Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          t94+/MClrap48zdn914iMk3DgQq7OZLte3FOOFR56t0=
Subject key identifier:   85:B4:9B:8E:85:89:E2:D1:27:F1:70:06:9A:A5:48:49:02:6B:B6:A2
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       019FA003DA4AF8B8F8D775DCDA86469C98B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          16CD
Signing time:             Sun 26 Jul 2026 20:00:34 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:34 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:34 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: JB8zxx+cSAyml8cdRE1U//vYN/rlSrGN1BwzM6arFyk=)
                          2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
                          3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
                          4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
                          5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:da:4a:f8:b8:f8:d7:75:dc:da:86:46:9c:98:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Jul 26 20:00:34 2026 GMT
            Not After : Jul 27 20:00:34 2026 GMT
        Subject: CN=85b49b8e8589e2d127f170069aa54849026bb6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:b7:a4:f6:26:61:3e:c1:2f:3c:00:bc:16:
                    b3:7b:3c:fc:f2:84:6a:0d:06:c2:fa:08:bb:13:7f:
                    02:28:d8:be:d3:78:67:a2:43:ae:1d:b7:6d:70:31:
                    e3:a1:68:04:77:02:f9:44:a6:ef:7a:98:39:5d:61:
                    ce:fd:54:92:97:97:3f:76:b9:3a:9d:1b:ce:a4:63:
                    d6:f0:d6:d6:88:ac:40:82:f8:a4:96:8a:67:81:23:
                    37:8f:3e:dc:57:a5:15:e4:22:fc:cf:c4:60:8a:f1:
                    84:53:d7:57:b8:28:43:f2:22:3f:a7:b8:a5:8f:cc:
                    65:14:bc:29:78:69:fc:56:27:29:f5:8e:8d:a6:e9:
                    1e:1c:6a:0e:4a:dd:08:ce:3c:85:98:36:ab:a2:bd:
                    c3:a4:4c:8c:61:20:4f:8b:b5:48:e7:dc:c7:25:13:
                    63:54:46:db:0c:8d:67:71:63:a1:de:35:00:89:e2:
                    89:64:6e:ef:79:e3:0d:f5:bd:41:c7:c7:3f:2b:d7:
                    a7:08:a9:9c:9a:14:91:de:51:3a:f7:7d:4c:1a:bb:
                    cc:28:8e:a8:31:6b:a8:f1:a6:a7:49:1d:2a:80:20:
                    7c:cf:d3:90:a1:c8:73:d8:47:7f:47:41:68:5b:82:
                    e8:b9:a1:08:5b:11:97:20:db:ae:aa:62:f6:14:43:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B4:9B:8E:85:89:E2:D1:27:F1:70:06:9A:A5:48:49:02:6B:B6:A2
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:89:bd:71:34:c8:70:43:07:c2:cb:46:ff:71:f9:4d:08:1f:
         85:01:68:0c:72:31:19:e6:1a:dd:d3:33:57:f1:ce:15:88:c5:
         e6:4e:dd:11:ef:ef:1a:e2:de:da:7e:b4:5a:bc:95:ef:85:42:
         2b:d3:bf:0e:43:d1:02:9a:b5:8e:1a:15:a1:c5:03:30:99:c8:
         9c:86:a8:dc:be:6a:9a:2f:f2:2f:3f:f2:ac:9a:0a:a3:8b:94:
         3a:3e:a9:45:33:a5:ce:21:bc:e6:c8:35:f5:6c:a2:ae:0f:73:
         5d:5b:3e:3d:5f:03:d5:3d:60:b0:04:e9:98:71:c0:d5:a4:8e:
         80:ae:17:78:39:05:ff:86:30:e7:c3:c7:45:6d:2d:55:23:3a:
         7c:b9:cf:48:e3:c0:e8:8c:fb:4e:91:9f:8b:6d:f3:d5:04:95:
         af:15:bc:e0:d7:af:48:e7:cb:a3:a9:6b:3b:3a:9a:29:0d:c6:
         96:ef:d1:e9:69:d3:bb:d2:bd:4a:70:7c:e7:0e:e0:4a:ed:28:
         4e:25:57:30:c2:13:e3:0a:52:c6:a5:c0:83:c5:cd:5d:5e:99:
         d1:4b:91:f5:49:d4:e2:59:fa:dd:40:25:0c:0c:99:6c:ed:84:
         a4:c9:57:54:83:38:ad:17:8c:11:d6:0b:d9:3c:6a:c5:1e:29:
         ca:5a:c9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:27 2026 by rpki-client