Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File:                     LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier:          Nqia5RE2X1iLDPE6MkOjX+HwrwIrs38XxxqlXwuzeN0=
Subject key identifier:   AD:22:80:70:9D:82:91:FC:87:8D:CD:50:61:0D:AF:A1:FA:60:7B:78
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer:       /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial:       019F859F6E1BB639585F8250FD432B56977C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number:          08F0
Signing time:             Tue 21 Jul 2026 17:00:45 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:45 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:45 +0000
Files and hashes:         1: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
                          2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: mVIVL4imgHezP1Uif1xrwGDU1stflUOakGbkcWxyYL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:6e:1b:b6:39:58:5f:82:50:fd:43:2b:56:97:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
        Validity
            Not Before: Jul 21 17:00:45 2026 GMT
            Not After : Jul 22 17:00:45 2026 GMT
        Subject: CN=ad2280709d8291fc878dcd50610dafa1fa607b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:a2:a5:6b:e4:28:2e:99:bc:22:cf:5a:9a:
                    ea:41:59:d8:66:de:f6:2f:ec:c8:38:72:97:f3:73:
                    0a:15:9e:46:12:f0:ec:ff:87:48:88:10:08:95:e7:
                    cb:73:33:91:88:1e:5b:16:e6:3f:c4:1a:52:5f:60:
                    55:d2:01:f7:3d:2d:bf:bc:35:7a:24:da:39:11:f5:
                    54:c6:18:ea:1f:2e:27:8f:32:4c:d4:bf:2c:66:70:
                    dd:07:4a:04:9b:f3:27:8d:dc:47:30:39:8b:9e:ab:
                    69:da:56:c7:bf:e2:6a:ae:21:db:0d:d1:8d:61:5b:
                    64:2d:59:c0:c4:83:d0:eb:43:8e:a2:24:11:ef:d3:
                    b3:18:e2:f7:87:fe:78:bb:01:d1:1d:3e:c2:d1:15:
                    31:f4:80:a8:3e:92:e1:1b:26:c7:03:86:33:a3:22:
                    38:3f:26:b5:7e:86:5d:88:47:a4:6f:01:01:da:cc:
                    b8:be:c6:4f:d5:a1:15:4f:7e:06:4a:84:db:3f:2a:
                    9a:60:b5:7a:08:ba:c6:9a:56:35:3e:ce:08:73:97:
                    6e:a6:98:b8:db:bc:a1:be:15:8a:76:1a:dd:05:32:
                    c7:1c:05:7a:33:13:e3:6d:e6:d9:92:6d:0e:0d:e8:
                    99:37:72:1c:68:c6:32:4b:a2:5d:78:2b:1d:3f:17:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:80:70:9D:82:91:FC:87:8D:CD:50:61:0D:AF:A1:FA:60:7B:78
            X509v3 Authority Key Identifier:
                keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:dc:39:f7:a3:25:77:87:bb:f3:df:7e:7b:14:6d:9c:6f:e2:
         83:70:65:d8:09:82:3c:2f:6a:90:a8:b5:bb:f7:77:53:b5:83:
         21:a8:c4:43:a5:d0:19:2e:76:78:38:44:12:51:ed:55:53:de:
         3e:14:68:53:4b:47:ef:08:58:4d:c3:9b:a9:e4:9c:29:9b:08:
         64:25:8f:b8:95:58:d8:8a:49:13:7d:53:c5:78:8e:2b:23:d1:
         22:b5:df:be:d2:fe:8b:8a:1e:55:33:eb:4c:4c:36:29:cc:af:
         8f:64:f4:b9:aa:19:59:65:0b:12:da:4b:fc:3e:ab:32:be:97:
         a8:49:ae:98:7c:15:83:b2:f7:c6:25:4e:d1:7b:cf:c2:72:ca:
         4c:b2:21:d4:53:dc:bd:2e:8e:3d:ee:f5:41:bd:d8:7e:8d:8d:
         f6:88:09:81:c1:fb:7f:a5:00:39:e5:43:e3:26:40:63:74:7f:
         a6:57:99:02:cf:59:df:db:c5:f0:d8:a4:35:8d:5e:fa:b3:7f:
         30:77:7e:76:2c:8f:f0:dc:2e:86:3d:2b:fc:37:39:06:f7:e5:
         31:28:a2:d7:39:85:be:45:a7:4f:c9:38:fc:ee:aa:cb:ad:ee:
         24:ab:05:f9:1c:13:9e:7c:57:f7:ae:e9:54:fc:9c:75:d1:aa:
         3b:c7:33:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fn24btjlYX4JQ/UMrVpd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl
Zjk3NjMwHhcNMjYwNzIxMTcwMDQ1WhcNMjYwNzIyMTcwMDQ1WjAzMTEwLwYDVQQD
EyhhZDIyODA3MDlkODI5MWZjODc4ZGNkNTA2MTBkYWZhMWZhNjA3Yjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEOipWvkKC6ZvCLPWprqQVnYZt72
L+zIOHKX83MKFZ5GEvDs/4dIiBAIlefLczORiB5bFuY/xBpSX2BV0gH3PS2/vDV6
JNo5EfVUxhjqHy4njzJM1L8sZnDdB0oEm/MnjdxHMDmLnqtp2lbHv+JqriHbDdGN
YVtkLVnAxIPQ60OOoiQR79OzGOL3h/54uwHRHT7C0RUx9ICoPpLhGybHA4YzoyI4
Pya1foZdiEekbwEB2sy4vsZP1aEVT34GSoTbPyqaYLV6CLrGmlY1Ps4Ic5duppi4
27yhvhWKdhrdBTLHHAV6MxPjbebZkm0ODeiZN3IcaMYyS6JdeCsdPxdiGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0igHCdgpH8h43NUGENr6H6YHt4MB8GA1UdIwQY
MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt
ZDBhZWNkNWQ3MDQyLzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy
LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAytw596Ml
d4e7899+exRtnG/ig3Bl2AmCPC9qkKi1u/d3U7WDIajEQ6XQGS52eDhEElHtVVPe
PhRoU0tH7whYTcObqeScKZsIZCWPuJVY2IpJE31TxXiOKyPRIrXfvtL+i4oeVTPr
TEw2Kcyvj2T0uaoZWWULEtpL/D6rMr6XqEmumHwVg7L3xiVO0XvPwnLKTLIh1FPc
vS6OPe71Qb3Yfo2N9ogJgcH7f6UAOeVD4yZAY3R/pleZAs9Z39vF8NikNY1e+rN/
MHd+diyP8Nwuhj0r/Dc5BvflMSii1zmFvkWnT8k4/O6qy63uJKsF+RwTnnxX967p
VPycddGqO8czVg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:19:47 2026 by rpki-client