Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File:                     ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier:          rI2/565CSfZPbp5YjZF5H1dIBsZUGbBbJfdak5tWDUw=
Subject key identifier:   13:FC:60:B0:EF:1A:BC:8C:E5:1E:99:43:AA:50:F6:7C:E2:E3:41:71
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer:       /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial:       019FC17E00F506E6571420DA0E61FAC5263C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number:          06B2
Signing time:             Sun 02 Aug 2026 08:01:28 +0000
Manifest this update:     Sun 02 Aug 2026 08:01:28 +0000
Manifest next update:     Mon 03 Aug 2026 08:01:28 +0000
Files and hashes:         1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: nSyLBhMmp1UcF46D7xwEjp6aip6AKKJu3BZrPTcbYW8=)
                          2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Aug 2026 08:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c1:7e:00:f5:06:e6:57:14:20:da:0e:61:fa:c5:26:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
        Validity
            Not Before: Aug  2 08:01:28 2026 GMT
            Not After : Aug  3 08:01:28 2026 GMT
        Subject: CN=13fc60b0ef1abc8ce51e9943aa50f67ce2e34171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:16:40:05:09:95:91:cf:01:62:fc:e9:a1:
                    22:76:72:12:63:7b:06:ab:08:5c:e2:c8:40:87:76:
                    cf:4d:17:ae:49:ba:77:20:0d:f8:67:01:99:db:f9:
                    68:d9:a7:5d:98:67:75:5e:a0:a3:b7:2a:ea:02:e9:
                    33:2d:fe:b7:95:0d:d9:54:5d:da:35:fd:62:65:ff:
                    ea:5e:12:f7:a5:ae:5e:58:53:55:3e:31:b8:f6:1a:
                    77:b0:53:92:c6:eb:1b:fe:e1:4c:ef:af:ba:33:e7:
                    0c:bb:e9:79:4f:f8:7c:76:dc:e0:c9:a0:5a:66:a3:
                    63:f6:e5:55:28:97:84:55:3c:76:7d:0d:6a:c6:63:
                    28:36:12:c4:01:23:9a:87:2f:22:37:39:f4:e9:b4:
                    7e:c4:2a:f7:3b:84:db:a8:19:5a:d4:5f:8f:79:42:
                    0b:0e:eb:cc:22:99:7e:b0:38:85:95:96:f0:cc:82:
                    72:af:a8:08:d9:4f:69:58:83:82:7d:f1:03:8b:e2:
                    25:b0:fb:39:7c:25:29:20:18:03:92:ab:41:a7:91:
                    30:05:9a:a9:a4:c4:15:d1:05:7b:16:54:93:01:7a:
                    0a:c8:4e:f1:8d:79:0e:99:5c:79:8a:16:24:1b:71:
                    24:4a:31:1e:fe:7a:be:7c:4c:8f:2a:e1:59:74:30:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FC:60:B0:EF:1A:BC:8C:E5:1E:99:43:AA:50:F6:7C:E2:E3:41:71
            X509v3 Authority Key Identifier:
                keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a3:19:ed:3f:4f:6b:96:72:fb:29:25:81:ee:06:b1:9c:9c:
         35:10:79:12:ed:82:ee:05:34:cd:98:41:69:af:98:31:61:9a:
         7a:ae:f1:11:18:b7:56:84:b9:8f:8e:15:ea:2d:1a:ca:79:5d:
         96:05:a7:75:f0:08:d1:eb:c4:86:37:26:d7:49:99:72:25:90:
         f8:b2:92:19:df:ab:29:6d:8f:3f:a5:ad:24:6a:1a:19:81:e7:
         9d:af:6c:72:c9:7f:7c:4f:0f:d2:10:d9:b6:cb:07:76:c8:57:
         75:4b:ba:c1:75:d9:5f:eb:dc:22:b6:71:38:cc:56:3f:b0:6b:
         f9:9a:4c:2b:a5:d8:01:87:d9:52:cc:be:a4:1a:2c:1e:6c:cf:
         58:1d:18:1f:dd:b4:42:db:d8:4e:26:e8:97:2b:91:d2:44:91:
         cb:04:10:dc:1e:70:d3:09:d4:ad:c4:24:52:ec:c1:a4:6b:b3:
         d1:a2:d2:43:87:cf:ff:97:a3:5f:67:d5:94:ec:b1:9c:c2:0a:
         e5:bc:a6:fa:58:39:45:a0:84:5c:9d:74:cc:16:c2:cc:3a:06:
         97:36:72:ab:87:d8:28:f7:05:d8:72:ce:96:22:2b:06:f3:38:
         4b:81:83:0d:61:ad:81:f8:a4:13:9d:a0:97:99:33:24:c3:10:
         86:a4:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 18:22:58 2026 by rpki-client