Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File:                     2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier:          tj2kbx9p5dNQbRib8qUYgor0BSO8INQNjLYFoMnz/zA=
Subject key identifier:   41:99:7E:E1:84:D2:81:98:26:20:1C:3E:C5:FF:96:29:4C:D5:D1:3E
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer:       /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial:       01A00137E01A0FA63BAC8173CA9C1B4C8BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number:          0C0C
Signing time:             Fri 14 Aug 2026 17:00:33 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:33 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:33 +0000
Files and hashes:         1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: 3kRWDy40cuJjaskb1fbBrqYKqXcscS7iqnQEcH1idlA=)
                          2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:e0:1a:0f:a6:3b:ac:81:73:ca:9c:1b:4c:8b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
        Validity
            Not Before: Aug 14 17:00:33 2026 GMT
            Not After : Aug 15 17:00:33 2026 GMT
        Subject: CN=41997ee184d2819826201c3ec5ff96294cd5d13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:1e:ff:e0:66:61:ed:f8:43:bf:90:6c:58:
                    12:8e:02:48:e1:fd:2f:be:4f:b7:c1:99:88:ed:d3:
                    1b:08:b1:fe:67:39:9f:d4:76:ec:04:24:50:43:73:
                    3c:24:f6:df:3c:c1:41:87:be:2b:b6:8f:00:c8:a1:
                    45:17:8d:0a:a9:ac:71:db:27:61:92:84:0c:d8:e6:
                    8f:ef:5a:85:05:0b:59:d9:e1:6d:af:58:01:58:98:
                    8f:aa:9d:7b:57:54:f2:ad:59:38:90:89:ef:4f:cc:
                    5a:f8:36:3a:5f:4c:a7:e1:2a:17:dd:c8:32:e1:b6:
                    cc:43:29:02:ae:2e:4c:a6:e8:db:ef:5e:12:15:14:
                    44:79:8a:e6:dc:c3:bc:b0:6d:0e:e4:ab:0e:d9:8a:
                    90:83:32:6e:5e:99:9e:be:db:c7:97:54:ac:15:e6:
                    cd:ad:e0:35:f3:bf:5c:00:60:52:f8:e4:de:79:12:
                    67:cf:03:34:be:c7:f6:b6:66:5c:a7:81:20:50:aa:
                    f3:01:05:78:d2:e5:e5:d8:dc:1c:15:6b:ce:51:02:
                    63:bf:00:0d:1e:d1:4a:82:80:ba:66:6b:66:a1:4e:
                    2b:7d:9f:6f:32:d4:d6:0e:05:a1:84:82:d1:93:0c:
                    4a:dd:ee:af:d7:22:4d:b5:a8:1d:60:0d:7b:55:1e:
                    0f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:7E:E1:84:D2:81:98:26:20:1C:3E:C5:FF:96:29:4C:D5:D1:3E
            X509v3 Authority Key Identifier:
                keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f7:bd:64:15:8c:be:20:69:99:75:2f:e8:6e:d0:33:5f:57:
         e3:78:a9:cc:c1:aa:f3:75:f4:f8:0e:23:23:e1:35:d9:bd:67:
         7a:b9:54:cc:a4:b8:b7:c8:53:86:05:ef:96:f0:10:27:fb:e1:
         5e:38:83:1b:2c:df:1e:ff:71:2a:cb:64:d2:74:7a:89:f3:15:
         91:97:38:05:06:c9:ba:4d:34:c1:99:5b:ed:a6:83:d8:86:c2:
         b3:dd:3f:5b:2d:f2:43:24:9e:f7:fc:42:85:02:15:ce:fa:d1:
         80:4f:d1:aa:6c:5d:fb:9d:30:43:87:ef:8e:55:48:62:2c:e0:
         21:bf:cd:a3:7e:2c:e9:a6:34:b9:0b:e2:35:ad:10:e7:a7:0f:
         86:ad:8d:41:40:99:73:a4:61:06:34:f2:e6:5b:68:3f:05:81:
         ec:de:c0:be:63:a4:dd:45:e9:dd:74:c5:f8:bd:1d:68:d1:e2:
         57:32:ee:ab:4e:35:8e:bc:84:c2:0e:eb:97:65:8f:5d:fd:0e:
         46:64:d5:af:c7:2f:35:16:e6:4f:07:75:63:57:20:83:15:a3:
         0d:0f:29:ef:e7:bc:d1:17:29:c8:44:23:9a:59:25:29:af:d3:
         d3:8b:bc:49:72:02:60:c0:8a:78:b9:57:6a:08:2a:ea:85:c3:
         11:cd:65:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABN+AaD6Y7rIFzypwbTIumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjRjMzBiM2MzZmU5NDYwNjI4M2ZlOTg1ZTlhNmJhOGI4
ZmRmY2IwHhcNMjYwODE0MTcwMDMzWhcNMjYwODE1MTcwMDMzWjAzMTEwLwYDVQQD
Eyg0MTk5N2VlMTg0ZDI4MTk4MjYyMDFjM2VjNWZmOTYyOTRjZDVkMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbMe/+BmYe34Q7+QbFgSjgJI4f0v
vk+3wZmI7dMbCLH+Zzmf1HbsBCRQQ3M8JPbfPMFBh74rto8AyKFFF40Kqaxx2ydh
koQM2OaP71qFBQtZ2eFtr1gBWJiPqp17V1TyrVk4kInvT8xa+DY6X0yn4SoX3cgy
4bbMQykCri5Mpujb714SFRREeYrm3MO8sG0O5KsO2YqQgzJuXpmevtvHl1SsFebN
reA1879cAGBS+OTeeRJnzwM0vsf2tmZcp4EgUKrzAQV40uXl2NwcFWvOUQJjvwAN
HtFKgoC6ZmtmoU4rfZ9vMtTWDgWhhILRkwxK3e6v1yJNtagdYA17VR4PLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGZfuGE0oGYJiAcPsX/lilM1dE+MB8GA1UdIwQY
MBaAFNokwws8P+lGBig/6YXpprqLj9/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUt
ZjA2YmJmYjg0MDhmLzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUtZjA2YmJmYjg0MDhm
LzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfe9ZBWM
viBpmXUv6G7QM19X43ipzMGq83X0+A4jI+E12b1nerlUzKS4t8hThgXvlvAQJ/vh
XjiDGyzfHv9xKstk0nR6ifMVkZc4BQbJuk00wZlb7aaD2IbCs90/Wy3yQySe9/xC
hQIVzvrRgE/Rqmxd+50wQ4fvjlVIYizgIb/No34s6aY0uQviNa0Q56cPhq2NQUCZ
c6RhBjTy5ltoPwWB7N7AvmOk3UXp3XTF+L0daNHiVzLuq041jryEwg7rl2WPXf0O
RmTVr8cvNRbmTwd1Y1cggxWjDQ8p7+e80RcpyEQjmlklKa/T04u8SXICYMCKeLlX
aggq6oXDEc1lXA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:41 2026 by rpki-client