Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File:                     2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier:          co56aD3twpnKRNgzLDo9X7BAEaK22DWB+0RpMGbUMGY=
Subject key identifier:   57:69:0E:BB:7F:C7:DC:84:FA:A5:91:4A:27:BC:69:D5:0D:92:6E:98
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer:       /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial:       019F84C43560C7B4B072A51FDA5AB2233A4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number:          0ECC
Signing time:             Tue 21 Jul 2026 13:01:18 +0000
Manifest this update:     Tue 21 Jul 2026 13:01:18 +0000
Manifest next update:     Wed 22 Jul 2026 13:01:18 +0000
Files and hashes:         1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: i47TLvgVK3DIxqN/1Z55OPo4mUf/JNtgTBXjMtn8URg=)
                          2: KgUafpKLQn167LugL8OB7NIxPBY.roa (hash: UwTKLcOOmGr1M5MqovXzfh3IyeeIlKdI89ngxjztStc=)
                          3: MFAY7_OLyA4recGDb-cluDo0Fy4.roa (hash: gbxISH9PotemB1t2Fhr1XbKqizGCUJkHo7eezE3JciE=)
                          4: cP1lvMExnryf8cpW14P-YTW6oFM.roa (hash: 1i/eVOAe4LzQ+ZGAHO4PSAx1yAI1zK27WYnYn0/9SC0=)
                          5: zJpyyxzxDhN7qqdh0Mt-W4R9xhQ.roa (hash: 3iXjS3NRkOtuiwihRC5inSlg4bzXZF2ihzUz1KnKcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c4:35:60:c7:b4:b0:72:a5:1f:da:5a:b2:23:3a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
        Validity
            Not Before: Jul 21 13:01:18 2026 GMT
            Not After : Jul 22 13:01:18 2026 GMT
        Subject: CN=57690ebb7fc7dc84faa5914a27bc69d50d926e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:22:86:c2:3d:84:f9:69:d0:cd:e3:38:2a:
                    0f:7c:38:6a:b8:30:7a:67:60:fb:e3:26:8c:f4:d5:
                    0c:7e:af:28:43:f5:c1:a3:a8:71:3a:94:01:13:5a:
                    43:51:29:c3:f7:4d:93:06:7e:0e:58:ce:28:34:da:
                    8c:08:5a:55:97:f2:b4:e5:7c:29:ee:b7:40:ea:5b:
                    9b:eb:87:77:48:f9:af:b6:64:f4:6b:d2:64:90:37:
                    ba:a2:32:86:e8:c1:5c:31:cb:2c:da:c6:6a:5b:24:
                    58:dd:d5:64:40:25:b4:7f:90:55:0a:f4:21:b9:61:
                    55:a5:d6:2d:fd:c2:ea:63:b7:8a:19:d9:7e:40:14:
                    fe:1d:04:d5:28:a7:c0:56:c0:c6:8e:25:f5:af:1f:
                    bc:9e:42:e6:cf:cd:53:d6:11:7e:81:a8:ff:8d:3a:
                    96:df:bd:82:9e:75:6d:81:7d:36:4e:0f:87:52:60:
                    72:1a:d9:14:9e:ea:ec:a0:4d:a3:d5:19:db:6e:4a:
                    36:78:f0:09:c8:0e:ce:08:8d:b3:de:2c:bd:6b:58:
                    4a:3a:89:b7:ba:dd:46:06:79:f2:a1:3a:0e:1c:ab:
                    f0:89:7e:aa:d7:7a:5b:d1:70:9c:59:c7:1d:ad:98:
                    9a:3a:10:89:af:54:76:8c:5b:47:b4:53:b9:72:1f:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:0E:BB:7F:C7:DC:84:FA:A5:91:4A:27:BC:69:D5:0D:92:6E:98
            X509v3 Authority Key Identifier:
                keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:47:a2:3c:e4:65:0e:3c:06:0b:6e:84:94:59:95:23:35:e5:
         85:8b:4d:39:07:5d:33:f5:58:e9:20:f6:02:52:41:26:9a:9e:
         22:09:ce:63:73:3f:a6:ed:e3:d6:39:b1:2c:e5:20:4a:5d:64:
         b8:dd:db:27:2c:ed:d0:83:25:32:d0:07:39:25:03:65:8e:08:
         a9:58:9a:9a:b8:5e:ed:60:5a:4c:8b:cd:e1:18:87:90:63:27:
         c0:01:34:7d:48:10:72:7a:9b:5f:61:2a:fb:a6:1c:3e:de:17:
         5b:79:9a:90:3b:34:89:df:f2:61:5b:82:c1:ca:9a:5b:11:1a:
         2b:07:82:e0:79:8b:52:51:9c:20:94:e2:74:5a:fc:52:6c:7e:
         67:08:ed:01:73:57:1f:65:8c:50:7c:43:e6:de:31:38:4f:eb:
         5f:66:76:71:34:35:be:f8:57:dc:03:9b:d3:58:fd:55:1a:61:
         1d:cb:c5:dc:bb:2f:e2:e1:b1:2a:37:12:bd:c3:55:e9:24:58:
         a7:24:1b:d8:76:49:89:ef:8c:5d:12:85:c9:95:6e:9a:03:c6:
         fa:26:d3:0e:75:ea:91:b2:bc:af:04:f0:9f:1d:33:43:b1:68:
         64:a6:7a:89:8b:98:66:37:ee:18:0d:d3:89:96:44:bc:9f:02:
         eb:ee:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:17:23 2026 by rpki-client