Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
File:                     LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft (raw, json)
Hash identifier:          BjDEv64E4IR/inil2A7WA1D4ESJ5XNBSasWDqR56cKM=
Subject key identifier:   35:AD:FD:19:4A:CA:3E:39:A2:FC:16:BD:BF:5D:F2:34:72:6F:62:E8
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Certificate issuer:       /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial:       019FEEC48E352827B3E8ED3461EEC234901C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
Manifest number:          032E
Signing time:             Tue 11 Aug 2026 03:01:26 +0000
Manifest this update:     Tue 11 Aug 2026 03:01:26 +0000
Manifest next update:     Wed 12 Aug 2026 03:01:26 +0000
Files and hashes:         1: LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl (hash: VTi30NF7lBG5du7DjFDja4MgtY00I8EwV96FZToQVIY=)
                          2: ZuRiJrHEXIEyvdR2BocpMqUSb5U.roa (hash: 6iowdJnD01GgbZ2pYBxXG0sn8POT0XWOFt/y9TQZ+oY=)
                          3: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (hash: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=)
                          4: p38nf1_J-hf5pJoRzzg0ttvCGMc.roa (hash: VNYm4Y42SOlQ9dXOHkzUE+m/pzdyaj+7nbqcjEjzt8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Aug 2026 23:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ee:c4:8e:35:28:27:b3:e8:ed:34:61:ee:c2:34:90:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
        Validity
            Not Before: Aug 11 03:01:26 2026 GMT
            Not After : Aug 12 03:01:26 2026 GMT
        Subject: CN=35adfd194aca3e39a2fc16bdbf5df234726f62e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:ef:ee:09:11:1e:62:7e:8e:8e:7c:52:50:
                    64:9a:b2:ed:6d:2f:a0:59:fa:89:0d:99:6e:44:4f:
                    97:87:49:f5:c1:50:10:70:bd:c9:6b:ef:b2:03:13:
                    67:c7:34:25:b9:6c:e0:7f:79:c7:c4:7a:40:f3:e6:
                    9b:4a:1e:28:53:dc:75:10:c4:9c:df:2d:0a:8a:06:
                    1f:27:ef:dc:3e:e4:3d:d5:ca:16:60:b3:1f:bb:aa:
                    75:6f:03:84:6d:9c:ac:3b:3b:86:4a:5d:ac:83:30:
                    9e:f8:8e:af:5b:11:01:cb:9b:27:e6:aa:48:48:21:
                    4d:74:1c:66:5c:a0:11:df:d8:d5:e2:7d:04:9a:7b:
                    42:cd:3a:3e:60:d2:06:bd:29:fa:46:a9:c7:18:ea:
                    b7:2e:0c:c0:d0:f2:36:58:72:ae:d9:8c:b3:d8:d0:
                    61:7d:59:ae:d2:72:12:ff:5e:3a:3d:99:79:04:d2:
                    dd:67:86:e6:76:51:7e:0d:ec:af:ac:9e:72:45:f1:
                    fe:e4:65:21:f2:b4:87:27:7b:be:6f:d8:90:d3:37:
                    55:41:32:74:16:5e:d3:0d:06:fb:ac:2c:86:03:91:
                    d4:1a:d4:f7:dd:7f:76:bd:b9:0b:5b:72:a7:3d:be:
                    32:9e:60:67:02:8f:51:c9:48:6e:8a:06:ec:15:49:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AD:FD:19:4A:CA:3E:39:A2:FC:16:BD:BF:5D:F2:34:72:6F:62:E8
            X509v3 Authority Key Identifier:
                keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:67:5d:2e:0a:e7:36:61:ea:4d:af:f3:09:e0:d8:59:e1:ea:
         7f:22:e4:17:ff:25:19:d5:b9:80:ee:57:f9:d0:53:4f:63:a5:
         c0:72:e0:e6:0a:03:b2:0b:70:5c:de:73:8e:ea:81:a5:6e:3c:
         f6:a6:8c:a5:0d:1c:fe:54:2b:9c:f7:66:ff:cb:b0:73:82:56:
         01:b6:61:a3:8f:72:8a:f0:08:8e:53:7d:c7:87:ac:58:b2:1f:
         cd:8c:f0:c8:7f:d3:44:b0:a2:6e:76:a9:5f:fb:2b:e4:16:41:
         d7:0a:0c:33:6a:a9:2a:50:ba:5e:44:8a:57:97:fb:69:f1:59:
         68:76:f3:25:69:1b:38:f0:1a:12:a4:10:3f:fb:80:96:e0:06:
         1c:54:40:e2:1d:7d:d6:d6:10:7a:ea:8d:25:4a:e1:15:de:23:
         f7:3f:e1:d1:35:ac:a3:45:90:7a:b0:69:6f:b5:74:32:26:c2:
         7f:3e:65:2a:69:61:3b:4a:b4:3a:b8:33:de:cb:10:f7:10:79:
         c5:5e:bd:dd:6c:3e:f2:e1:01:eb:4a:42:28:c7:a1:31:9f:98:
         42:a0:3b:1b:83:e8:c3:71:34:f7:45:5c:16:35:cb:28:7c:5a:
         f8:bb:75:83:7d:98:8c:c0:82:1a:2d:6a:6d:22:da:8e:ce:8e:
         ec:57:b8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 08:18:56 2026 by rpki-client