Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File:                     2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier:          Hf3CM+jezhb13H5zMOSINCE1Wg8+81u3k4jr2KoCcP8=
Subject key identifier:   A1:22:FB:8E:78:E7:8E:8F:BF:C4:0F:8D:1C:9B:7F:F6:DB:3D:AC:C8
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer:       /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial:       019F18681A62793CDFFBFE4506D27FAF1729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 12:01:43 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:43 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:43 +0000
Files and hashes:         1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: X9UGAI/l8TdIU7v8ecYuELAhHdm3OCL+/vvDjW6JavQ=)
                          2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
                          3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:68:1a:62:79:3c:df:fb:fe:45:06:d2:7f:af:17:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
        Validity
            Not Before: Jun 30 12:01:43 2026 GMT
            Not After : Jul  1 12:01:43 2026 GMT
        Subject: CN=a122fb8e78e78e8fbfc40f8d1c9b7ff6db3dacc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:67:9c:29:f3:df:ca:90:d5:4f:c6:fe:6f:
                    99:b4:37:71:91:2d:e4:00:45:a9:65:24:be:fd:0d:
                    9c:2f:9e:fb:8e:19:ac:14:46:a2:6d:54:19:48:f4:
                    90:00:8b:ab:11:92:8b:a7:9b:44:1f:d3:73:56:24:
                    26:bb:c7:86:a4:98:5a:06:bf:26:f2:5a:07:61:26:
                    5d:c7:44:e9:46:c6:9b:c3:7e:c5:a5:b0:6e:8f:12:
                    20:47:a0:72:d8:94:01:15:74:2a:5e:32:44:7b:4d:
                    ac:56:8a:d2:28:7b:93:cc:a4:c5:3c:6a:8e:6c:7f:
                    64:65:ea:c8:e9:d5:08:96:6c:d6:b6:af:f1:b4:d2:
                    31:b5:3b:fc:51:f1:d9:ff:a2:6c:93:6c:ee:33:f5:
                    cb:bc:12:0c:7b:3e:99:bc:86:b3:6d:ba:d1:3e:ac:
                    02:29:13:bf:ee:e3:22:d3:f0:6e:3a:10:b8:04:d7:
                    b7:7e:d2:d0:bd:f4:e4:37:d3:36:1a:ee:03:12:85:
                    e0:cc:76:9e:6e:13:29:f6:49:28:70:33:ba:0d:94:
                    eb:92:7a:af:86:9e:58:0f:2c:f7:f6:82:9d:55:bc:
                    75:08:7a:7d:db:8e:87:67:f3:3d:76:c3:5c:da:ef:
                    85:64:bb:6f:8b:e2:7f:20:2c:fd:27:ab:b8:ea:0b:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:22:FB:8E:78:E7:8E:8F:BF:C4:0F:8D:1C:9B:7F:F6:DB:3D:AC:C8
            X509v3 Authority Key Identifier:
                keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:4e:57:3d:c0:f4:7d:1a:f9:c2:ee:eb:d7:23:a0:86:4e:
         5d:6d:1c:e3:dc:04:c3:15:c7:72:49:d5:41:fb:86:7d:e0:67:
         fd:f8:92:c2:05:bd:81:5a:74:97:8e:4c:de:a7:58:4c:d8:15:
         c7:81:2a:17:57:09:64:f7:18:d8:d9:11:1c:52:7d:d0:af:c4:
         80:0c:e3:04:1f:94:b0:56:9d:bc:0a:52:ff:ef:1f:b8:8f:61:
         2f:5c:9a:a9:6e:cd:df:5a:9e:91:ee:59:5a:ce:a0:85:8e:21:
         f1:2f:32:c0:39:ca:21:11:8a:8e:82:51:ce:02:f1:9a:a1:1c:
         f1:d0:14:51:90:d0:a4:eb:c6:f6:0d:d0:4d:4b:c8:11:fc:f6:
         98:0e:a5:b1:8b:04:1f:5d:26:83:e2:fb:6d:15:05:45:2b:5d:
         9a:0a:5d:70:67:8d:b1:a4:f9:28:5d:10:66:2d:d5:44:ea:34:
         7c:a8:7f:32:7b:40:35:6f:0a:e0:ab:f0:ef:1f:fe:24:6e:19:
         a5:66:45:33:e4:d0:53:62:b3:30:35:e7:1f:a9:5a:16:b7:b5:
         3c:bd:d7:c4:6c:86:5f:8e:44:3b:7c:2d:c7:7f:5b:88:89:08:
         9b:7d:f1:ca:85:48:4f:fa:fd:68:a2:52:2e:1c:92:82:ab:c5:
         ce:f0:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:29 2026 by rpki-client