Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File:                     Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier:          W7xp6AMDRFLhkCkD2M87Zk7xdchWWWkaJ1yhk9+7Bec=
Subject key identifier:   CA:CA:D0:43:4A:88:DA:A0:33:63:38:46:66:6F:E7:0D:14:4A:66:A2
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer:       /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial:       019F8BD8932935A6FB05EE07F8448CD5D63E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number:          19CA
Signing time:             Wed 22 Jul 2026 22:00:54 +0000
Manifest this update:     Wed 22 Jul 2026 22:00:54 +0000
Manifest next update:     Thu 23 Jul 2026 22:00:54 +0000
Files and hashes:         1: DsgH-2l0ZUEQ5QwDCoj8o-EpJFs.roa (hash: yvpnLBP9aiLVJJIHtl3Or2O/+llJmxZ1ZUNn0YtwZpg=)
                          2: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: VmQjBGOa7+ViMXsV15i5OyJrgfInWVL0ej6tlQe1wGo=)
                          3: NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa (hash: UE/nLkMq9esL2M39yDKTuiYBOgv6z8tQHjDR2GXbU1s=)
                          4: PpfIHCD22AUayAWPFxeE0m6hL9o.roa (hash: tEQKGH709CVuan0YOwHt1iqyxRmhemh2Iabk8KfvabM=)
                          5: X9ZqGynMA1KtK65ZVtTizqC4m9M.roa (hash: hcMM10zcyfbfDa1u/NFR+3E0NC3GcUNUVcvC/8j8tfA=)
                          6: pR8icRPbtmxZyLYy7ClhNlyoP3I.roa (hash: hJET2JInI9K0Hd2BzAqq/nSPxKB057Gd1PzyTDZKZpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8b:d8:93:29:35:a6:fb:05:ee:07:f8:44:8c:d5:d6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
        Validity
            Not Before: Jul 22 22:00:54 2026 GMT
            Not After : Jul 23 22:00:54 2026 GMT
        Subject: CN=cacad0434a88daa033633846666fe70d144a66a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:60:af:af:e7:1a:c6:f0:b2:3f:a6:4a:7e:06:
                    62:31:a2:28:a7:d3:4d:15:3c:2f:0f:e8:ed:ee:66:
                    61:91:82:0b:bb:c4:b1:df:c7:8d:1e:29:d0:6e:a9:
                    24:02:ee:ba:d8:5e:da:fd:38:d4:f7:26:1c:9f:5b:
                    67:fd:e6:1d:28:2b:d4:52:88:2b:95:41:0b:1b:53:
                    5d:0c:f4:f5:dc:21:3d:12:aa:de:ee:c3:f9:89:fe:
                    32:ef:95:ca:cd:8b:f1:d5:5a:ee:21:f5:11:0d:b0:
                    c6:4d:e7:54:7b:92:81:cc:b2:76:8e:d2:b5:98:32:
                    ab:02:53:5c:c9:4f:67:5f:1a:4e:b1:1c:cd:9c:92:
                    d2:ea:11:ff:82:05:94:0e:97:72:9a:2e:52:a9:91:
                    a5:55:6a:c0:9b:f1:64:3c:4f:7e:59:61:51:3f:c5:
                    a2:b3:59:7c:aa:d9:d2:51:10:77:17:f4:5d:ea:00:
                    25:a0:8d:85:a6:43:df:bc:f3:ae:7f:d1:69:d2:67:
                    03:b3:f9:be:23:d2:41:0d:18:51:b9:2c:00:a0:bb:
                    7c:f7:89:d0:ba:80:e1:d1:cb:6a:ab:e9:3e:73:8e:
                    09:44:16:8f:e7:65:8e:1a:71:c7:52:30:f6:1a:3d:
                    18:3f:8d:c5:ca:f9:05:e5:1b:a6:72:8b:d6:64:61:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CA:D0:43:4A:88:DA:A0:33:63:38:46:66:6F:E7:0D:14:4A:66:A2
            X509v3 Authority Key Identifier:
                keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:86:3c:56:c2:a9:6a:4f:9f:8d:59:17:3a:76:78:56:fa:9d:
         1c:1b:f1:37:91:0d:f7:52:b9:77:3b:2e:69:dd:85:d2:20:6c:
         2f:c1:6d:94:7b:74:59:ae:bf:cf:e3:0a:9f:4a:24:ee:49:5b:
         88:ca:25:95:35:dd:04:5f:a3:b4:00:0a:1c:13:f8:bc:53:fb:
         96:4b:80:40:5d:67:49:69:7c:64:ac:af:c9:0e:87:57:e8:7f:
         a7:93:35:77:f2:f5:a6:7c:e9:ad:43:9b:93:fe:e0:9f:c4:79:
         42:66:f8:5b:07:25:83:c7:68:ce:d2:95:70:d2:2d:e5:7a:02:
         48:99:7b:2f:2d:86:15:4f:48:f0:24:6f:51:cf:79:25:4b:0a:
         39:ef:2c:06:67:04:dd:40:8d:07:e3:d9:a0:57:e8:47:fe:33:
         98:b0:bc:69:83:e4:73:36:c9:2e:03:7f:dd:ff:17:fb:56:af:
         fc:ea:cc:b6:40:ff:1a:27:eb:32:61:5e:f7:4c:ec:41:0e:29:
         80:dc:0b:62:0f:3b:44:79:b4:64:5c:48:ec:41:49:e7:0f:75:
         fc:1b:f0:fb:0c:b7:94:fc:90:68:29:9f:bb:8b:f2:08:e6:4c:
         f4:49:39:32:6f:b3:4b:70:21:57:58:37:aa:01:c7:4c:76:20:
         21:c6:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 04:26:41 2026 by rpki-client