Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
File:                     2n-fhLKCx8d4S509G2Lb4NT_CbU.mft (raw, json)
Hash identifier:          qrXP0vW8759mQ/JaKLmtAyDZKSruCmXx5CVrkdoS32Y=
Subject key identifier:   6D:CD:29:8C:FB:61:05:C4:6F:35:ED:6D:1A:81:DD:66:FD:CA:C4:24
Authority key identifier: DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
Certificate issuer:       /CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Certificate serial:       019FF835FA5DB43880BB0C74E0082D27B5DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
Manifest number:          07
Signing time:             Wed 12 Aug 2026 23:01:54 +0000
Manifest this update:     Wed 12 Aug 2026 23:01:54 +0000
Manifest next update:     Thu 13 Aug 2026 23:01:54 +0000
Files and hashes:         1: 2n-fhLKCx8d4S509G2Lb4NT_CbU.crl (hash: ano1yBQUR1QBUhDhEITqB+eEhjdxZwKquKYRCv90U2U=)
                          2: HgfT2JSenK4GJsUbQzV8uG_wvvA.asa (hash: LZUpiuRRs3R10CKCH8iywjuLF9goXXtxdoAmImqKVGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:35:fa:5d:b4:38:80:bb:0c:74:e0:08:2d:27:b5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
        Validity
            Not Before: Aug 12 23:01:54 2026 GMT
            Not After : Aug 13 23:01:54 2026 GMT
        Subject: CN=6dcd298cfb6105c46f35ed6d1a81dd66fdcac424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:c8:ac:81:2d:b2:09:04:fc:ec:02:07:e7:
                    29:72:c1:df:91:b6:85:dc:52:0e:0a:6a:73:9f:29:
                    2b:6f:ad:05:9b:80:36:7c:e5:56:76:22:16:9a:4c:
                    56:22:28:2c:59:ea:a0:29:4f:0e:4f:b2:29:15:72:
                    b1:fe:05:15:6e:aa:31:e5:d9:25:ed:22:90:99:3f:
                    c3:fa:34:49:20:6c:62:19:ba:41:16:87:23:f1:ba:
                    47:a5:0a:1d:8c:96:8d:da:d8:15:2e:72:52:3a:27:
                    34:9b:ec:d1:ea:a9:ce:83:2b:e4:d3:87:1b:55:ec:
                    4b:f3:c6:dd:a9:c1:c4:bd:14:16:4a:e3:7d:38:d3:
                    4f:47:dd:5b:9c:6b:76:04:8f:15:10:3a:8b:9e:62:
                    2c:7c:9f:c9:4f:db:17:f4:f6:21:81:1c:48:f9:32:
                    32:c8:85:e8:06:ca:ad:3a:d6:a1:3d:b0:17:5a:e1:
                    8e:59:da:92:b2:b1:92:61:64:a6:b7:2d:3c:ff:47:
                    8d:1e:19:a3:07:8d:35:ea:c2:3f:5b:ec:eb:ba:a3:
                    95:53:14:d4:b6:ce:b1:27:bc:5b:17:69:be:31:eb:
                    a8:e9:e5:43:0e:3f:b4:32:02:1c:fb:04:48:d9:7c:
                    59:f3:7b:b0:ed:a9:99:64:67:21:da:a6:6c:95:56:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CD:29:8C:FB:61:05:C4:6F:35:ED:6D:1A:81:DD:66:FD:CA:C4:24
            X509v3 Authority Key Identifier:
                keyid:DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:db:26:ec:f1:f8:ea:3e:23:1e:ce:5b:c2:6b:a7:57:15:f0:
         0c:15:78:ab:10:15:f5:42:9e:d8:8d:e9:47:ee:e8:6c:73:11:
         ec:a6:76:e5:fb:ed:ec:c7:bd:3c:ed:fa:92:9b:0e:d2:d7:d1:
         36:20:9c:58:c7:9e:ff:45:15:ac:13:29:20:ee:f0:92:66:e7:
         60:7c:be:25:71:ae:d3:3f:55:74:0b:84:cd:03:67:53:39:6b:
         2a:e8:e3:13:0f:07:c1:f3:74:61:a3:bb:a0:6a:6a:81:8c:6b:
         43:35:d0:5d:28:ff:70:31:77:1d:60:98:85:bb:ed:ff:8b:d5:
         50:8a:fb:7c:af:a3:63:2c:66:58:47:23:8c:c9:e2:3a:15:76:
         0d:d7:82:a1:74:ba:d5:b0:38:78:16:ed:ba:a9:c8:02:57:5a:
         63:bb:b1:31:1e:53:97:1e:ff:0d:17:ff:68:d4:fe:96:e7:5e:
         3e:35:1d:df:0c:88:f7:17:1d:12:16:42:04:85:75:f0:a0:ee:
         1b:b1:7b:db:4a:32:f2:c8:36:e4:8a:93:f7:19:ce:47:12:d9:
         15:c2:b3:40:48:b9:5d:b8:df:ea:52:77:0d:16:a8:c1:97:1f:
         03:a2:f1:bc:a2:c2:34:0f:76:20:c8:71:ee:48:69:1e:a8:0b:
         6a:b5:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:48 2026 by rpki-client