Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File:                     LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier:          KgYCZFLFHAMHPk9IqTmN08sESuz7R4ummdlqqO5+n+k=
Subject key identifier:   C1:F1:BE:D9:DB:76:D6:62:1D:80:B3:0E:61:F4:4C:C2:38:04:68:1F
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       019F3E2B2FE78007DEC07EAF95E123DD428F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number:          19DA
Signing time:             Tue 07 Jul 2026 20:00:45 +0000
Manifest this update:     Tue 07 Jul 2026 20:00:45 +0000
Manifest next update:     Wed 08 Jul 2026 20:00:45 +0000
Files and hashes:         1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: ykyIy9Za4V2uzrUBKG9PL2aR3C1daXSQa2DMtXmEWhc=)
                          2: vQGqMk2tUWFQV3KWvNRVI4u6g8A.roa (hash: ETJTcUD8tj+bJ3F84d7NY+2CRj1SkXQZGuzA9XMRE3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3e:2b:2f:e7:80:07:de:c0:7e:af:95:e1:23:dd:42:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: Jul  7 20:00:45 2026 GMT
            Not After : Jul  8 20:00:45 2026 GMT
        Subject: CN=c1f1bed9db76d6621d80b30e61f44cc23804681f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:fd:08:33:49:38:5c:1c:97:fa:4e:15:91:
                    2f:65:b5:85:d0:f7:60:ff:3e:7b:1e:51:6b:61:2f:
                    51:66:e3:80:ff:22:40:1a:ac:7b:d2:d7:d1:c4:bd:
                    9c:1a:18:86:e9:6b:67:01:7b:9f:ad:39:97:94:10:
                    e4:bb:f1:70:41:97:a1:af:14:50:2b:03:3a:6f:1a:
                    47:4c:ef:ab:67:05:b0:50:47:6f:1e:01:dc:e3:3c:
                    dc:24:3f:0f:aa:b7:ec:a9:08:71:db:6c:0f:89:25:
                    94:16:03:c8:66:fe:1c:59:09:3b:7c:87:11:9e:93:
                    5c:92:8e:f2:44:7d:59:f0:4c:a5:c0:5b:03:0a:30:
                    15:65:2d:cd:f7:50:78:4b:45:5a:81:25:73:c2:ad:
                    85:70:aa:f6:d4:50:2e:20:6b:e7:d0:1c:6c:b2:8a:
                    99:92:d9:c3:b6:98:e5:f6:ab:68:25:07:2c:62:ce:
                    9c:dd:42:be:13:35:73:95:42:ff:bb:80:e4:dd:e0:
                    b4:c2:2c:64:57:fd:5b:b7:fb:6e:26:54:fe:4a:9d:
                    62:34:43:2d:1c:4f:cb:60:ce:f9:c2:dd:b8:c7:96:
                    11:af:17:59:58:8a:f8:0f:8b:3f:ad:ed:50:29:88:
                    b7:66:ff:7d:23:38:86:b7:f6:39:2c:9f:b0:18:b4:
                    c1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F1:BE:D9:DB:76:D6:62:1D:80:B3:0E:61:F4:4C:C2:38:04:68:1F
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:ec:5f:bf:1b:62:8a:12:f8:04:f7:25:c3:c6:ee:b4:b7:
         11:f5:b4:e4:7a:a9:9f:2e:6c:3b:2f:fe:8f:0a:ab:71:be:6f:
         98:f6:18:ee:52:4f:14:f4:cf:b6:44:38:c6:4d:58:07:0b:a0:
         27:01:e5:e1:9a:67:2f:d6:22:3c:6f:f7:0f:a7:f3:ad:1e:5c:
         e2:bc:ca:4b:16:50:0c:f1:69:1b:28:bd:36:b8:e9:fd:f9:b3:
         0e:4b:af:56:14:b4:bc:7b:48:db:42:a1:81:9e:fe:2b:35:b1:
         cb:6e:a0:49:2c:77:6b:eb:5f:fa:0d:af:fe:16:ee:74:97:de:
         05:79:32:46:6c:5d:e0:4d:a0:82:74:d7:f9:d0:c7:a7:de:5d:
         e1:0e:bd:2f:0b:6a:8a:6a:c0:f0:f1:2e:46:49:1a:61:8f:af:
         12:88:d0:71:7d:d7:97:ca:9d:87:c6:5f:a8:3b:fb:a9:ad:18:
         44:46:1b:61:7b:5f:60:84:6c:a3:a2:b3:9d:08:93:eb:07:a8:
         d7:ec:d9:1e:b0:f8:7c:43:6a:56:91:3c:0f:6c:ca:f9:60:67:
         21:dd:6d:d0:16:3a:2b:d5:47:3b:03:cb:ae:19:52:a1:63:96:
         2b:01:37:11:cf:51:57:d5:55:92:c5:b7:91:a1:9e:3c:57:42:
         8b:58:09:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8+Ky/ngAfewH6vleEj3UKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl
YWY0M2YwHhcNMjYwNzA3MjAwMDQ1WhcNMjYwNzA4MjAwMDQ1WjAzMTEwLwYDVQQD
EyhjMWYxYmVkOWRiNzZkNjYyMWQ4MGIzMGU2MWY0NGNjMjM4MDQ2ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv79CDNJOFwcl/pOFZEvZbWF0Pdg
/z57HlFrYS9RZuOA/yJAGqx70tfRxL2cGhiG6WtnAXufrTmXlBDku/FwQZehrxRQ
KwM6bxpHTO+rZwWwUEdvHgHc4zzcJD8PqrfsqQhx22wPiSWUFgPIZv4cWQk7fIcR
npNcko7yRH1Z8EylwFsDCjAVZS3N91B4S0VagSVzwq2FcKr21FAuIGvn0BxssoqZ
ktnDtpjl9qtoJQcsYs6c3UK+EzVzlUL/u4Dk3eC0wixkV/1bt/tuJlT+Sp1iNEMt
HE/LYM75wt24x5YRrxdZWIr4D4s/re1QKYi3Zv99IziGt/Y5LJ+wGLTBOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHxvtnbdtZiHYCzDmH0TMI4BGgfMB8GA1UdIwQY
MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It
NzM0OTVmYzA4ZmM0LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0
LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoHsX78b
YooS+AT3JcPG7rS3EfW05Hqpny5sOy/+jwqrcb5vmPYY7lJPFPTPtkQ4xk1YBwug
JwHl4ZpnL9YiPG/3D6fzrR5c4rzKSxZQDPFpGyi9Nrjp/fmzDkuvVhS0vHtI20Kh
gZ7+KzWxy26gSSx3a+tf+g2v/hbudJfeBXkyRmxd4E2ggnTX+dDHp95d4Q69Lwtq
imrA8PEuRkkaYY+vEojQcX3Xl8qdh8ZfqDv7qa0YREYbYXtfYIRso6KznQiT6weo
1+zZHrD4fENqVpE8D2zK+WBnId1t0BY6K9VHOwPLrhlSoWOWKwE3Ec9RV9VVksW3
kaGePFdCi1gJgg==
-----END CERTIFICATE-----
Generated at Tue Jul 7 22:43:56 2026 by rpki-client