Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File:                     lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier:          JxJA5e2bMEBG2MhCwMGNAl794lEclt0B8EQ3uj84xW4=
Subject key identifier:   C1:E9:42:FE:FC:3D:0B:51:22:6F:FA:4E:FF:BD:09:4D:F9:47:DD:32
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer:       /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial:       019FA2298559E3207F6C0EEEDBFD5CF993D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number:          1970
Signing time:             Mon 27 Jul 2026 06:00:57 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:57 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:57 +0000
Files and hashes:         1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: S2QjqJqGvoYzSHxzHM8kSiNdyVymxuOwY6ozEyjH0Ks=)
                          2: xufioavVjF8CEbGx1cHltSCyEPE.roa (hash: yxyXkFpI8SjkVfT6SLtd6jSu4JdIMIm/t1CqSzD3wWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:85:59:e3:20:7f:6c:0e:ee:db:fd:5c:f9:93:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
        Validity
            Not Before: Jul 27 06:00:57 2026 GMT
            Not After : Jul 28 06:00:57 2026 GMT
        Subject: CN=c1e942fefc3d0b51226ffa4effbd094df947dd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9b:76:a5:ff:f9:60:fb:60:e5:e1:2c:14:13:
                    27:6d:46:56:39:73:fd:e7:ce:e2:b7:1d:7e:7a:81:
                    9e:81:2b:32:d0:4d:86:c1:8e:56:94:1d:a7:65:a8:
                    c1:19:26:a1:39:8b:33:fb:1b:c5:1a:e1:02:d2:f7:
                    51:26:8b:ed:d6:45:5c:42:5b:f4:4e:95:fb:c9:84:
                    af:78:25:5e:3b:04:67:da:4c:5e:1b:cd:83:19:d2:
                    38:fb:4a:53:3d:1e:64:51:ab:b3:4b:e3:cd:bf:71:
                    fd:86:1e:11:08:1f:58:0c:b1:10:fa:54:c1:89:06:
                    5e:37:7f:81:41:37:bf:34:1f:7e:8b:d4:d2:b2:ab:
                    61:73:01:f5:20:97:3f:03:8e:80:f0:ad:fb:79:41:
                    e0:a1:70:fe:ab:73:98:65:63:b0:b0:74:b3:88:c5:
                    59:2b:5e:27:de:13:04:05:4a:87:85:9a:71:40:45:
                    b2:19:4d:d5:51:5a:a3:11:3b:68:95:c6:ee:28:21:
                    44:44:07:ea:29:08:b2:cb:a6:6a:d0:c3:0c:78:f9:
                    10:87:42:0d:3a:61:c6:ee:f9:1a:b0:a0:87:7a:94:
                    6a:e6:a6:dd:7c:02:76:07:e7:56:96:3d:21:36:92:
                    56:c3:e2:5d:b7:ac:80:39:b0:80:f5:47:8e:2a:83:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E9:42:FE:FC:3D:0B:51:22:6F:FA:4E:FF:BD:09:4D:F9:47:DD:32
            X509v3 Authority Key Identifier:
                keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:23:a6:c5:4b:de:b6:eb:2f:81:15:47:f3:92:fc:ee:34:
         87:a3:fc:82:2c:07:d0:fb:12:99:35:2f:03:a1:2e:89:00:13:
         b9:1d:a8:0a:e5:cc:09:6e:60:08:f0:ee:1a:2f:42:01:1c:21:
         8b:1b:8c:b0:66:36:b2:34:8f:53:b6:a6:10:55:e1:07:d7:50:
         f6:ef:40:b2:f5:6c:66:67:36:41:69:bb:03:7a:6e:9d:04:e8:
         5d:af:04:ac:1f:f4:0f:f6:2b:25:90:55:a7:9b:18:45:5e:93:
         94:a2:5d:78:49:63:8d:d0:a6:68:4d:db:5a:03:d6:f9:d0:0d:
         47:87:0a:2d:e8:c3:af:68:d2:10:0f:7f:19:89:22:38:59:2c:
         01:ae:88:53:89:ec:15:1b:f7:ce:10:c3:c4:0f:d2:c4:f7:96:
         82:ea:7c:1a:be:55:3f:2d:41:ad:12:50:b6:9c:af:f3:fd:68:
         eb:f6:b2:cb:36:9a:d8:7f:ac:e6:17:fc:46:54:5a:d5:66:0e:
         73:fa:9d:27:2e:06:40:da:be:b6:89:c7:b3:9b:8b:86:ae:75:
         98:18:e5:8b:b3:55:c4:fe:3e:a7:6a:88:8e:26:99:6f:c7:60:
         a2:cc:ee:7c:2f:a0:7d:37:bd:ba:e7:f6:27:3c:14:c7:31:65:
         73:da:09:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKYVZ4yB/bA7u2/1c+ZPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzgwOTM1ZTdlOGEyMWVjMzJiNjVhN2ZjNGVkN2Q0Njgy
Nzg1MjEwHhcNMjYwNzI3MDYwMDU3WhcNMjYwNzI4MDYwMDU3WjAzMTEwLwYDVQQD
EyhjMWU5NDJmZWZjM2QwYjUxMjI2ZmZhNGVmZmJkMDk0ZGY5NDdkZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZt2pf/5YPtg5eEsFBMnbUZWOXP9
587itx1+eoGegSsy0E2GwY5WlB2nZajBGSahOYsz+xvFGuEC0vdRJovt1kVcQlv0
TpX7yYSveCVeOwRn2kxeG82DGdI4+0pTPR5kUauzS+PNv3H9hh4RCB9YDLEQ+lTB
iQZeN3+BQTe/NB9+i9TSsqthcwH1IJc/A46A8K37eUHgoXD+q3OYZWOwsHSziMVZ
K14n3hMEBUqHhZpxQEWyGU3VUVqjETtolcbuKCFERAfqKQiyy6Zq0MMMePkQh0IN
OmHG7vkasKCHepRq5qbdfAJ2B+dWlj0hNpJWw+Jdt6yAObCA9UeOKoNyzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHpQv78PQtRIm/6Tv+9CU35R90yMB8GA1UdIwQY
MBaAFJU4CTXn6KIewytlp/xO19RoJ4UhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjIt
ZWNlMDg4ZjAxODI3LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjItZWNlMDg4ZjAxODI3
LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7sjpsVL
3rbrL4EVR/OS/O40h6P8giwH0PsSmTUvA6EuiQATuR2oCuXMCW5gCPDuGi9CARwh
ixuMsGY2sjSPU7amEFXhB9dQ9u9AsvVsZmc2QWm7A3punQToXa8ErB/0D/YrJZBV
p5sYRV6TlKJdeEljjdCmaE3bWgPW+dANR4cKLejDr2jSEA9/GYkiOFksAa6IU4ns
FRv3zhDDxA/SxPeWgup8Gr5VPy1BrRJQtpyv8/1o6/ayyzaa2H+s5hf8RlRa1WYO
c/qdJy4GQNq+tonHs5uLhq51mBjli7NVxP4+p2qIjiaZb8dgoszufC+gfTe9uuf2
JzwUxzFlc9oJ8A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:09:05 2026 by rpki-client