Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File:                     _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier:          7BV1/uv8OCAFMS8KdjwNgXAZj3Fs6O0xB+GTJBQNMOk=
Subject key identifier:   F8:26:63:19:33:E6:0F:E0:94:F1:06:6E:64:D8:62:3C:9A:CE:A1:B0
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer:       /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial:       019FFBA4B70A0DE9D0351B830233B93BD75E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number:          0819
Signing time:             Thu 13 Aug 2026 15:01:43 +0000
Manifest this update:     Thu 13 Aug 2026 15:01:43 +0000
Manifest next update:     Fri 14 Aug 2026 15:01:43 +0000
Files and hashes:         1: M-XgOjesPXIogjBIQr0FL2b7KV0.roa (hash: cfiY/wJuu827u4/W0gn3sJ9LCmjPRCXCxBqRyHWf5wA=)
                          2: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: S8inAAkLg9BECfTvhXm2gJ5TrzJRc6bsWesujZzTgTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fb:a4:b7:0a:0d:e9:d0:35:1b:83:02:33:b9:3b:d7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
        Validity
            Not Before: Aug 13 15:01:43 2026 GMT
            Not After : Aug 14 15:01:43 2026 GMT
        Subject: CN=f826631933e60fe094f1066e64d8623c9acea1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:61:55:08:15:21:e7:c0:01:ef:36:2e:60:
                    94:2a:6d:7f:bf:ab:77:71:5e:95:97:91:4f:92:1f:
                    40:a9:21:ba:d9:1f:ea:67:31:dc:6b:04:52:df:43:
                    2b:fe:64:85:ba:c1:f8:55:d1:85:af:77:5f:52:9d:
                    43:5c:a0:92:2c:15:73:8d:72:50:8a:8b:7e:c0:3b:
                    4a:39:73:ba:b1:41:5a:b1:d7:d7:0d:56:9d:c8:b1:
                    c6:bb:cd:93:59:3e:9e:85:c9:3d:df:46:d6:f1:15:
                    ce:39:ad:2d:c7:fd:46:79:c6:11:23:75:6e:14:28:
                    ef:b0:8b:97:31:79:d7:a1:d2:f8:2c:12:06:99:cb:
                    85:23:1b:ff:5b:1d:d2:3e:94:a6:a0:45:92:59:2a:
                    32:6a:fd:1b:6a:8b:8c:a9:4f:8c:5b:7b:e1:9c:58:
                    b4:2e:73:3a:d0:15:c5:ca:10:28:94:4f:26:3f:7a:
                    c5:c5:cc:72:e8:28:0c:31:3b:05:a7:f7:53:1e:d9:
                    80:ae:e6:e8:76:9f:0e:f2:d0:f1:57:24:82:b3:29:
                    c3:54:c7:14:54:62:6d:ac:88:9c:69:82:3d:dd:04:
                    e6:d9:8d:60:81:f0:ca:47:9a:26:9b:6a:ba:b2:03:
                    03:0b:5e:1a:85:b8:2c:74:18:51:09:8c:ee:16:c9:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:26:63:19:33:E6:0F:E0:94:F1:06:6E:64:D8:62:3C:9A:CE:A1:B0
            X509v3 Authority Key Identifier:
                keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:fb:42:28:a0:eb:1e:87:f9:fe:72:21:08:b6:e7:44:69:
         00:6f:4a:07:22:90:d7:e0:e7:ba:30:69:c6:12:76:67:3e:89:
         2c:e9:18:ef:18:fb:2c:04:c7:09:9c:16:e0:d1:a5:3e:13:32:
         6e:32:05:40:af:2d:12:48:1c:60:28:3a:a8:21:ed:d6:59:b8:
         47:1e:14:a3:0b:26:ea:4b:27:10:ce:c6:bd:5a:6b:a2:76:5b:
         0d:6d:9c:7b:2a:5d:f4:12:0c:4a:59:4c:74:f3:03:81:03:3e:
         38:9d:51:9a:12:ec:12:15:a0:94:8b:fe:7a:4d:35:b9:0d:ed:
         68:2d:27:a7:55:b3:31:8c:4f:6f:6b:77:b4:90:4c:a6:0e:0f:
         7c:ec:9f:f2:2b:cd:4f:95:f5:0a:2f:67:84:b4:69:4b:a2:3c:
         a9:c4:8a:ba:59:33:01:94:72:e0:82:6b:fc:3c:dd:ed:4a:9c:
         73:fe:c9:ef:ec:5c:aa:bf:4d:2f:47:08:5e:10:1b:29:be:49:
         ef:4c:38:f7:24:46:70:38:33:f3:e3:b4:79:be:9e:8c:9a:25:
         c7:b1:92:fe:87:1c:01:b1:c6:e4:c4:2e:7a:38:51:55:0b:9a:
         5f:eb:ca:c5:56:ab:93:ae:5e:a5:44:e8:7a:af:16:46:7a:5b:
         70:39:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:39:05 2026 by rpki-client