Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File:                     Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier:          RWmQpSA6A0ADL8T5I7DBoWEjdGv+kD1MTUlDtarKOv8=
Subject key identifier:   F9:3E:E7:1E:15:82:3B:70:7A:A5:8B:34:4B:E1:06:30:E9:5C:F3:A0
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer:       /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial:       019FA33C4A92C0FF67E5A7C7CBA0CCA15BB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number:          19ED
Signing time:             Mon 27 Jul 2026 11:01:05 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:05 +0000
Manifest next update:     Tue 28 Jul 2026 11:01:05 +0000
Files and hashes:         1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: 8dusfoCVMcSyuPqoaJKqA5P7bjuIirn6faXBwg4vVyU=)
                          2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
                          3: a4RVALqt3vHeDDskNW3A5CdGc-U.roa (hash: TGxk49hSl+fpcglkMzdXiM6aB3O9APTDcKaAiPFnS+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:4a:92:c0:ff:67:e5:a7:c7:cb:a0:cc:a1:5b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
        Validity
            Not Before: Jul 27 11:01:05 2026 GMT
            Not After : Jul 28 11:01:05 2026 GMT
        Subject: CN=f93ee71e15823b707aa58b344be10630e95cf3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:d8:d2:bc:f9:1f:2d:08:1a:8a:60:8d:1c:
                    50:ba:3c:d3:1e:70:90:61:68:96:f5:56:2e:93:6a:
                    72:14:ff:85:46:de:d1:a8:9b:9d:5e:46:d0:f9:0f:
                    f8:99:c0:66:be:17:01:14:49:eb:f9:d6:0e:15:f8:
                    c8:20:db:69:2c:ed:8d:9a:be:f2:d5:6a:e5:04:72:
                    49:3b:76:ad:37:23:1b:1f:a1:eb:eb:08:57:07:b3:
                    89:00:83:c3:6b:ce:af:d8:52:07:28:d0:94:81:99:
                    11:64:01:12:7e:90:71:8b:67:cb:04:0a:d1:bc:af:
                    ea:af:da:69:cc:9a:a9:c2:ed:38:16:16:9c:9c:5f:
                    91:7b:51:17:4b:30:bc:97:e6:0e:04:25:39:5d:1d:
                    db:ce:4a:ee:05:e5:2f:8d:a6:70:f1:31:e5:e1:e7:
                    ba:5a:64:79:23:23:e4:49:1f:1b:17:09:3e:2e:e7:
                    05:60:b1:1e:91:32:ce:89:23:d9:4c:11:46:00:de:
                    c3:50:ce:6a:10:9d:6d:c7:5c:59:4b:0c:77:85:63:
                    f5:24:a3:05:d1:00:70:3f:6a:78:90:3c:6f:aa:ef:
                    4d:2b:6d:fd:31:32:a1:f3:ed:64:ae:96:e9:42:c3:
                    3b:be:13:b9:f9:77:b6:9d:2c:34:e5:4d:c2:58:21:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3E:E7:1E:15:82:3B:70:7A:A5:8B:34:4B:E1:06:30:E9:5C:F3:A0
            X509v3 Authority Key Identifier:
                keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d5:d0:69:46:ff:48:95:26:73:0a:cc:1b:98:52:6b:72:24:
         f5:e1:31:a4:19:30:eb:a2:76:30:02:68:29:26:7b:03:ce:24:
         f6:20:47:88:36:0f:c0:b1:fa:58:2a:05:27:ff:d4:84:32:9f:
         7d:cc:fe:04:d6:ad:e9:d1:e5:ff:53:e3:2e:52:8a:4b:7b:6e:
         cf:16:3c:6d:33:30:5e:08:b2:af:47:7c:14:12:82:2e:64:a1:
         e9:b2:fc:02:4c:fc:71:31:a8:29:b6:a0:bc:63:97:90:92:ec:
         93:95:aa:0e:f4:e8:2e:a6:c5:37:06:4b:18:4f:8e:4b:10:58:
         04:62:e1:f1:85:1d:48:3e:c7:15:24:67:59:c8:58:c0:7e:f2:
         21:6a:25:94:78:cd:78:4d:e6:1e:40:0b:3f:34:d8:52:9c:17:
         d0:bd:7f:4d:c2:5b:9a:46:20:19:f7:75:88:e4:12:b8:7b:b9:
         a5:14:b8:10:20:db:fb:d5:28:13:08:4e:45:2a:79:20:5a:c9:
         73:c3:12:c7:30:d9:e4:09:ad:8d:4f:e5:93:78:c9:11:f9:71:
         1d:6e:ce:51:17:c4:96:57:35:58:c5:e1:4b:09:1d:0d:5a:0d:
         35:3e:37:2c:f5:40:69:25:eb:11:75:41:a2:d9:c6:4f:46:05:
         05:fb:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:49:35 2026 by rpki-client