Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File:                     2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier:          HEUDHze50jogEy8FWQ0Z6LZ78rx69vGTKlhNimHypkA=
Subject key identifier:   9C:AE:C4:F6:8E:B2:F9:C2:5D:7A:B2:E6:3D:98:87:F3:77:37:7A:C9
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer:       /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial:       01A001DCFCEC6EEE7ED380C601A7B8FFB6A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number:          0936
Signing time:             Fri 14 Aug 2026 20:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:54 +0000
Files and hashes:         1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: ezK9XLXFo2YOe605WB1kuGeYqCnrdD9bAqU658pPAFE=)
                          2: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (hash: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:fc:ec:6e:ee:7e:d3:80:c6:01:a7:b8:ff:b6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
        Validity
            Not Before: Aug 14 20:00:54 2026 GMT
            Not After : Aug 15 20:00:54 2026 GMT
        Subject: CN=9caec4f68eb2f9c25d7ab2e63d9887f377377ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:af:1f:c7:99:6e:3b:94:fa:6e:7e:91:66:
                    be:05:57:74:7b:37:fe:05:fc:6f:bd:e0:33:a7:66:
                    19:2b:89:99:55:f6:6d:9d:43:c3:97:bc:6b:8f:37:
                    78:91:e9:a5:31:c1:4f:89:50:34:c0:79:52:53:ed:
                    79:06:6e:4d:77:7e:ff:51:23:65:14:6b:6c:c4:6a:
                    9b:98:8a:5c:70:70:81:e7:cb:f2:91:91:c1:7d:ad:
                    9e:fb:9a:3d:e8:32:a1:2f:a9:ba:53:82:ea:0f:5a:
                    17:74:19:2d:59:f4:ed:ca:5a:54:de:2b:51:c7:83:
                    cd:02:2a:81:b9:97:da:a2:fa:fc:9a:1a:8f:83:7e:
                    b3:a4:36:20:f2:1d:d4:e2:52:90:5b:6e:52:4d:80:
                    0b:8f:a3:bb:63:2d:45:ce:ce:9e:90:38:dd:2e:d7:
                    a2:05:a6:45:77:6d:2f:9a:78:5f:af:a1:c0:8c:6c:
                    a0:84:ab:5a:09:c0:d2:cf:03:59:27:33:07:ec:eb:
                    0b:09:e2:53:ca:aa:14:09:36:07:43:ea:64:bd:44:
                    a8:0d:63:96:13:f2:78:ef:86:1c:e6:28:d6:79:7d:
                    24:70:f4:ed:06:f0:52:da:c5:60:35:31:64:cc:c9:
                    a0:ea:6b:d3:4e:f7:a4:88:f5:be:53:e1:06:d9:f9:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AE:C4:F6:8E:B2:F9:C2:5D:7A:B2:E6:3D:98:87:F3:77:37:7A:C9
            X509v3 Authority Key Identifier:
                keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e4:a2:7c:35:8d:0a:72:ca:c9:79:1d:22:05:59:51:9a:37:
         61:a9:e1:b9:4a:59:65:43:65:eb:30:a4:a4:c1:ba:b2:c6:b7:
         90:a6:33:1e:4a:4c:05:09:b4:c5:40:85:95:0b:41:a8:66:03:
         f1:54:63:d2:e2:59:c4:76:31:cc:bf:d6:e6:59:9c:d9:88:7c:
         25:0d:70:b8:e4:04:b5:e2:87:76:06:71:86:7b:b5:5b:f6:3b:
         f2:61:1b:9f:9f:5f:38:79:37:35:6f:09:41:3f:5e:6b:f3:60:
         c1:73:95:a1:e3:ef:ce:1a:c9:87:1a:6c:2a:00:f4:c8:7f:2d:
         ff:bf:d0:6d:b7:9b:83:fa:5d:49:5a:95:a5:52:16:8d:f5:a4:
         ff:a5:f7:0c:14:29:24:70:3d:15:51:fc:27:93:72:3f:4e:c9:
         63:f2:81:96:33:e8:06:51:09:aa:9e:e2:84:2e:8e:0d:37:7d:
         45:0a:f1:0c:31:c6:6b:b5:4e:20:11:07:84:dc:fe:33:b9:62:
         35:48:33:2f:2f:a6:c6:88:2d:9a:e6:3b:07:16:30:18:cd:56:
         8b:19:ed:64:d0:b7:28:f9:c8:10:ef:5a:7f:04:67:3f:a1:2e:
         47:54:5f:ae:bc:4b:0a:aa:96:33:5d:6a:b3:75:9e:47:b1:5d:
         32:f2:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:13:37 2026 by rpki-client