Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File:                     lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier:          04kLHuaV0IdlH4A/IawPR13+68rEXX9PTLVo8LJo0oY=
Subject key identifier:   72:96:32:A5:EC:DD:82:30:20:DB:B6:08:42:C9:67:0E:E9:C6:0C:29
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer:       /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial:       019F1A55FF14F9508A6A30C3D24F62E377D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number:          19BD
Signing time:             Tue 30 Jun 2026 21:01:11 +0000
Manifest this update:     Tue 30 Jun 2026 21:01:11 +0000
Manifest next update:     Wed 01 Jul 2026 21:01:11 +0000
Files and hashes:         1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
                          2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=)
                          3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=)
                          4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
                          5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
                          6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=)
                          7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=)
                          8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=)
                          9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=)
                          10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=)
                          11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
                          12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
                          13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=)
                          14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=)
                          15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: B8QXCS8aESpdal9zt+64hFkojFfxxfep391Epgcjq64=)
                          16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
                          17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=)
                          18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=)
                          19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=)
                          20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:55:ff:14:f9:50:8a:6a:30:c3:d2:4f:62:e3:77:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
        Validity
            Not Before: Jun 30 21:01:11 2026 GMT
            Not After : Jul  1 21:01:11 2026 GMT
        Subject: CN=729632a5ecdd823020dbb60842c9670ee9c60c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0a:c7:a6:76:6b:43:2a:73:e5:fa:90:76:96:
                    b6:08:d7:6d:5e:cf:d3:cb:65:09:20:3c:29:ea:7b:
                    20:9c:7f:41:1e:0b:bd:06:06:0d:14:12:a6:a1:3f:
                    fa:92:24:c6:55:1c:6f:fc:31:9f:a2:fa:08:00:ba:
                    33:53:f5:98:7c:86:d5:67:00:36:11:70:00:cd:ce:
                    16:be:8f:f8:ac:28:cb:6a:6d:48:ea:57:94:aa:4f:
                    c0:a7:9a:e3:25:ac:1d:c7:75:97:64:d7:06:67:1a:
                    c7:6e:ad:a5:54:20:82:4a:7e:58:1e:c5:ad:72:a4:
                    17:ec:d8:54:f4:21:07:90:75:cf:18:fb:e2:c0:c8:
                    71:a7:ec:76:f8:33:f8:26:a9:3e:2d:f0:e7:df:c1:
                    bb:03:09:67:fb:c4:5b:7f:92:2e:c5:ea:6f:96:6f:
                    d4:d2:b2:26:d0:2e:e2:2e:d9:09:88:da:0f:94:dc:
                    8d:11:a5:f1:0d:9d:b1:19:21:04:6c:7b:cd:11:0b:
                    5d:c5:91:9c:70:c1:3b:a5:d7:0a:0c:bb:d3:b1:ea:
                    01:e7:5f:bc:71:e3:1e:22:39:54:79:9e:83:41:81:
                    8c:7c:ed:3d:24:4a:fe:2d:36:9f:db:d9:9a:4b:52:
                    33:51:5e:32:23:3b:28:b0:37:9e:1e:80:a1:84:be:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:96:32:A5:EC:DD:82:30:20:DB:B6:08:42:C9:67:0E:E9:C6:0C:29
            X509v3 Authority Key Identifier:
                keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:39:72:c7:08:8f:29:df:72:71:d4:d1:86:e0:17:4c:06:e1:
         d5:76:ae:37:7d:8a:84:f9:e6:53:e9:8f:fe:45:79:29:0c:43:
         2d:11:94:31:ce:2b:7a:fd:6a:ba:c8:b7:47:af:89:34:f8:40:
         e7:c4:ef:02:ee:ad:50:af:83:e8:3f:81:f1:45:3b:83:66:12:
         51:f4:48:b2:8e:3b:fc:f7:68:b0:03:b8:b7:a6:d2:54:b9:17:
         c0:4e:76:0f:f9:d1:94:e0:44:ea:65:d4:5f:d8:2d:23:18:cc:
         6a:7d:e9:7b:4b:fd:66:d8:e1:62:10:87:b5:21:51:91:3b:d7:
         33:7f:1b:87:95:f4:c4:3a:1c:37:be:af:70:64:8c:41:7b:85:
         98:dd:31:ca:5f:26:01:81:79:30:f0:63:11:07:29:6d:ee:06:
         fc:84:ec:a6:a3:6c:fe:0b:43:97:f7:68:a7:21:78:95:a2:99:
         37:c6:10:c0:75:6d:35:70:62:6b:3e:5a:98:90:58:01:e7:2a:
         65:ca:17:0e:cf:8d:dc:29:13:da:3d:78:90:97:45:bc:29:fe:
         22:ba:8f:5f:df:61:11:bc:4f:3f:be:8d:3a:2f:12:39:64:aa:
         27:78:7a:37:59:6f:ae:f6:b8:5c:f7:a7:21:3e:71:8e:a1:10:
         3c:74:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:36:41 2026 by rpki-client