Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
File:                     lWCHIpBdg1KkDKpGoGES6mpEYA4.mft (raw, json)
Hash identifier:          D8TknBPIHP8jbpgatSNzOKIAXBXRGsvmwvOeMqbW2ww=
Subject key identifier:   7C:8D:F6:2E:6E:52:D6:11:F2:A2:EB:5C:E1:5F:A7:C8:C1:1E:D2:A0
Authority key identifier: 95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
Certificate issuer:       /CN=95608722905d8352a40caa46a06112ea6a44600e
Certificate serial:       019F577E8A6DD75333250340C6FC057E13B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
Manifest number:          22
Signing time:             Sun 12 Jul 2026 18:02:18 +0000
Manifest this update:     Sun 12 Jul 2026 18:02:18 +0000
Manifest next update:     Mon 13 Jul 2026 18:02:18 +0000
Files and hashes:         1: 6gfsbp70NcwcNxJT8XMgqV4g908.asa (hash: Di3Vjzbs6+arwrS0sNW5XttvE64t8QV4IW+z0/vEuPw=)
                          2: 7z7bFp40wPTbt5RvIZtTppWl7AM.roa (hash: lwNSwOHOkunLWIvv4A5ENj1DeD3yKEj+lVowF+Ei8vY=)
                          3: KDCDR5HMfski0xwt6UzkMSAG708.roa (hash: V7yjpYjttVxBzbdwJHm85I1dbdth+qcfBSlmVeGdWlY=)
                          4: KH370sNYu21avkL8lpe4CVDI6IQ.roa (hash: DzzaFBH+1mwllU7379SPzlQjcpZBkQqIzj2ch2xa5ec=)
                          5: OI5EhOJCNnbBRSuXNvgjvNEPq1Y.roa (hash: oD26JJOT6DwdR4GxVKpP9CnRulkt+gNmlzlwVyBAeto=)
                          6: lWCHIpBdg1KkDKpGoGES6mpEYA4.crl (hash: kCNoIgfpiSo2yIZhyVa3GravgAxOTPCNVXNOHRR5djY=)
                          7: vcJsXSmebygkiO1u98sDd5yvTS4.roa (hash: E+7qJmCAiPJjSB0MZl/CtlkcxsQXp3zBWufxUli/XlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jul 2026 18:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:57:7e:8a:6d:d7:53:33:25:03:40:c6:fc:05:7e:13:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95608722905d8352a40caa46a06112ea6a44600e
        Validity
            Not Before: Jul 12 18:02:18 2026 GMT
            Not After : Jul 13 18:02:18 2026 GMT
        Subject: CN=7c8df62e6e52d611f2a2eb5ce15fa7c8c11ed2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:d2:fa:0e:62:df:ec:96:e8:51:f0:a1:1f:
                    9d:04:fd:20:5e:34:2e:74:c7:94:be:5d:08:13:f6:
                    ee:f8:aa:fe:9c:c4:a4:3c:21:d3:8c:64:38:f0:d2:
                    93:bc:33:98:0c:79:65:2a:4f:ef:39:30:77:e4:d4:
                    ef:33:de:f7:ad:91:e7:4f:32:4a:8e:fc:f6:55:94:
                    a9:79:59:b5:ad:3a:56:c5:83:d2:41:43:36:df:fc:
                    cc:29:58:d7:dc:f2:77:27:aa:f3:1b:5b:1e:15:30:
                    08:76:61:d9:26:7a:9d:05:da:18:1a:13:34:88:22:
                    9c:4b:49:e4:ff:3c:64:26:85:15:28:64:c7:c1:fd:
                    fb:03:2b:ae:e1:ea:a6:5d:43:a1:bf:01:0c:fd:8d:
                    a1:3c:6e:6f:1d:7e:09:b1:5e:43:e0:24:55:6e:f5:
                    18:8d:5d:2b:ac:bc:e6:82:9d:9a:06:cb:c8:d8:4b:
                    b3:f2:83:0e:57:9c:3b:ed:5b:40:a4:34:ea:2a:be:
                    76:ec:90:85:c2:bc:f6:2f:26:68:a9:e7:5c:c6:8b:
                    11:18:a9:fa:d1:ff:75:0e:fb:c6:a0:4c:76:ad:07:
                    84:56:4c:2f:4b:bc:5f:b0:a5:ee:8e:46:df:ea:a8:
                    b7:fa:9e:87:1d:32:64:d1:df:eb:fa:be:1f:25:88:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8D:F6:2E:6E:52:D6:11:F2:A2:EB:5C:E1:5F:A7:C8:C1:1E:D2:A0
            X509v3 Authority Key Identifier:
                keyid:95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:1f:c2:e5:0b:ce:a6:18:2e:89:e7:47:4c:3d:ed:5a:33:
         82:19:3b:8d:e3:72:d9:e5:5c:16:da:0d:d5:5c:32:d1:42:67:
         80:cd:85:8b:f8:4e:25:ef:09:08:67:1d:9d:3e:bb:b3:a3:95:
         a0:25:ef:cf:2e:b8:ec:a2:07:44:cc:07:02:57:4a:31:a7:6c:
         ac:27:5f:e7:b0:08:e2:9f:ea:c2:c6:7c:e8:c9:88:d3:65:4f:
         e4:6c:a9:6a:90:79:b2:89:d1:f3:71:69:25:4f:c6:5a:38:fc:
         41:31:01:8c:82:03:9c:19:d5:77:18:0b:18:7e:b4:7e:b4:3b:
         83:bd:c0:eb:7c:4a:02:e4:ef:af:ab:f1:be:9f:e6:62:70:7b:
         28:86:80:4c:7f:19:2a:13:9b:57:e9:9f:80:00:f9:31:83:0a:
         a5:4e:0e:30:86:d0:8f:b5:98:3b:3d:2e:10:43:a8:19:d9:00:
         ec:68:e7:f3:dd:4b:6d:a9:43:8c:bf:28:f4:c0:ee:31:96:5a:
         59:cb:e5:c1:e0:7c:3c:7d:66:53:fc:ad:01:2a:df:21:a6:c9:
         d9:71:e7:83:da:a0:4a:06:37:73:be:e1:0a:8e:18:29:3d:be:
         a4:c7:42:a7:8f:21:d0:6e:55:db:a8:5e:8b:bd:f8:22:19:5c:
         32:4e:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:08:49 2026 by rpki-client