Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File:                     LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier:          wqgI/tQmn80MAmq6d30gwzYMk+BaLmzdXyu6jNV1CwM=
Subject key identifier:   F0:FA:48:49:E6:35:C1:9D:D0:7C:45:5C:27:18:BA:AB:01:FE:70:55
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       019F85D759647CD4E7A350201D9C5D83137F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number:          0A78
Signing time:             Tue 21 Jul 2026 18:01:50 +0000
Manifest this update:     Tue 21 Jul 2026 18:01:50 +0000
Manifest next update:     Wed 22 Jul 2026 18:01:50 +0000
Files and hashes:         1: 99amBODsi9s5b9k8-QBJkKF-3q4.roa (hash: OHHvjBhCrGH4FeeziC6XYn1JSgPeAHm7eeCU0qJDW20=)
                          2: EPLdVGqgndROjM1h4IO_FWuwnaY.roa (hash: /YB21bOG3+IaQBnf7/CbNsMYZ3z/ogc3ZIoAgo5ItaU=)
                          3: KNn_2PtjJ9az9kgHYbQJzI1nyJ0.roa (hash: YhlgK2Gpf5+1ITN07EOB0hCxCRClr+jKp9E/HLwGsdE=)
                          4: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: d70FjpW9yL0KSVlS4Gxy4dPrNLis5Hc1fpVJuTDeK6U=)
                          5: fbal2Br98lSXtg0RnGPPTjowGa0.roa (hash: RIojxTuuDh3dUT1tXWggbfWitD+sBxAZGS6Rfs/+xC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d7:59:64:7c:d4:e7:a3:50:20:1d:9c:5d:83:13:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Jul 21 18:01:50 2026 GMT
            Not After : Jul 22 18:01:50 2026 GMT
        Subject: CN=f0fa4849e635c19dd07c455c2718baab01fe7055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:41:93:f4:45:6e:41:75:82:42:15:3b:08:
                    26:fd:90:5c:18:9f:17:01:39:d7:e3:43:15:de:46:
                    58:41:e2:32:da:43:52:e6:8f:07:09:61:71:f2:b9:
                    cb:24:4f:4f:c5:c3:11:d9:f9:82:37:7a:ae:b1:dd:
                    c8:f1:ca:7e:3b:ae:25:e7:02:d5:62:6f:73:1e:40:
                    ae:cd:96:55:b0:aa:b6:6a:b1:40:28:d4:f4:59:d8:
                    7f:1c:2e:35:23:a5:bd:1a:c0:b6:5d:e0:68:8f:20:
                    da:e5:fc:db:cd:f2:e5:d0:11:f5:eb:99:12:80:69:
                    be:08:e8:1b:8a:69:b2:6d:1d:d5:29:55:e8:b3:53:
                    b4:1c:e4:62:4c:79:1f:bc:b9:48:af:61:2e:c3:d4:
                    8b:42:9d:6f:e7:15:a4:a2:88:47:4b:28:04:21:9c:
                    c5:c2:e6:99:4b:25:92:56:e9:36:8b:14:e5:ba:36:
                    2c:a9:dd:e6:7f:e5:3c:af:16:a8:54:7d:08:21:b3:
                    51:1b:77:2a:6d:97:36:2a:a1:1d:5e:08:e5:38:d2:
                    c6:a3:98:05:f7:c6:f1:d6:6e:8d:00:1c:22:ac:2c:
                    66:02:8a:b0:21:43:1f:bf:2b:a5:8f:4a:c6:48:67:
                    00:13:cd:92:91:25:15:a4:57:3e:89:56:7b:6e:49:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FA:48:49:E6:35:C1:9D:D0:7C:45:5C:27:18:BA:AB:01:FE:70:55
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:cd:20:16:b1:b7:1e:a4:e3:ba:98:d7:e9:01:da:8e:12:
         e4:55:2a:cd:ae:ff:c8:ee:0c:5a:40:97:4f:64:86:dd:c8:7d:
         a4:aa:55:75:f0:7c:ce:4a:fc:cb:02:26:9b:a2:df:75:6c:61:
         44:aa:93:bd:fd:3b:27:c3:01:0c:86:5c:48:37:f8:38:2d:28:
         cd:95:7c:1b:97:f3:a0:65:d6:3e:79:01:67:d3:4e:cb:61:75:
         98:75:b5:a3:cc:1f:33:f7:de:30:39:83:66:4c:59:19:55:a3:
         90:05:d3:b4:d8:e0:1e:db:0e:50:73:93:ad:62:12:ef:a0:e9:
         2a:48:2f:b9:21:d4:64:fc:11:c4:ea:9f:4f:be:10:66:dd:a7:
         b9:52:28:a7:58:c9:ff:f1:ac:2d:11:56:b8:79:e2:04:bc:b1:
         66:02:40:92:43:0c:05:f4:e2:fc:e5:a9:0d:1d:30:3a:3d:a2:
         8b:39:c1:d1:bf:27:c2:13:c9:bc:b2:55:cd:b2:ff:2c:ee:fd:
         fd:fc:d6:3e:7b:59:ed:4b:18:94:26:0a:59:b4:a4:21:3e:54:
         bb:6d:44:fc:a9:36:ec:d4:e4:5c:b6:83:5d:fb:96:2b:e1:66:
         5c:28:2e:52:fd:a8:bf:3b:53:40:3a:73:cf:e4:7b:a5:ca:f2:
         9a:c5:bd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:55 2026 by rpki-client