Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File:                     2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier:          9Cx0BMbJ3ECgyeIpi8WYwEPnIt7LSt5QtK2Edb9BwoY=
Subject key identifier:   D7:B7:A1:51:36:55:A7:A2:C6:13:C7:E8:B2:D1:EA:28:1A:F0:3E:3F
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer:       /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial:       01A00101A2680C08309A672550C87C8628C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number:          17D5
Signing time:             Fri 14 Aug 2026 16:01:19 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:19 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:19 +0000
Files and hashes:         1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: GGcrNnTWR0ALdPjU2uhUSByb47US/X/roXfDWZGqwuU=)
                          2: jdHMVRkeTn1Nth9vlUo9BvR2wng.roa (hash: AAK6SfAISoxobwueyJaaBYkoMj4IspGZGMaQBhwb7VE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:a2:68:0c:08:30:9a:67:25:50:c8:7c:86:28:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
        Validity
            Not Before: Aug 14 16:01:19 2026 GMT
            Not After : Aug 15 16:01:19 2026 GMT
        Subject: CN=d7b7a1513655a7a2c613c7e8b2d1ea281af03e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:2d:e1:79:35:23:55:2e:54:52:17:c6:0d:
                    b2:3f:30:c4:d6:ab:ea:7f:d0:ab:5c:2c:a7:65:91:
                    4e:3b:f9:96:68:1d:83:16:a8:cd:a2:db:0a:c9:f3:
                    78:35:53:24:6f:85:48:ff:b0:83:fa:0e:1b:8d:40:
                    c5:5d:53:8d:67:16:02:58:c4:ef:0c:c2:e1:29:00:
                    cc:9d:bb:0e:81:34:25:6d:07:48:a8:17:03:62:ce:
                    21:d0:9f:d3:43:76:b7:f1:90:13:42:4c:99:5f:9e:
                    0f:76:aa:aa:d9:40:f7:02:6d:6d:9e:eb:e3:ca:cd:
                    d3:61:1f:34:72:d3:d0:14:49:63:ea:a3:9b:2f:52:
                    87:1f:e8:62:bf:38:88:b7:25:65:90:4e:77:f5:18:
                    e7:5a:1a:45:ef:87:a0:b7:4d:74:85:f3:6b:0e:40:
                    b0:db:bf:6d:d9:81:b3:44:24:03:57:dc:ae:a5:98:
                    3a:c8:f8:f5:af:64:18:65:0d:06:66:a9:39:4e:bc:
                    60:b7:e9:26:d1:58:2e:e1:13:80:42:93:91:1f:96:
                    4d:c5:dc:b1:7b:25:e4:68:f0:d5:c7:96:1f:fa:c9:
                    59:a2:b2:6b:58:bb:9e:7a:89:c6:41:35:6e:34:9f:
                    21:fc:06:ce:5d:16:90:a5:bb:53:67:4d:17:cf:6e:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B7:A1:51:36:55:A7:A2:C6:13:C7:E8:B2:D1:EA:28:1A:F0:3E:3F
            X509v3 Authority Key Identifier:
                keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3e:b5:8d:f3:4e:dc:bd:dc:00:b0:ba:d0:c0:e7:d9:5e:9b:
         36:c2:64:25:e2:3f:1c:0e:42:05:03:fe:95:d4:11:a3:a6:49:
         59:dc:bb:ee:1a:92:49:01:7f:8d:ed:ad:75:c4:29:cc:cf:a7:
         e6:cc:3c:c8:ac:49:d4:1c:df:5d:2a:ec:ed:68:0c:83:30:2c:
         c4:f0:60:78:43:b9:33:0f:db:43:c5:d3:f0:cd:a0:5a:6a:2b:
         99:52:6d:1d:b7:19:87:0f:50:6a:25:a4:85:0b:96:f6:d5:7f:
         82:45:0e:6b:38:ea:45:92:cf:e3:cf:06:12:58:76:c1:3f:25:
         81:d0:53:c2:c7:73:45:e5:27:ea:00:8b:3d:5d:36:22:8a:b3:
         0c:30:b4:0e:7b:3a:fa:8c:3b:1c:9b:0d:d9:c8:cf:32:b9:b6:
         19:5b:3b:e0:4c:b2:06:ad:54:08:12:34:ea:49:17:c5:e8:42:
         6a:cc:6a:e0:18:ea:bc:91:e6:2a:3d:c2:66:7f:fb:49:7c:45:
         36:2c:93:72:66:6a:82:48:11:33:66:5a:df:df:2c:d9:92:3c:
         57:24:71:ac:71:0c:08:fb:d2:dc:83:d7:f4:b4:37:96:11:50:
         22:ba:88:0d:74:54:0f:7f:39:5f:2a:08:9d:8c:0a:55:ce:fe:
         52:ca:57:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAaJoDAgwmmclUMh8hijDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDM4OWQ4NWVhMTI2ZTBlZmJlYmM1ZDg0NTllZjcwOWZi
ODk1Y2IwHhcNMjYwODE0MTYwMTE5WhcNMjYwODE1MTYwMTE5WjAzMTEwLwYDVQQD
EyhkN2I3YTE1MTM2NTVhN2EyYzYxM2M3ZThiMmQxZWEyODFhZjAzZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gYt4Xk1I1UuVFIXxg2yPzDE1qvq
f9CrXCynZZFOO/mWaB2DFqjNotsKyfN4NVMkb4VI/7CD+g4bjUDFXVONZxYCWMTv
DMLhKQDMnbsOgTQlbQdIqBcDYs4h0J/TQ3a38ZATQkyZX54Pdqqq2UD3Am1tnuvj
ys3TYR80ctPQFElj6qObL1KHH+hivziItyVlkE539RjnWhpF74egt010hfNrDkCw
279t2YGzRCQDV9yupZg6yPj1r2QYZQ0GZqk5Trxgt+km0Vgu4ROAQpORH5ZNxdyx
eyXkaPDVx5Yf+slZorJrWLueeonGQTVuNJ8h/AbOXRaQpbtTZ00Xz24BJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe3oVE2VaeixhPH6LLR6iga8D4/MB8GA1UdIwQY
MBaAFNoDidheoSbg7768XYRZ73CfuJXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQt
ZWE2MTM0NzA2YTQwLzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQtZWE2MTM0NzA2YTQw
LzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD61jfNO
3L3cALC60MDn2V6bNsJkJeI/HA5CBQP+ldQRo6ZJWdy77hqSSQF/je2tdcQpzM+n
5sw8yKxJ1BzfXSrs7WgMgzAsxPBgeEO5Mw/bQ8XT8M2gWmormVJtHbcZhw9QaiWk
hQuW9tV/gkUOazjqRZLP488GElh2wT8lgdBTwsdzReUn6gCLPV02IoqzDDC0Dns6
+ow7HJsN2cjPMrm2GVs74EyyBq1UCBI06kkXxehCasxq4BjqvJHmKj3CZn/7SXxF
NiyTcmZqgkgRM2Za398s2ZI8VyRxrHEMCPvS3IPX9LQ3lhFQIrqIDXRUD385XyoI
nYwKVc7+UspXqA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:23:43 2026 by rpki-client