Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File:                     2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier:          Ty65/o8W+rNMqt28I9h2xbwgrV2h3b2qjWrk8ElvaKY=
Subject key identifier:   9F:B3:02:A1:84:3B:34:E7:58:28:9A:37:98:43:B8:4D:31:0D:41:2F
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer:       /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial:       01A000930DC092BDCCB58FAFDCE25C424081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number:          1A06
Signing time:             Fri 14 Aug 2026 14:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:32 +0000
Files and hashes:         1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: D3vZzJ2Q6oNQnlLdXV9HxupKfGSf0n2k6EBg8XfTT58=)
                          2: VRM68-t0d2B_sDj4bZe3I-YSGiQ.roa (hash: kyHIvFWkdubKP45nhTZVtmGDoRj39kZ1HhwdWsoGzIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:0d:c0:92:bd:cc:b5:8f:af:dc:e2:5c:42:40:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
        Validity
            Not Before: Aug 14 14:00:32 2026 GMT
            Not After : Aug 15 14:00:32 2026 GMT
        Subject: CN=9fb302a1843b34e758289a379843b84d310d412f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ba:62:e8:ad:e7:72:89:70:6f:76:ff:a5:e8:
                    d6:d3:0f:41:93:9b:d1:8c:23:4d:09:c4:4e:48:6b:
                    52:36:ee:db:f1:0c:0b:17:22:02:f1:84:8e:b5:23:
                    df:cf:0b:5c:b9:95:bc:30:2b:0f:86:4b:ea:9e:c4:
                    70:7e:79:0f:ff:4a:6b:ff:6b:95:c8:5f:72:57:b4:
                    5e:7e:5c:95:d1:7c:bf:bf:f6:8e:49:16:1a:dc:44:
                    e6:db:c9:6f:80:ff:7c:e7:38:d5:6d:7f:ae:32:79:
                    5d:9f:95:c5:01:8a:6d:17:cc:3e:22:9e:22:3f:3d:
                    8d:0f:de:3d:0a:9a:1a:0f:02:8a:d6:ab:5c:f8:7b:
                    a3:18:80:d1:04:c9:98:0c:ff:df:92:bd:1d:4f:87:
                    61:4f:45:53:f3:a2:fd:83:99:ca:45:55:0b:9a:14:
                    86:7e:ff:7f:c0:da:d8:5a:10:0f:7d:e3:69:8a:b8:
                    80:24:23:a3:f3:df:4e:dd:17:82:33:26:78:67:45:
                    6c:4f:6e:5e:f0:09:a6:10:84:a4:6b:9a:15:b1:54:
                    b0:56:0d:0b:73:4c:13:c2:6c:13:61:4c:15:96:6b:
                    b9:85:75:04:6f:d9:55:f9:a3:d9:c8:7b:ca:5d:19:
                    99:d8:8c:8c:36:86:47:62:1a:81:6c:23:61:88:c1:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B3:02:A1:84:3B:34:E7:58:28:9A:37:98:43:B8:4D:31:0D:41:2F
            X509v3 Authority Key Identifier:
                keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5e:e4:00:57:1b:29:a5:86:6c:0f:76:c2:fa:1b:e1:60:10:
         54:f8:a1:1f:cf:a7:3a:5b:7b:90:e8:51:65:d0:cb:7c:9e:3b:
         56:2d:31:f4:e6:5d:76:b0:bf:f7:3a:87:b1:d0:ae:9f:0f:d9:
         8b:cb:5b:a4:b8:8b:0b:70:ff:53:f5:f4:e8:9f:06:d2:dd:6a:
         2d:43:54:b3:d5:57:8d:68:82:65:26:0a:94:41:37:ed:9b:e6:
         37:68:63:ba:70:4e:c3:2d:89:72:3a:cf:00:11:69:1d:1d:15:
         34:a1:99:ad:6a:90:45:35:fa:c0:b1:04:73:6b:02:68:a3:ba:
         b2:00:51:76:fd:54:61:e7:90:26:18:cb:8b:5f:c0:eb:45:c5:
         08:aa:35:d8:78:f1:9d:cf:15:25:37:c1:a1:6d:57:9a:81:8b:
         fe:0b:08:23:1e:33:33:3d:fb:8b:be:92:4a:e3:b2:a6:f2:47:
         70:25:f8:0d:ae:00:62:ff:61:5b:e3:d6:65:ca:10:fd:ec:93:
         1c:54:c5:34:44:28:db:ee:b0:65:6b:aa:e7:35:7e:77:f0:6d:
         78:71:9c:7d:e7:2b:88:21:c0:83:06:e7:af:63:46:62:7c:63:
         5c:e6:d3:55:20:f3:4c:08:ce:21:21:ed:b9:8c:81:12:20:b1:
         c5:ea:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:34 2026 by rpki-client