Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File:                     2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier:          TTn6plePsj5tNdOX3hk1O9Rlj9znA/qU7yBk4CookJM=
Subject key identifier:   92:D7:C7:1E:77:7A:CF:C5:BC:05:58:5B:84:0B:25:08:F7:EF:D4:18
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer:       /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial:       019F860CEDE2FE3EF3E6F5E8A6E11B21F808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number:          19C9
Signing time:             Tue 21 Jul 2026 19:00:22 +0000
Manifest this update:     Tue 21 Jul 2026 19:00:22 +0000
Manifest next update:     Wed 22 Jul 2026 19:00:22 +0000
Files and hashes:         1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=)
                          2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: IkizLREhrj9cdotM0HAianGtsnGqEQ14+LlD0/3GJoo=)
                          3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=)
                          4: MGhj0X-R9sE8_bxGpuMofPiVOac.asa (hash: DvQwv9R87PLKWjVN3/wl/o55noyjeNHEbII9CUCtA+0=)
                          5: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=)
                          6: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=)
                          7: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=)
                          8: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=)
                          9: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=)
                          10: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:0c:ed:e2:fe:3e:f3:e6:f5:e8:a6:e1:1b:21:f8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
        Validity
            Not Before: Jul 21 19:00:22 2026 GMT
            Not After : Jul 22 19:00:22 2026 GMT
        Subject: CN=92d7c71e777acfc5bc05585b840b2508f7efd418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:5a:3e:d1:78:8d:b1:32:03:bc:ab:81:bc:
                    b3:d7:70:2d:12:f7:e4:18:b9:f7:be:6e:cd:00:af:
                    37:14:74:1b:b6:95:47:ed:14:cb:56:df:83:8e:f2:
                    8d:f8:f7:70:b7:c2:4a:2a:19:dc:91:32:25:a4:d9:
                    bd:1e:a3:86:ce:83:ef:e5:6f:7a:44:cf:a6:f2:1e:
                    0e:23:fa:72:2d:fd:04:8f:d5:98:8e:9b:ac:7f:42:
                    0e:38:6e:73:4d:c4:3f:77:d4:90:90:a0:d7:9e:ea:
                    20:72:fb:fd:72:c8:a7:41:ad:7f:a2:22:1d:19:3d:
                    b1:52:f6:f4:60:c5:55:ff:70:fb:a0:96:4d:00:10:
                    a1:e5:f3:c7:5e:3e:a5:c5:98:87:ed:0a:b3:b3:49:
                    5b:89:bb:3b:4e:c3:0b:ed:4c:94:1d:52:e5:dc:25:
                    28:fb:6c:70:43:99:aa:a2:80:e2:dd:7f:05:04:9d:
                    52:7f:74:1e:8e:12:20:0b:75:70:31:91:1e:2e:87:
                    e6:36:d5:c0:92:7c:e0:e8:3d:06:46:95:3b:e1:f9:
                    fd:4d:0c:23:9c:79:ba:ea:3e:14:a3:59:06:75:69:
                    dd:89:38:f9:31:ac:aa:48:4a:f6:e0:e2:d5:b7:dc:
                    9d:d5:5d:b4:6e:5c:b4:0c:77:ea:c3:08:f8:61:c8:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D7:C7:1E:77:7A:CF:C5:BC:05:58:5B:84:0B:25:08:F7:EF:D4:18
            X509v3 Authority Key Identifier:
                keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:33:93:0b:63:f8:8b:7c:6c:7a:dd:3d:9f:b9:55:ac:6c:d0:
         a4:5b:f2:c4:9e:d1:a3:56:8d:c9:5c:cd:90:ef:f7:d1:bd:c9:
         08:ec:13:21:96:20:a8:0d:ed:e0:f8:c1:48:3f:f0:3f:f6:26:
         4b:27:e9:81:89:c7:07:45:c6:6e:2b:a5:2d:c0:7c:72:c0:40:
         cf:21:be:67:33:44:cd:87:c2:1f:79:76:ab:3a:70:1d:02:65:
         22:6e:46:08:62:bb:09:95:6e:ca:61:d9:9a:8e:2a:59:d5:12:
         30:d0:73:b3:ae:13:93:d2:be:9a:15:32:aa:3b:be:06:d3:a4:
         2b:27:52:a5:d5:e3:74:52:25:a3:8a:e6:e2:17:99:65:90:1f:
         ce:01:15:34:b0:51:b1:4b:8b:b2:fc:00:4b:b9:e5:c1:2b:b8:
         b5:52:ca:83:aa:36:30:cf:8f:e8:28:07:11:df:b4:ff:76:bd:
         40:f4:81:92:3d:cb:bd:dd:dc:b2:b9:04:d5:71:71:54:02:fe:
         ca:5f:b5:3b:8e:9e:af:5a:e2:65:81:55:bc:8f:89:d1:60:f8:
         8f:ed:23:60:b1:33:f0:24:77:ea:21:bf:10:ab:2c:cb:43:a2:
         ed:14:69:2b:05:32:0f:9e:da:25:cc:89:ac:99:19:09:55:86:
         02:6b:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:22:55 2026 by rpki-client