Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
File:                     Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft (raw, json)
Hash identifier:          RbO+ghwFRPZg9TiXVN/AHAxAqqyKN5Aejn0cMXDsuFg=
Subject key identifier:   F2:3A:EF:A7:A7:62:6C:99:B5:37:66:43:B5:C8:91:E0:37:E8:16:4A
Authority key identifier: 2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
Certificate issuer:       /CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Certificate serial:       019F81546CDFD0F5B69093C806985956EDEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
Manifest number:          F3
Signing time:             Mon 20 Jul 2026 21:00:21 +0000
Manifest this update:     Mon 20 Jul 2026 21:00:21 +0000
Manifest next update:     Tue 21 Jul 2026 21:00:21 +0000
Files and hashes:         1: Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl (hash: roJO838WgHw+4HK4qt5Yu0NQc1pKNIbvtfJxmZNM4hU=)
                          2: Uny2MgmTOohOF4BGAwFHFYH0KJs.roa (hash: Hdl7jGTsKmTRUmRObQs3XRCDB7iUF6evKCo5QMlo1+g=)
                          3: jgxF8uNjw0FJMTIpLdGbhnc20Y8.roa (hash: W4/5mMOIFv+IOfMz9VsQjlSsNom5QdzMSpTVZZ7Z+5k=)
                          4: ru7hTHED5bacQX5NiNWyNtNkE6E.roa (hash: Kxyrq99WXIYtPAR/nabYKrZwHSHfCnBmfTWCGs/Kt3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:54:6c:df:d0:f5:b6:90:93:c8:06:98:59:56:ed:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
        Validity
            Not Before: Jul 20 21:00:21 2026 GMT
            Not After : Jul 21 21:00:21 2026 GMT
        Subject: CN=f23aefa7a7626c99b5376643b5c891e037e8164a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:cf:9f:2e:55:01:3a:0b:bd:9b:c1:3a:6d:
                    16:b8:b0:3a:a3:4a:7a:54:da:a9:ec:f4:92:31:ef:
                    32:05:40:ed:4c:de:af:f5:53:d4:25:9d:13:b2:96:
                    ed:a3:a3:0b:61:a0:0d:b6:48:60:4d:f3:de:dd:db:
                    0b:1c:54:b0:60:15:30:16:ac:9a:4a:4b:19:d0:d9:
                    70:6f:68:f8:29:e6:2d:48:9e:f8:c6:56:de:6f:af:
                    ad:89:a2:6d:51:a4:70:e6:65:87:8f:17:e7:8e:f7:
                    f6:01:d0:20:ff:5d:e4:ee:aa:6e:0c:49:2c:f1:e1:
                    e8:64:af:ca:06:97:a3:74:90:cb:26:f9:09:72:30:
                    fc:78:4d:e8:bc:90:0c:3b:0e:0f:8c:36:62:66:b8:
                    18:c8:b2:ad:c9:f1:50:c7:c8:e7:83:65:9d:f8:b4:
                    dd:32:e6:e5:1a:20:6b:54:ad:ae:6f:e2:8e:09:34:
                    d8:06:8e:66:99:6e:b5:a0:63:06:e2:ee:39:1b:8b:
                    fd:e1:cb:66:73:a4:db:21:2e:07:84:7b:2c:a0:72:
                    4d:87:b6:4b:d8:c8:f3:af:5e:6a:4b:79:44:20:16:
                    b1:01:76:d5:3c:18:b3:56:9d:3c:5a:70:36:9b:19:
                    f3:b7:77:9a:d5:af:59:1e:b6:52:1f:d6:d5:03:21:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3A:EF:A7:A7:62:6C:99:B5:37:66:43:B5:C8:91:E0:37:E8:16:4A
            X509v3 Authority Key Identifier:
                keyid:2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c9:05:34:10:b8:fd:e3:a3:cf:88:87:1f:f5:a7:3c:f1:97:
         1c:7a:1a:a7:db:d7:a3:0c:cb:93:49:4d:c4:c2:1b:e0:c9:5b:
         9e:99:24:b3:25:86:d9:84:f9:3c:49:1f:61:40:e8:39:5b:fb:
         bb:1b:53:b1:d2:e5:51:c1:b7:e7:c2:42:30:c2:07:b5:a8:8e:
         8e:89:1c:35:fb:ad:c6:92:ea:ff:de:f6:73:44:52:e4:9f:41:
         13:2a:ed:64:22:3f:fd:fb:7b:46:9c:2b:18:e4:33:68:eb:2a:
         f8:1a:93:b2:00:06:d4:a9:fe:ed:45:80:ce:11:c1:6a:30:e2:
         8d:32:31:68:8e:a0:82:14:44:64:7b:c4:3f:0f:c0:ac:f5:d7:
         99:78:72:11:ba:8f:c9:bc:46:f1:49:0e:15:40:55:b9:8a:9a:
         08:76:03:35:87:24:fd:24:02:75:00:50:2f:5e:5e:f9:05:3c:
         09:26:26:82:c8:c2:98:2e:79:78:1f:2e:3b:29:97:92:ab:a5:
         aa:34:0d:14:1c:4f:ad:0c:f9:ae:5f:ff:8b:6b:5f:e2:a0:b3:
         ac:92:13:65:a1:bc:97:e6:49:a4:53:46:ba:84:18:d1:e4:95:
         21:b1:15:1c:3f:1f:c3:c2:99:63:28:26:86:79:26:56:78:31:
         91:cc:e8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:11:48 2026 by rpki-client