Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File:                     2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier:          t7BbTTAUr7a6xqT8B7xZsy3sGhIVqCMuMEGSfe93Lss=
Subject key identifier:   5A:E2:67:AB:59:41:A1:44:51:84:85:6C:4D:F3:DB:43:EF:A5:3E:62
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer:       /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial:       019FAA1A4CC502F5114349ACD6352F02FFDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number:          0A7F
Signing time:             Tue 28 Jul 2026 19:01:18 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:18 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:18 +0000
Files and hashes:         1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: WYnKWNGtox9QH+9pJpf6/jnL9bFjE8fu7Lgzj/ymnq8=)
                          2: iZ4FmBUmzQ1jjTqXhvURrWn4Be4.roa (hash: 2U9RkTvh/CP+gL154cvBJ8P7xRzyHflZ/rH4Y3M1elw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:4c:c5:02:f5:11:43:49:ac:d6:35:2f:02:ff:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
        Validity
            Not Before: Jul 28 19:01:18 2026 GMT
            Not After : Jul 29 19:01:18 2026 GMT
        Subject: CN=5ae267ab5941a1445184856c4df3db43efa53e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:63:20:04:d5:43:32:dc:35:8c:5f:ec:a3:
                    63:a6:84:7f:73:8b:ca:d6:5f:03:a2:d6:18:a3:00:
                    bd:23:4f:a7:86:a7:06:63:8b:80:ca:d4:08:e2:1e:
                    9d:47:76:0b:fd:50:dd:7f:e6:f3:63:28:2a:da:6e:
                    0f:98:d6:51:77:45:17:0d:41:07:a7:79:06:59:ef:
                    2c:53:70:42:ed:be:38:a8:e4:e8:6f:00:28:11:70:
                    b4:fe:31:be:51:95:bf:aa:92:62:8c:06:9a:4d:3d:
                    eb:9e:44:bd:44:94:0c:57:7c:89:73:92:a5:4e:d4:
                    fb:43:e9:b0:5c:93:24:21:3d:d0:47:f8:da:07:81:
                    08:fa:38:ea:14:7a:8a:95:a6:df:4b:54:ab:ad:c1:
                    da:dd:cb:86:d7:9d:e2:8f:b0:9d:20:56:ae:ad:30:
                    90:16:e8:41:69:a4:71:f0:21:f5:93:aa:39:22:24:
                    e3:00:51:59:de:7d:5d:17:b9:15:29:5a:07:af:65:
                    cb:b7:db:b9:4f:2c:79:6f:d2:ad:59:27:45:27:9c:
                    36:15:96:36:43:eb:fa:cc:d5:8d:46:bd:1f:d3:18:
                    ea:6f:1a:0c:e9:64:7e:6d:0c:84:b1:a2:7c:5e:2c:
                    cb:6a:cb:d3:6d:ee:65:25:52:db:ee:ea:ec:8b:1f:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E2:67:AB:59:41:A1:44:51:84:85:6C:4D:F3:DB:43:EF:A5:3E:62
            X509v3 Authority Key Identifier:
                keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1d:da:32:48:7c:b5:e1:3b:69:2c:7e:ba:4e:0e:3c:ac:9b:
         d8:f8:ab:90:b4:50:f8:db:8e:38:51:6d:b0:44:ef:1c:e2:cb:
         a8:75:c5:a1:5a:b9:43:a7:60:59:3c:f5:3b:8f:7f:fe:ea:9f:
         ab:9f:d5:e1:cf:24:ff:ab:b5:7e:98:56:89:ec:d6:d4:c7:92:
         86:78:01:a5:33:b9:e0:a5:83:da:10:3d:7c:34:56:eb:c9:6b:
         00:13:e6:8d:c4:f2:b5:ae:6c:7a:03:6a:56:62:b2:c2:4d:22:
         cb:ac:03:3f:00:e2:38:89:f4:44:b1:1e:04:89:27:c8:d8:25:
         c3:e3:c2:70:81:f5:1a:21:9f:83:e6:6e:3a:c8:2a:54:79:90:
         e8:7d:3d:04:1f:df:85:8b:8a:e9:1b:17:c0:ce:84:8d:df:d0:
         75:01:28:00:fa:16:12:9c:38:07:1a:2d:1e:d5:4e:e0:1e:69:
         f2:93:05:03:37:fc:c3:05:06:8b:28:b4:46:90:19:15:c2:a1:
         48:63:51:be:f7:f8:a4:ec:ec:64:6d:d4:60:ed:13:56:f2:ba:
         8e:93:98:cf:c1:31:84:c0:21:43:a1:0f:73:ea:06:99:df:15:
         31:79:1f:0b:6d:4a:51:81:34:7b:03:aa:1f:5f:ce:a4:81:ce:
         db:55:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:27 2026 by rpki-client