Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File:                     _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier:          Yns1/Lb0KfmlcsQ6bVs6BlmLPFLof0BoLhgy9Lubn2w=
Subject key identifier:   88:AE:AB:C0:B2:42:EB:23:25:97:70:73:AD:17:2E:32:D9:18:90:4E
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer:       /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial:       019F13E6EC761FE82A7135CE588944F6FE44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number:          07A1
Signing time:             Mon 29 Jun 2026 15:02:08 +0000
Manifest this update:     Mon 29 Jun 2026 15:02:08 +0000
Manifest next update:     Tue 30 Jun 2026 15:02:08 +0000
Files and hashes:         1: M-XgOjesPXIogjBIQr0FL2b7KV0.roa (hash: cfiY/wJuu827u4/W0gn3sJ9LCmjPRCXCxBqRyHWf5wA=)
                          2: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: ytJ84oX5e7g4q223SR8eeOh5PovmtayfeH7PqkO/Pb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:e6:ec:76:1f:e8:2a:71:35:ce:58:89:44:f6:fe:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
        Validity
            Not Before: Jun 29 15:02:08 2026 GMT
            Not After : Jun 30 15:02:08 2026 GMT
        Subject: CN=88aeabc0b242eb2325977073ad172e32d918904e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:dc:cb:3c:71:2c:86:53:35:c0:63:82:be:
                    47:87:37:d8:8b:f0:17:be:4b:b4:21:bb:b4:6f:f1:
                    74:c8:45:0a:6b:7e:ee:24:d8:48:f3:fe:3a:a3:dc:
                    a3:68:63:2b:82:d4:2a:c1:4f:c4:f8:eb:07:47:9e:
                    05:52:7a:f4:6f:45:39:77:57:19:0e:be:16:83:d4:
                    ac:91:85:b6:ff:5a:e4:e9:cc:a3:d5:7b:b0:c7:a1:
                    40:58:28:12:3f:b4:48:ed:38:37:31:ea:3d:a4:22:
                    6b:1c:71:48:d3:f5:5a:e5:66:b7:d9:b1:f3:d9:77:
                    2a:ab:f6:3d:ac:97:82:63:c8:44:4e:36:08:5a:d4:
                    01:8b:93:a0:be:76:bb:d9:98:67:5c:5f:2e:52:29:
                    a4:a5:31:b5:c4:a0:5f:d6:6e:20:44:1b:cc:fa:ad:
                    04:51:68:c6:d0:b3:36:32:fa:d6:6a:1d:31:c7:56:
                    64:ea:84:a8:ca:31:2c:b2:b9:bc:4f:ee:45:2f:a7:
                    d9:7a:d2:ac:19:15:70:84:a0:31:69:79:c7:4d:45:
                    28:13:80:c6:2f:dc:b1:21:a6:6a:3b:60:63:e3:47:
                    ec:4e:9d:60:ac:84:37:17:f7:72:7a:d5:c1:f0:de:
                    04:52:4e:11:a6:7d:00:5d:28:4b:63:73:66:7f:da:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AE:AB:C0:B2:42:EB:23:25:97:70:73:AD:17:2E:32:D9:18:90:4E
            X509v3 Authority Key Identifier:
                keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:41:dc:14:b1:aa:ec:28:f7:8d:8a:f3:ac:67:7a:b8:f6:77:
         f6:6a:5c:8b:5b:e1:57:d2:78:60:2d:ed:d8:0a:bd:9b:23:db:
         8f:3e:57:2e:4b:5d:43:e0:d7:83:e9:94:c4:21:21:dc:a5:de:
         f5:b4:dd:4d:81:30:65:58:b2:f9:71:b1:4e:58:de:04:ec:fe:
         c8:36:cc:af:c5:52:1b:b6:de:d1:f0:8d:cf:c1:ae:cf:77:13:
         86:cb:b5:53:9e:10:3a:6b:13:97:bb:61:ec:2e:82:a7:93:2c:
         8b:71:4a:c8:9a:1b:66:78:b9:6d:ed:33:c0:9f:d5:a5:bb:15:
         5b:96:94:5b:53:00:64:32:1a:75:60:ac:cd:c9:2e:fc:66:e6:
         d6:18:ed:38:d2:c7:9d:74:61:d6:8a:c7:b4:f1:f0:ec:e0:5e:
         a3:b2:97:60:e0:32:98:0a:b5:67:18:de:fb:0a:67:dd:86:92:
         0e:c9:fc:08:cf:16:ac:28:b6:6d:7e:85:29:5f:84:7a:7c:12:
         f1:c1:96:6a:d8:25:6d:47:c9:27:c0:8a:f2:35:47:08:08:38:
         ac:59:d9:39:46:18:86:d1:96:5e:5a:79:83:67:69:b8:ca:c2:
         15:04:29:23:c1:3d:87:8b:9c:41:5e:64:4e:4e:ba:ea:44:cc:
         4c:8e:1e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:47:24 2026 by rpki-client