Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
File:                     LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json)
Hash identifier:          KXl0V0BOrUd2NhEw4oTXkC4C603ZrXPH3Lp1jN4hGDo=
Subject key identifier:   E8:85:EC:E8:65:30:6A:1D:84:89:6A:5B:FA:B7:63:00:59:8E:B8:15
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Certificate issuer:       /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial:       019F867AE8101E4CCAAE2E1B00EEDEAE85AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
Manifest number:          19C9
Signing time:             Tue 21 Jul 2026 21:00:29 +0000
Manifest this update:     Tue 21 Jul 2026 21:00:29 +0000
Manifest next update:     Wed 22 Jul 2026 21:00:29 +0000
Files and hashes:         1: 5jc2wZ5h8yJqzKoCHWycS9o75jA.roa (hash: oCcrDJgLBEA08xoRtgAzvU9F//XHVcP3y0L3DCbnQ2I=)
                          2: 7GoUojZZ6diF9qsUn9IS925PZ7o.roa (hash: Sz9PIg50qPliDwsm2Y9z/qtxdUkq5QME6EMfyNzUMrk=)
                          3: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: ct3urTpd6PiptBw3i13yCyqHBlL2u158lfyx8adcbyA=)
                          4: ZqdZ82l6x_sImb0z2qHfrZ32niI.roa (hash: 5tEujsZakk6ZY2BbCuw7ovz7bymmGnvvS7AlQ1ZU4NA=)
                          5: c7lZje9uN1P8Z0Pai2JJbiwVpOQ.roa (hash: qt+6d63QI9K54qUjpXO2acJvethD5zarG3xunh8N+xA=)
                          6: mlNWM6dCU5UIxS4aP3BuiFtRgxY.roa (hash: TLA7VcAnegDakU8vEm/ShMfxKp3pK7fJGLX8w4pyHi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7a:e8:10:1e:4c:ca:ae:2e:1b:00:ee:de:ae:85:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
        Validity
            Not Before: Jul 21 21:00:29 2026 GMT
            Not After : Jul 22 21:00:29 2026 GMT
        Subject: CN=e885ece865306a1d84896a5bfab76300598eb815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:96:57:1d:a5:f8:fb:e6:10:c2:b7:98:e3:
                    20:39:8c:df:cd:11:78:4c:88:eb:b6:b4:0e:37:df:
                    42:2b:c6:cf:17:2d:3c:6e:28:6e:19:d6:80:03:26:
                    a1:e6:ac:e8:06:32:f6:9a:10:06:be:78:f1:fd:4b:
                    e0:8b:ac:27:5a:93:d1:b8:7f:bb:2f:8c:5f:bf:18:
                    e0:39:7d:a7:60:86:8c:ff:02:37:b1:67:42:0c:8b:
                    a5:82:19:29:dc:06:d4:4a:2b:9a:56:32:c2:44:1c:
                    c4:2d:bb:17:7f:a1:65:b9:59:c3:2d:46:a4:82:82:
                    26:f3:29:64:99:15:24:2a:f0:51:87:60:84:d5:22:
                    05:2f:ac:40:16:9a:78:4d:0f:d3:03:dd:f0:b4:f7:
                    d5:2c:72:5b:07:32:6d:53:a4:88:7a:93:8a:7e:62:
                    f2:2c:73:c3:c3:73:3e:7e:84:43:00:b8:9d:32:63:
                    62:cf:a2:6f:f4:f2:9a:24:c3:ba:75:09:33:8c:af:
                    9d:fa:fd:90:e2:23:94:52:f8:a8:03:61:40:63:09:
                    40:3b:f2:8e:53:0f:42:6d:c8:d0:cc:e0:53:e4:d9:
                    b1:09:40:ff:c6:99:4f:d0:1d:81:e9:eb:66:9f:33:
                    25:bd:41:74:f7:c0:51:81:70:5e:51:a2:bb:44:82:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:85:EC:E8:65:30:6A:1D:84:89:6A:5B:FA:B7:63:00:59:8E:B8:15
            X509v3 Authority Key Identifier:
                keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:2e:0d:45:94:31:34:d7:d4:ea:df:15:fc:af:f5:25:db:
         b1:cb:2b:1e:1a:fd:8a:97:2d:ae:15:df:22:5f:f1:55:98:fa:
         71:f2:9b:05:b6:a8:b0:47:2b:85:17:8e:a3:07:5c:c2:99:08:
         93:82:dd:3b:b9:04:17:8a:49:d2:bd:19:ee:8f:ca:76:08:43:
         2d:96:43:83:d7:04:ae:e5:c1:83:bd:2a:fb:d5:bc:66:68:a3:
         bb:26:28:09:81:03:8a:5b:6a:09:0f:87:c8:8a:8d:b3:c5:5d:
         05:3d:8b:03:4a:0c:f2:52:76:27:71:4f:e8:70:26:be:41:0d:
         c5:6e:9c:93:6b:5b:06:2e:80:91:da:22:bd:f9:3d:a2:c0:24:
         00:d2:75:e4:39:2b:07:86:18:e6:dd:cc:70:11:a1:73:24:90:
         80:89:c9:f9:a0:d7:da:a5:0c:6f:5a:81:12:9b:9a:81:75:44:
         a9:4b:41:d9:3b:04:ea:52:57:98:c9:6d:1f:1f:86:02:06:c3:
         b8:8b:49:8f:74:1e:8c:4e:5b:fe:59:b0:23:23:9f:26:aa:e2:
         be:6f:d3:db:b5:a5:1b:14:c0:68:e8:b5:c1:09:c6:e6:ed:6f:
         39:f3:d7:85:3b:11:54:97:25:cc:70:4f:bf:54:72:cf:f9:1a:
         2e:f6:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:11:10 2026 by rpki-client