Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File:                     8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier:          U/f+ueBKjKtUf7cOhYF2gWJ+M0P+YaaSoEh/QZoqavM=
Subject key identifier:   7C:FA:10:6D:D7:82:FA:34:7B:58:5A:02:4B:B3:F2:D2:27:CE:7B:E1
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer:       /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial:       019F1867628D9DBAF51286C967D21B38F0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number:          1989
Signing time:             Tue 30 Jun 2026 12:00:56 +0000
Manifest this update:     Tue 30 Jun 2026 12:00:56 +0000
Manifest next update:     Wed 01 Jul 2026 12:00:56 +0000
Files and hashes:         1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: dgHaVMkFXDLKvq/h2ZGOxbVmJt4P2fSGcYHEQIHoFlg=)
                          2: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (hash: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:62:8d:9d:ba:f5:12:86:c9:67:d2:1b:38:f0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
        Validity
            Not Before: Jun 30 12:00:56 2026 GMT
            Not After : Jul  1 12:00:56 2026 GMT
        Subject: CN=7cfa106dd782fa347b585a024bb3f2d227ce7be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:da:07:cb:c7:72:82:a8:ff:b2:4b:e5:05:b3:
                    f0:35:1f:f5:88:64:1b:56:26:d8:bc:65:1a:8e:56:
                    79:2a:5f:fd:44:97:e5:ca:9d:e9:f1:86:6d:49:12:
                    a8:4a:6b:6b:fd:3b:fc:b8:ff:4a:a4:96:f9:95:dd:
                    15:00:29:4e:07:92:ad:29:c8:de:a3:e3:2f:1e:b7:
                    23:2b:35:8c:79:42:b9:f5:29:ff:b2:12:05:ad:cf:
                    07:fb:ba:73:92:29:35:93:0d:b9:a5:44:20:c8:33:
                    9d:32:7a:59:00:ff:56:c4:e4:78:af:7c:ea:ac:5f:
                    76:33:14:99:18:45:34:46:25:63:8c:fd:ee:a5:53:
                    2c:35:20:46:7d:55:cf:27:7e:2f:bd:01:4d:da:ac:
                    0f:16:ef:94:6b:d2:ce:39:7a:1e:69:0b:c3:a5:55:
                    ec:1f:4e:0c:50:67:e9:11:23:cc:0e:b8:7a:59:a7:
                    7d:f0:d2:c9:12:ba:77:e1:1f:1d:f1:86:43:9b:4c:
                    74:b2:c7:2f:d7:23:a9:35:fa:47:0a:e7:58:cc:07:
                    94:47:79:ae:58:8e:b5:ff:82:be:5a:72:c0:b1:13:
                    8a:4b:09:37:3a:b8:44:48:0c:1f:76:1a:ce:83:19:
                    5f:ce:de:ba:20:87:e2:54:b5:89:35:53:13:fb:cb:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FA:10:6D:D7:82:FA:34:7B:58:5A:02:4B:B3:F2:D2:27:CE:7B:E1
            X509v3 Authority Key Identifier:
                keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b5:f3:21:0f:d8:c4:a2:b5:61:f1:99:d5:49:e3:dd:90:97:
         5f:89:72:45:52:52:7e:4e:4b:cd:80:38:d7:ff:7b:39:75:ee:
         52:41:63:0e:8b:11:8e:d9:08:66:23:b5:fc:e4:80:bc:a5:27:
         aa:d6:39:2a:9d:5b:2a:cd:f1:22:e2:56:45:56:4e:8d:6b:f9:
         b5:f2:a5:2d:87:52:40:33:a3:9e:0a:15:f3:5f:ab:66:4d:d6:
         f6:65:e1:87:45:6a:c9:cc:f9:f4:75:29:e7:ff:4c:a5:36:9f:
         e8:20:b6:b2:3e:bc:ce:6b:ed:e8:33:42:2a:09:99:0a:ca:0d:
         94:45:c5:2f:c3:78:18:93:4f:d6:72:2f:10:33:a3:a5:1d:4d:
         9b:27:b1:72:0b:a8:75:15:7c:b4:24:20:74:43:3a:58:8e:9e:
         5d:b1:6a:00:67:87:8a:33:0b:35:ab:53:ec:4c:b5:17:9a:96:
         88:97:c0:62:dc:bb:90:61:19:b3:ff:5a:ec:c7:fb:b2:ec:a4:
         98:5c:33:50:ea:62:29:98:e2:83:b3:b1:bb:c6:82:86:51:3d:
         14:6e:c8:32:ee:6e:1b:67:ac:5a:66:ae:2c:92:ea:fd:f4:3c:
         50:59:61:e0:df:1d:07:3c:09:95:8b:ce:ee:fa:34:25:60:f4:
         fa:eb:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:16 2026 by rpki-client