Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File:                     2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier:          RWNYvsKru0tmE9xEfPcf8fyx9kNhREj+RDnykKJKTPM=
Subject key identifier:   6D:0C:CC:48:41:76:98:3B:3F:9E:F0:B1:C4:A9:6C:9F:8E:FA:78:03
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer:       /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial:       019FA899529406B7D7B9693E1FE1D817AE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number:          1680
Signing time:             Tue 28 Jul 2026 12:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:48 +0000
Files and hashes:         1: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (hash: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM=)
                          2: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: TFhrCJnq2tvkeL1m9E6ITDwZfXcpyhkgQfiU1TPMxTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:52:94:06:b7:d7:b9:69:3e:1f:e1:d8:17:ae:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
        Validity
            Not Before: Jul 28 12:00:48 2026 GMT
            Not After : Jul 29 12:00:48 2026 GMT
        Subject: CN=6d0ccc484176983b3f9ef0b1c4a96c9f8efa7803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:f0:99:61:36:03:0c:e6:36:45:06:d8:84:
                    9d:dc:0d:5b:ed:59:d1:1d:25:cd:b9:41:5a:5c:d4:
                    49:5f:81:61:93:2d:5b:9b:80:9d:11:91:fb:87:f9:
                    16:ac:2a:e6:47:99:cd:81:cb:a6:8d:9d:a3:10:ab:
                    78:c3:b9:4d:35:1a:b3:9c:5b:ac:bf:aa:e0:59:db:
                    71:8e:03:78:1b:b0:7c:7f:90:85:2c:bb:c4:2d:2b:
                    86:44:a4:f8:dc:dd:15:44:ff:5d:f5:7a:5b:1b:40:
                    5b:84:d4:6f:cf:a0:d6:77:51:02:0f:dc:36:7a:89:
                    b3:10:96:72:1b:06:a2:77:7a:56:2c:3f:7f:2c:be:
                    5f:96:e1:e2:0b:0f:50:f0:fd:26:ef:9d:87:69:78:
                    88:ca:d5:d3:a2:79:c9:3e:00:97:7a:a0:f0:aa:0d:
                    91:e0:1f:0f:21:2d:a9:5b:96:ad:d8:46:01:f7:3e:
                    45:a8:f7:10:5a:0c:62:5b:20:a2:fd:06:e5:b7:c8:
                    02:6a:9e:78:b6:82:22:11:59:33:bb:70:87:e7:1e:
                    9b:f4:15:a5:14:5a:a1:2e:05:78:48:98:cf:ef:74:
                    45:30:6c:5d:aa:a4:11:ef:11:60:ac:5e:c8:fa:7f:
                    14:ba:4a:37:d7:61:17:dd:36:58:62:7b:18:bb:29:
                    11:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0C:CC:48:41:76:98:3B:3F:9E:F0:B1:C4:A9:6C:9F:8E:FA:78:03
            X509v3 Authority Key Identifier:
                keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:21:90:ff:75:e4:c0:ef:6c:b0:38:f1:d7:d3:a5:48:6d:9e:
         ab:4b:1a:d6:73:ee:8b:00:e4:e2:62:de:74:3c:1f:b0:2d:01:
         8c:1d:53:e4:d6:43:4f:79:ea:9c:82:2e:0a:81:1b:8a:16:2a:
         84:83:8f:41:34:65:14:ec:2d:bb:a2:c1:86:d2:90:91:a3:60:
         bc:83:e3:d0:07:84:34:15:54:6f:14:c2:ab:df:56:15:2e:d3:
         27:04:6c:d9:f1:d2:68:74:7e:6c:10:10:4f:ee:14:31:eb:dc:
         ae:00:98:28:cd:6c:96:1b:2e:be:a8:b6:a4:7e:6c:c1:02:8c:
         db:cf:7e:c7:ff:7d:5a:77:dc:e9:24:6c:cf:4f:01:a6:38:ad:
         4f:3a:09:2e:86:59:54:4a:a1:0b:e4:de:a9:93:9d:90:36:3a:
         f1:cb:6c:79:04:b8:f7:53:75:8c:c9:a0:6c:72:9c:b0:2d:9b:
         56:c7:d8:f7:85:a9:77:98:b1:5e:a2:6a:b8:ed:97:5e:d9:c3:
         07:6c:51:94:58:f4:2f:2a:66:12:6b:ae:81:5e:4d:2b:85:40:
         77:8b:ac:c6:35:d7:63:a7:79:cf:e6:9b:0d:fa:bf:cd:83:a7:
         3f:76:77:ab:83:b9:7a:de:49:92:32:03:2b:1f:57:68:13:9d:
         44:04:e5:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omVKUBrfXuWk+H+HYF65WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTEyZTg5OTNiMDBiZGEyYjRlOWMwMmFjNTc4Mzc0MDBh
YWM0MDQwHhcNMjYwNzI4MTIwMDQ4WhcNMjYwNzI5MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg2ZDBjY2M0ODQxNzY5ODNiM2Y5ZWYwYjFjNGE5NmM5ZjhlZmE3ODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsXwmWE2AwzmNkUG2ISd3A1b7VnR
HSXNuUFaXNRJX4Fhky1bm4CdEZH7h/kWrCrmR5nNgcumjZ2jEKt4w7lNNRqznFus
v6rgWdtxjgN4G7B8f5CFLLvELSuGRKT43N0VRP9d9XpbG0BbhNRvz6DWd1ECD9w2
eomzEJZyGwaid3pWLD9/LL5fluHiCw9Q8P0m752HaXiIytXTonnJPgCXeqDwqg2R
4B8PIS2pW5at2EYB9z5FqPcQWgxiWyCi/Qblt8gCap54toIiEVkzu3CH5x6b9BWl
FFqhLgV4SJjP73RFMGxdqqQR7xFgrF7I+n8Uuko312EX3TZYYnsYuykRpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0MzEhBdpg7P57wscSpbJ+O+ngDMB8GA1UdIwQY
MBaAFNkRLomTsAvaK06cAqxXg3QAqsQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYt
NTE3YTY2MWFlNmJkLzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYtNTE3YTY2MWFlNmJk
LzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSGQ/3Xk
wO9ssDjx19OlSG2eq0sa1nPuiwDk4mLedDwfsC0BjB1T5NZDT3nqnIIuCoEbihYq
hIOPQTRlFOwtu6LBhtKQkaNgvIPj0AeENBVUbxTCq99WFS7TJwRs2fHSaHR+bBAQ
T+4UMevcrgCYKM1slhsuvqi2pH5swQKM289+x/99Wnfc6SRsz08BpjitTzoJLoZZ
VEqhC+TeqZOdkDY68ctseQS491N1jMmgbHKcsC2bVsfY94Wpd5ixXqJquO2XXtnD
B2xRlFj0LypmEmuugV5NK4VAd4usxjXXY6d5z+abDfq/zYOnP3Z3q4O5et5JkjID
Kx9XaBOdRATlcw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:40 2026 by rpki-client