Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft
File:                     2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft (raw, json)
Hash identifier:          dopLTEJ46PlPG7MgzogIv43NEPFbutYCkvBX5V2OG48=
Subject key identifier:   B9:A0:81:1F:77:4C:8D:5B:99:FF:B3:D1:76:3D:73:35:9E:F5:CF:09
Authority key identifier: DB:E6:27:E4:3E:B1:16:23:6C:C7:13:61:5C:E9:13:41:40:71:86:36
Certificate issuer:       /CN=dbe627e43eb116236cc713615ce9134140718636
Certificate serial:       01A0035DFB096E9DAC0F14CA6E9AC36F29F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:01:25 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:25 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:25 +0000
Files and hashes:         1: 2-Yn5D6xFiNsxxNhXOkTQUBxhjY.crl (hash: OIGAdiPfU0T4yleeeeQv//m3FVTjmM+blbMLb4BwTJY=)
                          2: uO7fIJXDVwXmWvYzrLvCvk6vMyw.roa (hash: 7VZi8vf9cTd9cPoBtyXJxKld01rVJ8ydI/MS363lfA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:fb:09:6e:9d:ac:0f:14:ca:6e:9a:c3:6f:29:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe627e43eb116236cc713615ce9134140718636
        Validity
            Not Before: Aug 15 03:01:25 2026 GMT
            Not After : Aug 16 03:01:25 2026 GMT
        Subject: CN=b9a0811f774c8d5b99ffb3d1763d73359ef5cf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:85:87:31:17:51:f3:d0:5b:b5:f8:fd:89:
                    4c:94:8b:a0:71:3e:96:18:f1:0d:4c:e1:7c:48:82:
                    6c:ae:9e:09:cf:4c:2f:0d:11:f2:05:3a:41:81:08:
                    a5:64:bc:4f:b0:b7:35:44:92:e5:a7:6a:f0:6a:ab:
                    b3:ec:ad:97:be:2f:cb:fd:fb:d1:de:dd:58:43:7d:
                    9f:6c:6e:a1:56:79:9b:b2:5e:7f:e7:da:b6:91:98:
                    de:7a:76:79:a7:fe:88:87:8b:0e:5a:7b:fc:0a:19:
                    da:d8:76:71:f4:1d:cc:41:96:7b:26:12:35:c8:b2:
                    2c:24:c5:5a:46:fb:56:7e:ff:9d:6d:59:e4:5a:16:
                    0b:3d:5f:8f:32:94:57:81:29:b9:03:2d:d0:0d:8a:
                    69:9f:cd:7c:f8:16:a2:d3:56:e5:73:5d:9a:ef:35:
                    61:b9:f2:2c:98:f6:d5:49:6a:d6:6d:02:13:c0:52:
                    47:2f:7e:44:e9:bb:74:94:60:41:9e:83:d4:7f:89:
                    ea:1a:c5:fd:62:2b:57:92:51:ce:c5:3a:23:c5:59:
                    6c:5f:6d:06:de:e3:d7:d6:5b:03:ea:ce:2b:51:f2:
                    13:ae:88:19:84:78:ed:ea:74:10:57:48:c6:2d:64:
                    88:19:b0:4a:ad:94:53:74:e9:c0:48:f1:00:26:97:
                    cf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A0:81:1F:77:4C:8D:5B:99:FF:B3:D1:76:3D:73:35:9E:F5:CF:09
            X509v3 Authority Key Identifier:
                keyid:DB:E6:27:E4:3E:B1:16:23:6C:C7:13:61:5C:E9:13:41:40:71:86:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:96:86:88:fe:16:99:35:de:9e:a7:e7:af:30:da:3d:43:f6:
         1f:38:a0:f9:41:64:42:87:4f:c6:52:da:23:48:fb:02:fc:e3:
         ac:dd:79:a7:e2:12:67:a4:38:d2:9c:05:92:73:7c:23:ea:ef:
         30:98:86:65:71:3e:0d:dc:24:e0:56:0a:51:c4:20:03:b4:78:
         92:c6:fb:b7:cd:65:5a:7c:68:3e:3f:14:0a:6c:de:bb:6a:45:
         e6:ed:d5:73:b3:60:ba:3d:8d:d4:57:9a:b2:df:fa:e6:fe:90:
         5c:24:3e:63:b7:89:5b:54:5b:83:16:4f:ed:e4:34:7d:fd:40:
         4a:04:3c:5b:f0:ac:b5:b5:a9:8b:a9:e1:1f:50:74:c0:e6:1b:
         eb:82:ab:9e:d9:80:90:65:9c:52:f1:fb:01:93:82:a1:73:97:
         8e:09:e5:9f:b6:d5:12:19:4b:b0:b6:16:28:79:41:24:04:d9:
         90:be:e0:16:18:0f:63:e9:22:40:22:23:47:26:16:4b:73:a6:
         51:29:d3:be:88:a0:a4:76:85:f1:5e:15:7c:5b:ee:d5:bc:95:
         f9:07:4c:14:4b:6f:26:d2:d0:a8:21:14:43:2d:8f:af:e0:14:
         ce:43:3f:5c:53:70:98:5b:62:92:b4:c4:69:db:66:d2:02:6b:
         d5:59:a9:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXfsJbp2sDxTKbprDbynyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTYyN2U0M2ViMTE2MjM2Y2M3MTM2MTVjZTkxMzQxNDA3
MTg2MzYwHhcNMjYwODE1MDMwMTI1WhcNMjYwODE2MDMwMTI1WjAzMTEwLwYDVQQD
EyhiOWEwODExZjc3NGM4ZDViOTlmZmIzZDE3NjNkNzMzNTllZjVjZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWSFhzEXUfPQW7X4/YlMlIugcT6W
GPENTOF8SIJsrp4Jz0wvDRHyBTpBgQilZLxPsLc1RJLlp2rwaquz7K2Xvi/L/fvR
3t1YQ32fbG6hVnmbsl5/59q2kZjeenZ5p/6Ih4sOWnv8Chna2HZx9B3MQZZ7JhI1
yLIsJMVaRvtWfv+dbVnkWhYLPV+PMpRXgSm5Ay3QDYppn818+Bai01blc12a7zVh
ufIsmPbVSWrWbQITwFJHL35E6bt0lGBBnoPUf4nqGsX9YitXklHOxTojxVlsX20G
3uPX1lsD6s4rUfITrogZhHjt6nQQV0jGLWSIGbBKrZRTdOnASPEAJpfPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmggR93TI1bmf+z0XY9czWe9c8JMB8GA1UdIwQY
MBaAFNvmJ+Q+sRYjbMcTYVzpE0FAcYY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1ZbjVENnhGaU5zeHhOaFhPa1RRVUJ4aGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81N2Q1NjUtODgzYi00OGEyLWE0MjQt
MjczZGI3ZDUzODk4LzEvMi1ZbjVENnhGaU5zeHhOaFhPa1RRVUJ4aGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81N2Q1NjUtODgzYi00OGEyLWE0MjQtMjczZGI3ZDUzODk4
LzEvMi1ZbjVENnhGaU5zeHhOaFhPa1RRVUJ4aGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZaGiP4W
mTXenqfnrzDaPUP2Hzig+UFkQodPxlLaI0j7AvzjrN15p+ISZ6Q40pwFknN8I+rv
MJiGZXE+Ddwk4FYKUcQgA7R4ksb7t81lWnxoPj8UCmzeu2pF5u3Vc7Nguj2N1Fea
st/65v6QXCQ+Y7eJW1RbgxZP7eQ0ff1ASgQ8W/CstbWpi6nhH1B0wOYb64KrntmA
kGWcUvH7AZOCoXOXjgnln7bVEhlLsLYWKHlBJATZkL7gFhgPY+kiQCIjRyYWS3Om
USnTvoigpHaF8V4VfFvu1byV+QdMFEtvJtLQqCEUQy2Pr+AUzkM/XFNwmFtikrTE
adtm0gJr1Vmp0g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:38:48 2026 by rpki-client