Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File:                     LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier:          r620kOO4EXyoPOzMTvAkZj+0q+EvkTRQ803zBI0vJkg=
Subject key identifier:   DC:8F:05:EB:15:58:63:C3:C2:EE:18:67:34:00:31:C7:7F:E2:A0:04
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer:       /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial:       019FA1F221A6C7E20F2AE671DC94FE874648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number:          07D4
Signing time:             Mon 27 Jul 2026 05:00:27 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:27 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:27 +0000
Files and hashes:         1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: IW5fJqZkb8hJER/V+61RxDChGNNLsFa9kKCSnX263+Y=)
                          2: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (hash: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:21:a6:c7:e2:0f:2a:e6:71:dc:94:fe:87:46:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
        Validity
            Not Before: Jul 27 05:00:27 2026 GMT
            Not After : Jul 28 05:00:27 2026 GMT
        Subject: CN=dc8f05eb155863c3c2ee1867340031c77fe2a004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:7a:68:57:63:87:84:78:84:cf:31:9c:b3:
                    91:ad:98:ee:69:6c:49:36:80:17:bd:ee:8e:4e:7b:
                    d9:63:3b:bf:42:52:b1:02:83:c8:f9:86:16:93:dc:
                    dd:3c:11:c5:8a:aa:1e:ae:45:a3:a9:c4:1f:e9:a4:
                    9f:e8:7e:17:71:b4:94:f2:25:c6:ca:0f:e7:65:21:
                    6b:19:64:2d:4a:66:62:0c:96:17:30:30:16:31:58:
                    18:89:41:72:84:aa:91:d1:62:a9:d4:77:ec:88:b3:
                    a9:69:29:12:ec:d0:73:cf:5d:f2:75:36:e8:45:7b:
                    43:7f:2a:4c:18:00:b1:4e:b0:97:57:43:bc:bc:a0:
                    e0:75:b1:34:ac:a8:f2:37:b6:24:4d:2b:c5:93:ee:
                    d5:34:7f:f9:d6:8d:9e:5d:07:9c:62:67:95:db:51:
                    75:89:89:e0:04:c1:0b:f5:64:e3:a1:41:42:5e:bd:
                    45:0f:24:71:15:6a:0a:d0:7c:c3:31:28:a5:85:dc:
                    7f:47:7c:ba:c0:5d:36:17:fa:90:d3:14:81:9f:23:
                    c9:cd:86:3c:77:de:4a:b5:6f:27:91:b3:53:3f:21:
                    77:5f:8c:31:5d:68:2c:cb:f4:cc:dc:57:6d:b2:83:
                    b5:0e:42:d9:2d:67:a8:9c:9a:b0:54:cd:74:d3:74:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8F:05:EB:15:58:63:C3:C2:EE:18:67:34:00:31:C7:7F:E2:A0:04
            X509v3 Authority Key Identifier:
                keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:3c:a1:16:a1:75:8c:a5:b2:5f:9f:09:b0:71:e6:18:41:
         cf:06:9d:1f:5d:77:0a:d1:9b:ce:cf:36:a4:1c:31:8e:03:93:
         f7:6b:d9:82:0b:08:6d:3e:95:27:80:ff:d7:83:95:17:35:0c:
         91:b7:4b:e1:5b:8b:ff:05:ff:42:3f:1d:9a:f6:fe:be:08:19:
         4a:00:21:74:be:c1:09:81:a1:4f:cb:9f:48:cc:ed:da:77:6a:
         81:51:3b:4c:73:cf:22:32:0d:0c:82:36:bb:cc:b9:55:85:c2:
         4d:90:ec:60:b5:d0:2d:5d:db:fb:a1:e6:f2:11:94:77:c4:3e:
         5e:e2:14:5d:22:d1:a9:87:64:e6:06:b1:6f:dd:df:0d:3e:2a:
         be:f4:03:73:8c:38:49:d1:9a:ac:64:ac:33:9b:ce:1d:9d:f1:
         3c:c8:2c:8c:4b:1a:1f:39:a4:a5:e4:a5:2a:9d:26:8f:e2:ec:
         04:01:b9:c7:cb:14:ac:ab:72:6d:f6:92:5d:41:6b:4b:ba:0d:
         a2:4b:f8:87:6b:4b:51:c0:e4:5d:f6:75:dd:94:82:bc:4b:67:
         6e:65:0b:80:0b:ca:90:e8:69:27:f8:9b:a2:1f:86:aa:16:a3:
         bc:56:4a:80:6f:10:5d:ec:31:22:78:50:23:18:cb:61:68:4b:
         4b:5c:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:34 2026 by rpki-client