Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File:                     LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier:          visE3zDldrJ/l4BxBAFq4zaSI7sD87GMXukx2sX6d94=
Subject key identifier:   55:D8:17:3D:EB:78:03:C0:3F:11:79:8E:A7:F9:6A:7B:F2:1D:A5:96
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer:       /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial:       019F295B7AC0F69ED58C2A8A20DF0B7B27A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number:          198D
Signing time:             Fri 03 Jul 2026 19:01:28 +0000
Manifest this update:     Fri 03 Jul 2026 19:01:28 +0000
Manifest next update:     Sat 04 Jul 2026 19:01:28 +0000
Files and hashes:         1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: sHOKjLIt7Bc6AdcGacMcpEvy8l5nUNAvXKYz1r2H2kc=)
                          2: TpPJId1e5lG2meo0GsY8127KDCk.roa (hash: aMNWtngKVeTHR3PWHuMGJZAZEL09LOJBZOu+feFbIPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 19:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:5b:7a:c0:f6:9e:d5:8c:2a:8a:20:df:0b:7b:27:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
        Validity
            Not Before: Jul  3 19:01:28 2026 GMT
            Not After : Jul  4 19:01:28 2026 GMT
        Subject: CN=55d8173deb7803c03f11798ea7f96a7bf21da596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:89:db:c0:d8:75:f8:40:68:71:de:e4:5f:07:
                    09:5e:08:a9:81:81:de:87:be:18:68:f1:55:31:f9:
                    e2:70:9a:8c:64:06:02:a7:c6:00:e5:78:f9:81:bd:
                    d6:19:39:07:0d:f0:98:a5:f3:62:17:b4:82:9c:3b:
                    1f:a1:83:cc:6a:3b:fd:45:5a:d7:a4:d0:4e:8a:aa:
                    5e:d7:24:89:66:6f:6c:fa:ba:10:78:de:73:1a:85:
                    44:78:d7:ed:f7:97:e6:4c:6f:08:f1:a7:81:a3:74:
                    70:7d:e3:be:8e:d8:ea:03:05:77:1d:c8:ac:d9:9c:
                    a7:b5:5d:f0:c9:6c:80:6e:e0:1d:42:00:2c:c3:7f:
                    87:85:b7:7b:6b:3e:b8:ba:8b:9d:9d:96:f8:f3:1c:
                    ed:d9:91:c5:d9:71:37:63:07:d8:6b:cf:e1:88:fc:
                    f8:f5:a1:d9:75:7d:1f:52:fe:92:49:42:cd:c3:42:
                    57:f1:5a:a3:38:a9:6e:ad:69:11:2e:09:e9:cd:ea:
                    9c:99:9d:41:95:d3:68:f7:c0:ce:e1:da:a3:1a:9c:
                    01:af:f1:27:d5:d0:01:00:ad:67:d1:82:40:f6:b1:
                    14:22:35:89:29:2b:1b:fc:08:4c:b0:e9:22:a5:4c:
                    8f:77:e4:d4:fd:7a:50:a2:56:18:19:3c:62:be:41:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D8:17:3D:EB:78:03:C0:3F:11:79:8E:A7:F9:6A:7B:F2:1D:A5:96
            X509v3 Authority Key Identifier:
                keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a7:fa:04:20:b3:13:1b:bf:6b:93:5f:e4:b8:2b:fc:83:ae:
         5b:e7:e7:e9:81:54:c0:ce:ea:23:97:bd:4c:45:c4:ab:7f:18:
         28:c1:94:5e:ba:80:7f:bf:ea:a0:98:9f:2b:f1:77:18:7c:e4:
         ee:ac:ad:be:a5:b4:49:88:ee:0e:66:12:76:71:8e:ab:68:42:
         08:37:37:87:bf:51:f2:96:01:f5:9f:7c:27:6d:e5:ce:80:40:
         0d:ca:a3:86:23:6e:6b:74:6c:a3:0a:55:c9:ad:38:a5:3c:33:
         8a:46:84:5e:87:85:57:e7:99:18:25:ea:fc:48:33:60:22:2b:
         35:c7:f7:b3:5a:a2:f7:8d:01:e8:b9:ba:bb:c3:c5:d3:12:7b:
         b8:38:d7:88:9e:7b:1f:c4:f2:a4:03:4a:5d:95:6c:8b:80:e0:
         60:03:86:83:16:86:18:1a:e3:60:c2:9e:95:82:96:c2:e9:69:
         78:62:fc:7a:a2:eb:a7:24:03:da:38:71:0f:57:cd:11:47:05:
         f6:e4:84:95:4e:da:d1:95:53:bc:25:bd:0d:b7:e5:47:48:20:
         bd:0a:b8:75:40:a8:2f:be:2b:45:18:91:ed:b1:5d:1d:94:94:
         0b:9e:92:53:8b:d7:c7:39:97:ab:90:be:39:3b:d8:c6:c0:02:
         9f:a8:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:47:56 2026 by rpki-client