Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File:                     2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier:          cRP+G88u3kQSUtUjhGdeq9Q5Frf+R1unaKX/qGkxBjE=
Subject key identifier:   5E:D2:36:43:93:DC:EA:55:C2:14:A7:64:22:FC:9A:B9:9D:E3:A5:22
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer:       /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial:       01A001DCF228AECA370689885F146FCDB8D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number:          1A08
Signing time:             Fri 14 Aug 2026 20:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:52 +0000
Files and hashes:         1: 0LQRzIDRNUdWBd9Dydr2N_iC5jw.roa (hash: JhEvtgcGlQ0ucbJzBQZW4Y2YIF7BmFzYqZx6rOiR+Uc=)
                          2: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: odOYRcU5Qx9Fi8X+Jz3xSv9V1qYAMjRoAhg3h/tT3Ck=)
                          3: 3wh0CT_8NfW3KeKbg66Zbntk-98.roa (hash: XNvg+YgzCvz98HEiUChpuE5wzEJ7vEAr5EwgyO9TGdU=)
                          4: 5XJ-DEXD7beUVnBEqtMJ7gNlRBw.roa (hash: aC0+p4R1V2InyynQLchWTNU+ke3PRpV6ML3PSthcq44=)
                          5: VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa (hash: Nbg44V0Y4hgBCfwuZPycL8mZRJRdH9RK2S/1UriBDlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:f2:28:ae:ca:37:06:89:88:5f:14:6f:cd:b8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d894365b28a082834a751a97771b791124524dec
        Validity
            Not Before: Aug 14 20:00:52 2026 GMT
            Not After : Aug 15 20:00:52 2026 GMT
        Subject: CN=5ed2364393dcea55c214a76422fc9ab99de3a522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:2d:7a:b7:30:a5:97:af:e3:14:f8:4e:57:
                    9f:8e:07:a7:5d:b9:db:3a:95:1e:9c:13:dc:72:75:
                    21:cd:e0:86:14:7d:37:08:a5:82:ba:10:e4:c5:39:
                    1d:7a:94:26:d8:30:26:2f:d5:f5:e3:ce:d5:07:a8:
                    b5:da:28:a4:86:7b:53:ec:cf:26:14:d6:32:23:41:
                    6f:a7:a3:76:21:88:7a:ff:7b:57:2e:0f:c3:0a:16:
                    7c:09:6a:60:e8:34:b8:e9:ec:cf:d1:9c:fc:4c:cb:
                    57:74:9d:d0:30:e0:d1:f6:82:81:8d:56:aa:59:b5:
                    60:36:99:d6:ee:84:6e:06:81:ec:ae:01:18:84:3f:
                    1d:da:c2:86:d6:e0:08:01:0f:e0:a4:19:5d:f7:f2:
                    de:a0:c8:8a:cd:19:e7:1e:df:f5:d9:12:2c:81:2e:
                    40:81:c1:d4:a0:e0:16:e8:f9:a3:da:51:ae:5f:b4:
                    f1:9a:ae:3d:86:e9:9b:5b:4d:d5:b3:b3:78:d0:10:
                    1d:0e:9e:90:d0:a8:da:9f:df:c5:cc:b6:4b:59:56:
                    6d:2b:f9:25:fd:70:4b:fd:c6:52:f2:b7:1d:1c:57:
                    3c:80:c8:4a:ba:85:d0:f0:7f:02:eb:e6:46:17:8a:
                    e4:35:65:e2:78:c1:51:3e:71:e0:3b:0a:6c:9c:2c:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D2:36:43:93:DC:EA:55:C2:14:A7:64:22:FC:9A:B9:9D:E3:A5:22
            X509v3 Authority Key Identifier:
                keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5a:19:38:81:cf:17:24:48:91:80:25:88:3e:bb:11:a7:96:
         da:32:fd:51:4a:18:94:97:94:da:53:c8:33:da:78:fa:fe:0d:
         c2:bc:18:12:c2:49:b8:a6:7c:b0:4e:d1:f1:1f:91:35:72:e4:
         fc:8a:db:a6:74:c4:e3:d2:22:2c:b0:fe:7d:22:b3:ee:83:61:
         c9:64:12:3f:ce:27:8e:42:5d:45:2c:05:c0:90:fa:42:fa:76:
         06:04:26:94:c0:a2:b4:24:b9:15:86:68:a7:6a:8b:25:97:2d:
         ee:b1:a2:a3:b9:3f:c1:71:93:1b:44:a0:5d:6a:98:a9:b1:ac:
         6a:0d:52:6f:1c:b4:c0:9f:25:4f:ad:3e:8b:eb:b8:a9:ad:6d:
         79:64:8a:86:52:fe:02:11:72:e2:2e:d6:4d:44:3a:7f:f8:d9:
         ea:69:d1:a8:f8:9e:66:2d:82:2d:5b:9a:a7:bc:14:c9:70:06:
         fa:c0:c1:99:6d:70:c7:9b:65:ed:d1:83:58:aa:74:a0:63:de:
         db:63:b8:12:be:12:1c:c0:d8:a3:90:02:76:f2:21:aa:ec:29:
         87:d6:d7:86:6d:18:69:6b:47:90:7e:10:d4:a6:5d:dc:39:6f:
         17:62:a2:f2:c4:12:6b:0a:7a:c7:ee:b6:e8:8a:09:82:32:82:
         3e:d5:7f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:52 2026 by rpki-client