80:89:f8:1b:1a:c4:
                    e1:79:82:68:53:31:44:cd:06:0a:d6:a2:f2:1f:64:
                    17:f7:52:a6:90:24:51:d2:d2:05:cf:a9:d6:c2:5f:
                    2f:32:68:e5:53:69:fd:51:e0:70:6f:b4:c3:18:1c:
                    a2:51:c9:9b:96:1f:12:2a:45:a5:7a:d0:e3:87:57:
                    d1:61:75:cb:e1:aa:1b:55:70:79:59:11:b8:bf:a4:
                    8f:e4:ad:be:0e:5b:b4:d7:40:5c:14:85:c7:16:ae:
                    f1:7f:18:72:26:dc:b9:57:21:eb:af:70:31:5f:98:
                    9d:ab:7e:0b:7d:49:d6:fb:c5:cb:c2:38:71:da:0c:
                    d1:fd:d2:78:a2:cb:4c:51:be:84:50:d9:35:d2:e6:
                    a8:00:fa:92:2b:bb:18:43:ea:a3:a7:c5:2c:ce:40:
                    81:15:db:2f:12:da:9d:eb:a9:35:34:55:aa:30:2d:
                    02:3c:1f:c9:28:fb:72:8b:06:2c:89:60:6e:b0:8e:
                    ce:85:26:0a:b7:9e:99:78:10:56:96:91:62:d5:bc:
                    a1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C0:D9:23:58:50:8E:73:6F:6E:BE:8D:48:42:22:40:1E:FF:2F:E7
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:80:55:0b:41:98:f1:5b:63:f3:6d:0a:81:aa:d8:28:b4:11:
         01:d5:5a:10:5f:9a:b0:d4:21:fb:1b:9b:51:00:b5:f0:08:9f:
         1b:16:a3:68:f0:1b:af:da:43:9d:2d:86:1a:81:b8:67:91:13:
         54:df:a5:38:ad:2f:a6:54:5a:28:fb:bd:70:e5:5c:4d:6b:18:
         11:a3:76:e1:07:e1:9b:11:2d:0c:2f:c8:93:45:74:c4:0e:96:
         84:83:e3:3f:81:62:69:30:45:ce:c3:12:08:9b:02:83:d3:e4:
         0e:39:21:7c:25:40:db:55:ec:35:8d:7a:42:f8:75:0b:70:83:
         75:8c:dd:c5:8f:93:e4:85:47:8a:c6:b2:ef:1e:be:37:47:5f:
         36:21:57:71:1d:57:7e:19:af:55:50:54:bc:ab:f7:be:31:65:
         30:90:13:9b:64:0b:90:5b:85:fa:b2:cf:d1:d7:e4:bf:82:7a:
         cb:29:f9:0c:c6:a4:29:e1:23:4a:52:61:53:65:90:07:20:38:
         87:e2:f8:2e:bc:19:f4:7b:08:06:bb:36:9d:50:5e:57:42:c2:
         e5:d4:3f:62:f6:96:b7:e1:af:94:70:5b:45:9b:6b:20:e3:2e:
         93:46:3c:e8:99:bc:d3:92:2f:d0:71:24:34:8c:9e:ce:03:2b:
         d9:d1:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:48 2026 by rpki-client