Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File:                     2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier:          hPGO3E+ujTPp8s43PnM/HD56kPvSU1AcInyqa+GsVS8=
Subject key identifier:   7D:1D:FD:22:AA:0F:03:28:58:BA:09:1E:1C:AD:AA:0B:BC:A9:5A:30
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer:       /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial:       019F18D686E801A97DF3F0436080A7590F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number:          0FF5
Signing time:             Tue 30 Jun 2026 14:02:20 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:20 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:20 +0000
Files and hashes:         1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: FEQBUXqfuu6H10cPr26POEu5VoEP9lQy/Q/eRR8g1DI=)
                          2: 30R6wB6gk0tAdQUb1nh5pGtizL0.roa (hash: 3d2YX3XYruYbRwjkdhZqOWEla3AbBvwumGbHye9XwtA=)
                          3: N1AbqW-LglnJHa8JDMfRFCkNqAg.roa (hash: pucNpOTLMDRyvd9Y5PyCoo7bgwR3bl/sj/khCUp1yHs=)
                          4: g9DlwoPcP__m6NZqUMdk9BeZ8_s.roa (hash: kBEZ3OB5J/nHjPA7g4sqM3oE29ycmGA4VRa1os8i/Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:86:e8:01:a9:7d:f3:f0:43:60:80:a7:59:0f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
        Validity
            Not Before: Jun 30 14:02:20 2026 GMT
            Not After : Jul  1 14:02:20 2026 GMT
        Subject: CN=7d1dfd22aa0f032858ba091e1cadaa0bbca95a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:3d:8e:b8:13:78:80:ba:8e:08:39:3a:3f:
                    6f:9c:4c:dd:c0:0a:56:8d:9d:8f:ab:ac:7f:d6:90:
                    15:38:db:22:f3:6a:d5:1f:ad:46:1a:4f:fd:56:3a:
                    21:d5:8f:19:4d:e7:05:9b:10:87:cf:86:2f:7b:53:
                    1e:d9:cf:49:a3:7b:00:d8:cf:da:fb:6e:77:08:d5:
                    33:82:e8:8d:64:a5:e0:23:03:78:94:e8:73:3f:47:
                    3f:d4:93:90:c5:39:ec:f2:42:de:ca:9c:17:db:bf:
                    91:a9:90:a9:8d:a6:13:94:60:56:d7:f8:5b:cc:74:
                    39:69:19:25:dc:37:d9:a1:36:42:ac:47:ad:89:78:
                    ff:63:d8:b2:54:ae:19:3b:46:d8:1d:f0:67:d5:dc:
                    82:3d:fa:f6:e1:3d:a5:64:3c:2a:a9:c0:f4:dc:e0:
                    d5:4c:79:8a:2f:68:18:c1:33:8d:9b:2a:77:be:af:
                    70:b2:07:ef:26:d8:80:cc:18:b7:0c:55:37:fa:b5:
                    8f:43:26:9e:5c:54:db:88:28:67:2e:6c:05:a2:40:
                    8a:35:6a:ef:c6:a1:7f:82:0b:50:a1:43:c9:d8:ec:
                    5c:e0:b3:c2:ce:a7:e6:fc:b7:af:e2:fb:e0:e3:86:
                    b6:98:97:18:0e:0f:f6:7b:2f:4b:32:5a:ca:3f:d9:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1D:FD:22:AA:0F:03:28:58:BA:09:1E:1C:AD:AA:0B:BC:A9:5A:30
            X509v3 Authority Key Identifier:
                keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d3:d9:46:63:87:89:09:16:b7:f2:58:95:de:65:65:1a:9a:
         25:5f:c6:d2:7d:49:38:77:be:bd:71:f1:b8:af:c4:14:b6:fc:
         4b:f7:f2:4b:6c:03:08:f0:1d:aa:ab:9c:18:e9:ec:b4:1c:d9:
         d9:5b:37:02:a0:30:53:0b:f9:e3:22:fe:4d:9d:d4:67:95:0b:
         91:b4:54:ef:94:71:11:ac:d2:30:7b:57:71:40:d2:68:42:c3:
         66:f5:04:44:02:05:e1:68:3d:cf:12:96:b7:ff:07:73:d4:d4:
         3d:ad:55:66:9a:ce:b2:d7:e4:50:a7:d1:11:3d:0c:97:ce:6e:
         79:47:e3:80:77:ea:54:12:5f:ba:a6:48:41:41:7d:2a:e2:f5:
         2a:e9:92:fb:f8:ea:d8:d2:aa:7c:34:c6:6f:3a:05:85:18:c7:
         02:a0:c5:47:06:ff:c7:52:2d:ee:b1:f5:50:2b:12:9e:ca:cd:
         08:1b:50:a8:6b:48:0c:22:6f:48:fc:64:7e:71:31:40:dd:6e:
         df:b6:28:1f:e8:d2:93:91:bd:1e:1e:47:42:c7:23:e4:f9:ff:
         1e:5e:03:bc:f3:58:3e:82:97:16:b0:58:48:be:f3:cc:ab:3e:
         03:71:a9:1f:a1:bd:82:78:c3:a7:7a:66:5d:b5:30:86:ce:99:
         a4:c0:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:23:46 2026 by rpki-client