Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
File:                     lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft (raw, json)
Hash identifier:          3CQZDyTGZmJMSH9dE7KhJvojL/Mrl/msHITIXzCkufU=
Subject key identifier:   06:68:47:63:3C:DA:08:90:FD:31:71:E9:86:71:C1:6F:AE:15:FB:CF
Authority key identifier: 94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
Certificate issuer:       /CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Certificate serial:       019F36AA5D656275A2E7065F625A5A36F396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
Manifest number:          11
Signing time:             Mon 06 Jul 2026 09:02:42 +0000
Manifest this update:     Mon 06 Jul 2026 09:02:42 +0000
Manifest next update:     Tue 07 Jul 2026 09:02:42 +0000
Files and hashes:         1: 8EFr4zmSfzqdm57D9xgzSL6HFtU.roa (hash: E2H7x7svspORsUyoZUb5Yy6dDt0MFzs6hrI962lU9pw=)
                          2: A20plLgDSbDYPkKsac_6bRMiLUY.roa (hash: z0V9AzxoQIFUzBV8fjyUMEhfk1VmSeC6U5leZPnjdgw=)
                          3: gR2LIMs8WBieOmDX2G87FSy4ukA.roa (hash: VVK3o6W1lujFw4qXvOpOtwOe6Lz78s4pIxVQ3DpiyXU=)
                          4: lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl (hash: 4W/DZbSs2PhlDbk+h13syL50bY6xHBZp2995//BEloo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:aa:5d:65:62:75:a2:e7:06:5f:62:5a:5a:36:f3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
        Validity
            Not Before: Jul  6 09:02:42 2026 GMT
            Not After : Jul  7 09:02:42 2026 GMT
        Subject: CN=066847633cda0890fd3171e98671c16fae15fbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:5c:e8:7c:3e:2d:72:c4:40:dd:b4:7d:27:
                    a0:73:c0:81:7e:77:57:71:9c:41:29:1b:f5:71:38:
                    67:71:47:02:41:38:f9:65:9a:45:8d:81:87:08:75:
                    1f:a2:59:54:18:45:b5:10:1a:e8:11:0c:fb:bb:aa:
                    b2:82:55:1a:60:64:e7:26:18:82:81:f5:53:5c:c6:
                    6e:7a:1d:26:ee:38:f2:82:c3:09:43:02:a0:a1:7f:
                    e2:93:85:52:8a:da:b7:8e:54:c3:8c:c7:00:d2:23:
                    66:21:e0:2c:ae:f0:b1:a6:3e:28:53:eb:8d:5b:8f:
                    0e:87:33:1d:dc:e2:f5:ef:6a:00:83:26:e6:ae:e1:
                    a6:a7:22:e5:d9:98:c3:d4:ff:8b:d5:7f:9e:b8:25:
                    29:e8:e1:52:cd:39:f5:74:07:79:55:0d:f1:20:3a:
                    42:68:29:a1:75:e3:1a:d9:19:45:0f:af:d3:70:ec:
                    20:32:14:f1:8c:d7:e2:56:ce:61:bf:ff:47:36:6c:
                    4e:d6:75:f6:94:a2:28:6c:65:d2:7c:50:18:34:e0:
                    69:d5:9a:27:45:21:c3:7a:a7:5a:e7:6b:3c:f5:52:
                    d1:6b:1f:e6:2c:d7:1e:74:78:f5:c8:1c:84:3e:48:
                    8d:47:fa:ff:3a:c5:6f:b4:47:bf:7d:d1:a4:38:87:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:68:47:63:3C:DA:08:90:FD:31:71:E9:86:71:C1:6F:AE:15:FB:CF
            X509v3 Authority Key Identifier:
                keyid:94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:89:92:a8:4b:9c:12:5b:b0:dd:d0:56:13:1f:2a:35:c7:f1:
         d5:9c:a5:e2:68:c5:67:ca:25:b9:7d:d9:23:20:a4:86:f1:bb:
         cb:47:f1:67:03:c9:82:1d:93:5e:26:fe:c4:74:a1:57:9d:03:
         21:16:18:a0:fc:eb:bf:98:3f:c7:bd:a3:83:b9:72:36:58:b7:
         d5:00:94:76:78:89:20:b7:26:16:a4:49:94:43:7a:c1:9b:0b:
         80:d6:fc:26:eb:c3:dc:b7:de:3a:f6:29:6c:c0:c3:ea:f1:b0:
         03:ed:b5:f4:fe:29:fe:6f:68:9d:43:bf:c9:6e:05:d1:b6:84:
         dc:b4:08:50:58:04:4d:55:8b:27:ba:60:ff:f2:16:bc:56:fb:
         3b:20:b1:30:d1:9b:3e:e7:73:72:0f:4a:2f:85:b6:27:e4:97:
         6b:3b:a3:f8:b5:ab:aa:06:2d:0b:39:a1:18:06:fe:58:09:83:
         f3:66:63:bf:b1:08:fd:33:1c:3a:aa:83:a8:06:8b:13:2b:58:
         77:9b:02:a7:af:d2:94:cb:70:94:71:1b:b1:28:27:be:a8:7c:
         a1:44:6b:0c:e1:d0:e9:1d:8b:b9:b3:16:16:15:94:b6:07:9b:
         f6:7c:de:e2:72:fe:ec:42:a0:7d:ed:71:e9:f1:98:4f:cf:c5:
         0a:fb:39:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:04:26 2026 by rpki-client