Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File:                     2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier:          Wxbc0p++S/dqLlMyyIu72+8Y/l/GFYfCixsBSW3i22k=
Subject key identifier:   81:20:C0:10:3C:94:4E:D9:3D:89:79:48:85:38:81:57:4D:9D:79:5D
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer:       /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial:       01A000C9ED2AD9BB565CA3A4FBAB57F9F62E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number:          11FE
Signing time:             Fri 14 Aug 2026 15:00:28 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:28 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:28 +0000
Files and hashes:         1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: YCmKm5gaImud+DoLXH1ynm8SVvB0W5ijjF0yhuYEVNc=)
                          2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:c9:ed:2a:d9:bb:56:5c:a3:a4:fb:ab:57:f9:f6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
        Validity
            Not Before: Aug 14 15:00:28 2026 GMT
            Not After : Aug 15 15:00:28 2026 GMT
        Subject: CN=8120c0103c944ed93d897948853881574d9d795d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:51:39:61:0b:69:ae:3c:2b:e7:c7:1c:83:
                    4c:43:75:cd:ca:61:b3:12:6d:16:89:95:c2:b9:39:
                    69:4a:cb:08:2e:3c:c9:3e:54:c9:b4:1c:ac:16:b2:
                    78:b6:9f:84:76:80:6f:9b:14:44:3b:79:5a:5a:6c:
                    35:55:53:28:0e:7f:cc:db:d5:70:1d:4e:10:06:fc:
                    16:0b:8c:8a:29:b0:56:99:ab:9f:a2:75:7f:78:06:
                    6a:a4:d2:88:ab:8c:e6:81:65:14:89:f2:d7:da:28:
                    4f:2e:5f:b9:ec:f6:4e:64:bd:0a:10:27:9a:87:89:
                    1a:b2:48:a2:39:64:0f:ae:52:2d:7b:6f:f5:5d:1b:
                    3b:f3:27:41:40:a5:f3:5d:dc:e5:13:97:cb:99:fd:
                    bd:3f:5f:54:1b:3a:c1:f3:23:46:41:ba:0d:1a:51:
                    5e:ff:67:82:59:41:fb:e2:a2:24:23:8e:e1:ec:02:
                    c1:99:dd:b3:18:8d:e9:98:76:35:da:25:1b:30:09:
                    94:ce:eb:51:bb:2d:12:3a:a1:03:4d:9a:1b:86:0b:
                    0a:21:2a:c4:9b:95:60:89:04:b8:cb:47:47:52:31:
                    df:58:59:92:ab:6e:41:5f:79:ca:16:0d:61:dc:5f:
                    32:5c:c1:c0:e1:80:11:df:e5:30:b0:45:2f:b7:f2:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:20:C0:10:3C:94:4E:D9:3D:89:79:48:85:38:81:57:4D:9D:79:5D
            X509v3 Authority Key Identifier:
                keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1d:5b:33:c0:f7:6e:f8:60:64:44:fd:4c:3c:ce:68:df:b8:
         50:38:7a:80:fd:1e:ca:f9:4c:71:30:fd:7a:b5:57:9c:27:4d:
         cb:c1:cb:bd:98:81:a5:2e:7c:9b:9f:d5:a4:45:9f:74:5e:35:
         7d:a9:8b:ca:e9:1f:ba:cd:63:75:0a:6e:70:ba:cd:04:ad:15:
         1f:03:8c:41:dc:00:75:99:21:95:2d:dc:95:01:26:04:e2:3b:
         ee:46:1a:98:44:86:00:bd:a0:f3:b6:61:d4:aa:8a:b7:50:fd:
         d5:8d:2a:47:0a:ef:eb:71:79:bc:83:35:a6:e2:6f:91:bf:d6:
         73:7e:fd:f4:fc:58:53:0f:93:87:ee:0f:e1:26:81:8f:61:17:
         6c:4b:b9:80:a7:c5:90:f3:cb:ce:0c:16:64:f2:af:b4:6b:5b:
         2c:e0:04:1f:44:b0:9a:4b:b5:46:ec:c5:f4:ea:3f:89:2d:11:
         95:35:4c:60:3d:98:dd:8e:90:48:36:45:66:70:ad:71:56:cb:
         fa:7b:a6:19:02:80:9b:85:26:42:08:1e:7f:7c:b4:91:22:d2:
         40:1a:fe:1a:46:1e:6e:6b:5c:75:1d:6b:83:d0:e3:72:76:52:
         cf:b1:c1:3d:a0:da:23:72:8f:60:75:fd:1e:fc:bd:c1:83:b2:
         40:6d:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:04 2026 by rpki-client