Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
File:                     2y7CKma1skmGOV_u1_tbkOKMm-Q.mft (raw, json)
Hash identifier:          DX04wyVO/PtGYU2x/iu61iDc+CzvKiQCZ/6H+/6zsBo=
Subject key identifier:   46:6D:56:F0:C1:B9:38:D5:B0:DE:E5:43:14:B1:2E:7C:00:17:0A:70
Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
Certificate issuer:       /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Certificate serial:       019FFE00BC93DAA256307AD10754FE7681AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
Manifest number:          022E
Signing time:             Fri 14 Aug 2026 02:01:28 +0000
Manifest this update:     Fri 14 Aug 2026 02:01:28 +0000
Manifest next update:     Sat 15 Aug 2026 02:01:28 +0000
Files and hashes:         1: 2y7CKma1skmGOV_u1_tbkOKMm-Q.crl (hash: buNF+3jNbLCTDKBAWxlFGX+qR1qIX3UdLvc8zo3sA98=)
                          2: 5OcccwQslADzpJ8HL6Y7KqGcVVU.roa (hash: irYRIWXEtiw19tZuoevHJTgjYRjpfkAs2mq69Ns5wSo=)
                          3: 6RGkspdxkAWpYvFpm-8ta5s8IEs.asa (hash: SMkfixcVMM4K7Z6BHPlzlnNfBWBe+ZvLZ06HB1RuIn0=)
                          4: Wc5ljSD5VjkVZd4v1ISBd1k6dNQ.roa (hash: jyDuHZmz8mqWG2X7hHBWucB2QcY/4S07R3yhK3xzlzg=)
                          5: t-YR2UdrGJYsX4ZnfkqO15T5g9I.roa (hash: 21jzaahsgBvVI66l1ZAF+dhUPihnDJv9H/MfKJOkhNs=)
                          6: uOrZo6gF2WVlF4nc6xlIIShI6cM.roa (hash: 4dFwviDJ3qVWkRoE0eY86El9WripywfdZeQ8NNS5Yl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:00:bc:93:da:a2:56:30:7a:d1:07:54:fe:76:81:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
        Validity
            Not Before: Aug 14 02:01:28 2026 GMT
            Not After : Aug 15 02:01:28 2026 GMT
        Subject: CN=466d56f0c1b938d5b0dee54314b12e7c00170a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:1d:82:ce:3b:0a:dd:da:ee:07:b0:40:5e:
                    61:ed:6f:fc:bf:db:08:e6:07:ba:f5:0f:e0:22:d0:
                    a3:c7:9f:e7:61:ff:6c:4f:ba:83:13:8c:68:67:91:
                    2e:4e:73:1d:48:67:af:b6:3c:a0:9a:6f:c0:56:99:
                    68:b8:ab:04:ba:54:e3:34:88:7c:5c:2e:13:e2:70:
                    d3:d3:49:22:9f:65:02:3b:ee:aa:20:93:70:16:4a:
                    07:f7:5a:46:28:bd:82:41:a8:6b:2b:d5:88:f0:5e:
                    30:df:21:63:e6:15:07:d7:3e:cd:1d:da:7a:36:d8:
                    56:78:ac:1c:9f:31:6a:c5:a1:62:26:dd:6b:5a:b8:
                    08:00:82:15:6c:be:97:f1:ab:e1:8b:e6:f9:85:b1:
                    2f:4c:bc:26:ab:77:5e:22:0d:54:01:f0:1c:2a:2a:
                    20:f8:f5:f2:d6:dd:e6:b5:b6:79:e6:3c:60:7e:69:
                    84:d1:fa:e2:df:ac:fb:ec:9d:8f:38:60:52:45:9e:
                    d1:0a:f2:b5:13:52:c7:56:e0:70:eb:20:71:e5:0e:
                    d6:26:63:76:fa:a6:0d:fe:74:da:14:8a:81:0b:10:
                    01:a9:ef:e4:5b:9f:63:a1:56:c7:4b:b1:7f:29:a9:
                    64:51:41:e0:2c:4d:8c:59:f4:0d:99:48:cf:fb:20:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6D:56:F0:C1:B9:38:D5:B0:DE:E5:43:14:B1:2E:7C:00:17:0A:70
            X509v3 Authority Key Identifier:
                keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:e8:9a:07:8f:6b:f5:07:64:59:8c:78:b5:64:cd:34:d0:
         fa:80:26:96:b6:09:8f:18:61:83:5e:b3:0e:c9:5e:8d:9b:4d:
         61:ad:15:3a:38:86:e0:39:75:3d:c2:f3:6d:5d:9e:af:a1:e5:
         0b:d3:d6:db:e9:00:b6:42:72:b6:88:b6:f2:f2:6b:32:fa:28:
         80:88:f0:a4:4d:51:10:bb:ef:3f:45:f4:c0:f3:82:62:72:b3:
         bb:42:bf:bd:07:c8:17:b8:63:43:f2:a7:a3:83:ea:3f:72:eb:
         8a:da:4f:8d:5c:f1:2e:ab:5f:68:e3:ee:68:ba:cb:cc:56:2a:
         54:12:14:24:16:fa:b0:ad:0a:f8:34:56:f4:72:8e:f2:03:1a:
         92:91:44:78:a2:6e:f5:40:b1:c6:b1:ac:a2:06:3c:3b:c2:4d:
         ce:e2:69:97:26:a8:2a:49:0e:55:6e:21:9e:0d:d6:ab:0a:f8:
         48:39:d4:e1:a7:c8:92:d5:16:13:eb:40:f6:30:51:d0:07:ff:
         b2:69:c6:cb:63:3a:bf:6a:b0:ca:53:93:0d:45:b4:60:91:82:
         76:48:bb:a2:8a:1a:53:41:a5:6d:a5:04:14:db:79:c9:b2:cf:
         4c:0a:52:2d:1d:79:6a:cd:10:2a:a3:f0:5e:c4:d5:6a:4c:07:
         75:74:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:11:53 2026 by rpki-client