Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File:                     2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier:          86jfwUaJNLNwUboaWNN05N+lmsf7Y4AabpjrRyaIqEo=
Subject key identifier:   75:71:1F:C4:A5:B5:6B:2F:4C:4B:7B:1B:15:79:C1:1B:D4:F5:B1:F0
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer:       /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial:       01A0016F9442DBBCCAB3927609CEFFEF097F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number:          19FF
Signing time:             Fri 14 Aug 2026 18:01:24 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:24 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:24 +0000
Files and hashes:         1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: nDXFVZAev6dfLspyvPlahqwsRVyiYteRKiCie7hbH6s=)
                          2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:94:42:db:bc:ca:b3:92:76:09:ce:ff:ef:09:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
        Validity
            Not Before: Aug 14 18:01:24 2026 GMT
            Not After : Aug 15 18:01:24 2026 GMT
        Subject: CN=75711fc4a5b56b2f4c4b7b1b1579c11bd4f5b1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d0:20:54:dc:be:03:86:3e:dd:d5:9e:22:99:
                    83:7c:c2:81:bb:b8:a2:2a:25:da:35:55:a8:3b:9a:
                    fc:57:84:7d:63:4b:69:08:16:38:e2:da:4c:76:f4:
                    2e:18:c7:a3:dc:93:47:09:b4:9c:ce:33:8c:9c:21:
                    58:03:86:b3:a6:d2:d0:ce:e0:3f:a1:e3:21:74:92:
                    f0:30:13:82:63:bc:76:a0:53:3a:12:86:49:1b:da:
                    9a:ea:20:6a:31:31:8f:48:f4:e2:e0:62:8a:fd:ed:
                    c4:ef:81:e9:6f:f5:42:58:51:2c:88:2a:85:d6:fa:
                    40:e2:f6:d7:22:03:24:79:0a:e9:3b:8b:b2:30:0b:
                    b3:4e:c8:b8:2e:0d:28:19:f2:81:6a:35:01:9a:b9:
                    5e:b4:5d:8a:90:f7:1a:13:2c:96:06:d3:21:17:69:
                    60:59:23:c6:95:62:4e:67:af:1c:68:11:7b:79:61:
                    1f:01:c1:fc:0c:94:fc:a5:d9:74:f3:8a:ed:3f:26:
                    63:88:44:a0:03:8c:35:c8:dd:9e:52:8e:66:a8:f7:
                    4f:f2:5f:21:1c:12:9c:50:07:e2:bd:2d:a0:ca:e3:
                    0f:8c:01:36:41:f8:d0:bd:d3:09:f1:45:f9:47:f4:
                    86:03:8a:c2:8a:06:ad:3e:21:bc:97:2d:5f:2c:7c:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:71:1F:C4:A5:B5:6B:2F:4C:4B:7B:1B:15:79:C1:1B:D4:F5:B1:F0
            X509v3 Authority Key Identifier:
                keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:75:6b:6c:d9:82:c7:23:bc:3f:29:9b:25:12:e5:bd:fa:51:
         d6:62:2c:1a:85:42:ac:82:04:88:13:79:aa:13:a8:5c:86:8c:
         2f:00:e9:ae:d4:33:41:12:85:c6:b0:38:be:83:74:89:89:dd:
         93:ac:4e:b4:c6:3e:ce:6e:61:d4:24:4c:c9:bd:1d:3a:54:33:
         50:7e:31:21:8f:a3:e1:af:e7:68:70:64:16:ea:5e:80:46:4c:
         7a:88:a6:5d:f3:6c:89:9e:25:09:c3:87:1f:ee:51:a5:6e:07:
         c9:d1:07:9c:71:f5:5b:b2:b6:2f:57:92:a0:2e:87:8d:02:d3:
         81:71:93:6f:a0:f9:d9:bd:e2:8f:f6:e2:a7:23:e2:41:0d:ed:
         1e:0e:67:e7:27:ac:72:f6:cc:7d:f6:ed:21:34:f3:d6:ad:ad:
         79:03:7c:0d:e5:57:5d:e6:1e:c8:3d:90:65:41:ef:e6:55:c5:
         ac:8f:70:bc:48:50:c0:d4:35:ab:6d:e1:cf:24:a9:b2:59:5d:
         67:35:e1:76:a6:09:6a:36:86:90:dd:b7:48:80:d1:09:50:c5:
         40:5c:cd:ee:31:c4:57:11:ae:12:a5:70:8b:76:44:1b:7f:4e:
         70:9f:85:02:80:4d:15:5b:c4:8c:f1:71:c8:99:e9:db:4a:6c:
         17:61:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:08 2026 by rpki-client