Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File:                     2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier:          9pFfZ77jn+uCp40/Gu6vcgKlJ1OGJPpDYLvq67l/C4s=
Subject key identifier:   81:67:6D:1A:75:57:66:31:81:2E:AD:E1:9C:F9:6C:3F:C0:78:4B:65
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer:       /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial:       01A00093198E328F3117A4A25B3200112563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number:          08D6
Signing time:             Fri 14 Aug 2026 14:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:35 +0000
Files and hashes:         1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: t2476AulS9ECeD+Ey0J+VdbTaZIlkVA24/N7VceyKNE=)
                          2: 7BYQ6hjxoI3ozUU8ddmxZjgsC6E.asa (hash: 5jYDiWPOUrluKHP8GqfVHZN4Ahv5ZbbZ6/MfVtJfnr4=)
                          3: U0eXHxUXFfodUlmBaA303-Jbx88.roa (hash: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:19:8e:32:8f:31:17:a4:a2:5b:32:00:11:25:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
        Validity
            Not Before: Aug 14 14:00:35 2026 GMT
            Not After : Aug 15 14:00:35 2026 GMT
        Subject: CN=81676d1a75576631812eade19cf96c3fc0784b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:5c:2e:e8:20:03:3d:0b:09:1c:4a:ba:7a:
                    f8:5e:15:7a:19:d6:ed:54:35:44:96:0e:20:5c:4a:
                    a7:2e:17:70:86:e5:a0:d3:27:7b:a2:19:f3:be:f3:
                    38:89:d3:3d:73:18:1a:70:1a:41:6f:24:21:44:49:
                    0b:eb:8b:3d:0c:eb:79:a2:da:69:a5:63:35:8a:8e:
                    cc:63:f1:a9:59:55:bf:0a:f6:12:cf:2b:82:ec:9b:
                    e9:5f:84:9e:dc:a3:5c:8b:00:57:4a:f8:83:cd:ac:
                    5c:d5:34:fd:e4:a1:3c:6f:78:a1:3e:e3:46:e9:d3:
                    8f:11:d2:47:38:49:ff:f7:50:0c:e2:00:71:58:07:
                    10:54:25:e6:b5:b4:f1:7c:17:ee:35:42:fa:0a:90:
                    53:ac:17:8d:5c:f9:dc:55:b7:f8:d3:58:42:31:97:
                    4a:b8:a3:1e:00:d4:aa:5b:7b:41:08:c3:ed:72:38:
                    94:88:6f:f9:69:28:03:88:32:fd:f1:6f:36:5f:3a:
                    bf:d7:15:45:4b:d8:b7:75:09:95:8d:4c:4e:a3:62:
                    09:18:d3:32:65:48:72:73:dc:6f:9f:7e:b0:b2:2a:
                    bc:af:cf:f3:06:7c:46:40:b0:85:11:48:a8:84:93:
                    2c:78:67:5b:a0:76:fd:17:2e:92:2e:c0:96:b1:79:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:67:6D:1A:75:57:66:31:81:2E:AD:E1:9C:F9:6C:3F:C0:78:4B:65
            X509v3 Authority Key Identifier:
                keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:73:da:fc:c2:52:82:e8:ea:d2:c2:66:8e:8f:ca:ba:9c:45:
         5e:bf:87:45:56:0f:09:88:f4:fe:30:39:a7:a4:93:b9:f8:36:
         ce:b8:82:26:e5:64:8a:4b:fc:61:25:22:ac:d8:68:eb:b9:0e:
         d1:5d:74:c6:71:3e:d5:5a:7c:d7:10:fc:2e:7f:1f:0f:0f:23:
         9f:a4:74:b3:f7:6f:73:cb:19:6f:29:81:d5:d8:a3:9c:a6:7e:
         9b:ad:0c:0f:67:8a:6c:ea:ac:36:dc:0b:a2:37:38:6d:c5:88:
         51:b1:d6:bf:9b:e2:73:68:21:0c:fc:62:10:7f:8c:13:0f:d4:
         9a:ff:1f:ff:c0:b6:c8:33:6c:42:01:4b:af:cb:13:0f:51:98:
         49:23:8d:c5:61:5e:1e:54:ed:ae:a4:08:4c:24:74:b2:e0:6b:
         2f:59:72:34:4d:39:93:e0:5d:d0:39:b4:f3:a7:db:05:d1:2e:
         ef:bd:22:a3:d8:26:3f:a6:30:8e:f7:6f:51:d8:c6:19:72:e8:
         e2:3a:98:dd:2c:a1:c3:33:09:73:df:0c:c0:df:27:d7:c9:81:
         68:ef:a8:fd:91:b7:8c:01:48:ec:c9:bd:a9:fe:35:83:de:5c:
         c8:ca:29:bd:6f:6b:9f:45:b2:1c:aa:17:a2:45:1c:51:e0:25:
         d2:f6:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:08 2026 by rpki-client