Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File:                     Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier:          gegqBI+evbZZH6T1AC+3P1QVIfInUayGYLTg/kxJp0o=
Subject key identifier:   FC:B2:BC:FD:F6:74:D5:09:1C:37:38:C5:7F:3F:6A:7A:D3:96:EA:58
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer:       /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial:       019FCF70898C07ED9A0E0333440F088587DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number:          19ED
Signing time:             Wed 05 Aug 2026 01:01:26 +0000
Manifest this update:     Wed 05 Aug 2026 01:01:26 +0000
Manifest next update:     Thu 06 Aug 2026 01:01:26 +0000
Files and hashes:         1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: qVxgVIHjCS3mn/a3NXs4eWV/NyFR614/kvcJeh9W+8M=)
                          2: Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa (hash: 9OXjDqXqUBHg5Xmpj9SZ8E0O+G30jS5FTAp/zLKlpOg=)
                          3: bn5DIEB7h417zigDbxPNaTfKJVE.roa (hash: 1UP3MaF3B8GgUJNYJAJfcEuya7S1x4U9A8CMZh0i1KQ=)
                          4: cyOHDX6p-R7TeKl3AMCjyWmNpk4.roa (hash: W3OD3F+yUOacAe6j9rvFirA6hItGmVMl9cfQaStd7go=)
                          5: nqDs6IBSsGkgCywT3ZE4Bi2t0zg.roa (hash: jSua4IrdLnQ0ENUU/6d8+tEc1mSQ1r36KeH+Mj/aKtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 01:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cf:70:89:8c:07:ed:9a:0e:03:33:44:0f:08:85:87:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
        Validity
            Not Before: Aug  5 01:01:26 2026 GMT
            Not After : Aug  6 01:01:26 2026 GMT
        Subject: CN=fcb2bcfdf674d5091c3738c57f3f6a7ad396ea58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:5a:41:01:a2:5f:e9:b3:e6:d8:20:be:9d:
                    83:96:87:bc:49:c5:92:3a:0f:6c:98:bf:1d:ff:8e:
                    7e:4f:ef:1f:0c:3c:c6:83:68:a2:c9:73:66:c0:0d:
                    e7:9b:00:1d:67:57:4a:b3:f9:9b:96:99:15:f1:b3:
                    c7:f0:ad:8a:35:e5:ce:4a:e0:fd:f2:27:4c:cd:64:
                    d1:96:45:d1:a8:4c:dc:b8:98:83:6e:0e:31:48:1b:
                    0f:a0:34:34:a6:9c:dd:29:05:35:fc:d6:ba:f7:05:
                    d0:b1:7c:8e:68:a5:c1:7e:0d:49:de:10:61:e8:6d:
                    8e:f4:74:56:14:45:31:de:1a:56:33:54:16:0d:16:
                    09:99:04:b4:56:11:58:c6:ac:a6:f7:df:f2:5d:1d:
                    88:3e:22:5a:0f:bf:04:c7:42:9a:37:98:20:dc:07:
                    02:8e:1c:af:2e:aa:67:f6:ee:57:4f:d0:b7:5f:38:
                    ec:fc:46:0c:00:c7:d9:17:bb:78:67:12:73:c7:87:
                    e0:5a:84:e0:f5:4c:68:62:b0:c3:f3:e3:97:19:9a:
                    5f:e1:7f:53:77:e4:bf:af:b2:a7:5d:a6:8c:26:97:
                    23:b7:bb:56:38:dc:34:f3:9c:55:be:30:5b:9f:01:
                    70:9f:16:8a:8e:56:0f:0d:3b:ba:d7:86:21:5c:a1:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B2:BC:FD:F6:74:D5:09:1C:37:38:C5:7F:3F:6A:7A:D3:96:EA:58
            X509v3 Authority Key Identifier:
                keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:d5:83:9e:f4:50:d6:c6:59:6b:3f:a3:8d:7f:2d:74:49:
         fd:ce:36:6a:cf:06:10:19:86:c0:c4:88:c8:49:5c:e2:31:29:
         f5:26:ea:f9:a8:d7:52:76:29:5a:8f:3c:59:dd:89:b8:34:df:
         95:ad:59:d6:4c:4d:53:69:8e:6f:f0:a5:dc:44:c5:b8:fd:9d:
         42:9a:fa:8c:ad:ff:44:16:ad:3e:7b:98:0f:25:e2:2e:64:5e:
         e8:7d:aa:cb:49:a3:e7:82:a3:d7:1d:90:3e:12:db:ba:89:1e:
         70:7f:66:fe:68:97:e7:68:27:5c:72:d3:2e:36:cd:d9:00:1d:
         bf:20:8b:63:d4:ff:05:cb:a4:e6:79:48:8b:74:ac:e3:33:19:
         e6:14:0f:ed:78:6f:28:89:07:bf:90:00:c9:a5:db:2a:b2:c7:
         92:0f:a5:bd:e2:89:38:d7:d0:d9:c4:45:8a:0b:ab:45:ed:f0:
         70:42:70:37:ab:3f:ca:11:32:5d:59:4e:58:ef:51:05:e6:e6:
         58:11:1c:bf:fc:a8:08:f5:a8:97:db:62:84:1d:24:86:56:fc:
         82:bb:99:fa:3c:62:74:b3:b8:d6:87:a1:95:8b:ac:8e:f8:06:
         82:03:0e:fc:38:93:50:36:1c:88:38:d1:7a:d8:89:28:b8:74:
         dc:75:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 11:35:28 2026 by rpki-client