Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File:                     K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier:          k+X4aPr5maookZf0TSnfDyST301HK+69L0Gtoee2BNk=
Subject key identifier:   61:03:94:67:BA:3D:98:37:5B:A3:F8:F7:78:7C:C2:5E:CC:66:58:0A
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer:       /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial:       019F84FA71AF0AA678F16FD4124C74C69264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number:          119F
Signing time:             Tue 21 Jul 2026 14:00:33 +0000
Manifest this update:     Tue 21 Jul 2026 14:00:33 +0000
Manifest next update:     Wed 22 Jul 2026 14:00:33 +0000
Files and hashes:         1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: wimb0zLRtc45EUnRTvUJHojkF+dr8wJ5FgCFO0s0oeo=)
                          2: dbilkSZsjUibJ1NutZ76qJvy820.roa (hash: /oJpuqHaWi4ouiqRZTNCC/b0oRgbkGtlYtRLMPSUMXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:fa:71:af:0a:a6:78:f1:6f:d4:12:4c:74:c6:92:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
        Validity
            Not Before: Jul 21 14:00:33 2026 GMT
            Not After : Jul 22 14:00:33 2026 GMT
        Subject: CN=61039467ba3d98375ba3f8f7787cc25ecc66580a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:53:b6:e8:e9:71:42:b5:d8:c8:fa:89:5d:
                    f9:71:b5:97:05:86:97:1a:fe:db:85:b3:be:ae:e8:
                    43:24:9e:79:85:82:a5:2d:0e:1a:83:e6:0c:9f:83:
                    9b:10:d7:ed:2d:ad:cc:ae:d1:77:60:10:34:07:64:
                    89:ce:f2:71:5c:d4:b9:df:f6:a4:9a:5d:de:1d:50:
                    c2:b3:f6:1b:fb:d1:5d:81:4d:77:5c:74:8d:0c:5d:
                    d4:07:3b:4a:e0:d5:a0:02:2e:f2:95:53:22:d2:8d:
                    32:d2:f9:25:4a:10:57:78:ad:e6:5e:ce:12:75:02:
                    58:16:9c:0e:4f:78:82:5f:35:34:d8:d7:02:91:5d:
                    2f:e3:56:45:bb:cb:5e:f8:1d:58:af:eb:05:9d:a5:
                    fc:4a:d6:f1:45:85:92:e6:8d:51:1c:66:1e:07:6e:
                    07:8c:fa:c0:f2:7e:4d:cb:d1:86:99:29:01:c8:5e:
                    12:84:01:27:4d:73:dd:ec:18:75:ca:ab:7c:fb:17:
                    70:bd:e4:be:8b:38:17:9b:e7:80:db:78:db:9e:95:
                    1e:3b:cd:24:4d:16:5c:04:4e:8e:f2:e9:c6:89:ff:
                    9c:bb:4a:04:73:0d:02:8c:92:98:8d:1f:0f:52:f0:
                    fa:28:35:24:f6:a1:04:ca:c1:44:2d:ea:74:92:33:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:03:94:67:BA:3D:98:37:5B:A3:F8:F7:78:7C:C2:5E:CC:66:58:0A
            X509v3 Authority Key Identifier:
                keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a7:5d:dc:25:36:3a:9e:6f:40:84:3a:33:65:c1:7c:61:43:
         6c:c3:93:f5:d7:c5:52:7f:78:6b:2d:fa:1f:f1:ad:b0:65:f3:
         f3:d9:43:c6:49:11:bc:4d:95:71:c2:cb:23:d7:12:99:83:c6:
         c0:29:cc:98:29:6f:60:80:40:5a:08:3b:2d:85:62:c2:a0:cb:
         98:56:a3:54:63:da:cc:29:c1:22:3d:88:5c:ef:89:8f:8e:59:
         24:d9:0a:2f:bc:6a:b4:e6:03:2d:35:57:ec:5a:22:25:dd:4c:
         f3:0f:9f:cb:cb:ce:89:09:c4:9d:89:fc:1f:5f:b4:f9:b6:9e:
         16:59:da:e6:2d:e0:a7:37:56:06:87:dd:08:93:09:81:24:6b:
         65:6d:31:0e:86:38:50:73:ee:b1:4e:f1:e3:21:17:75:dd:c4:
         9b:48:ec:c1:1e:76:b4:ac:f5:62:35:62:dd:52:03:f1:01:eb:
         b8:d9:9d:87:7e:83:df:f3:99:cf:a5:81:b9:cb:db:f5:07:10:
         4a:8e:5d:97:ce:97:84:2e:64:8b:17:0b:ab:c3:60:23:03:45:
         81:aa:a8:2d:8b:f3:4f:68:a0:04:fc:24:e6:25:de:79:be:f1:
         e6:35:ab:6e:0e:07:1f:88:2d:1d:2c:75:71:b4:c4:3a:ec:a4:
         b7:de:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:23:38 2026 by rpki-client