Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
File:                     LtQIejcn8EfglttpLgA9bAET8eI.mft (raw, json)
Hash identifier:          +6FIZYGfl4AnhsMsK8ji521G2S/fZCoEE1y7uI5m91s=
Subject key identifier:   0F:B3:21:BA:D2:2E:BF:CF:40:26:81:A1:52:67:E8:33:DE:D4:27:E9
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Certificate issuer:       /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial:       019F85D5E6B394CC27EB02A797E4A626EE55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
Manifest number:          035E
Signing time:             Tue 21 Jul 2026 18:00:15 +0000
Manifest this update:     Tue 21 Jul 2026 18:00:15 +0000
Manifest next update:     Wed 22 Jul 2026 18:00:15 +0000
Files and hashes:         1: LtQIejcn8EfglttpLgA9bAET8eI.crl (hash: C7SRVpog5wSFR1HUxF2cH3D2pjvRdIdWh/vgGpFwtCo=)
                          2: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (hash: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d5:e6:b3:94:cc:27:eb:02:a7:97:e4:a6:26:ee:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
        Validity
            Not Before: Jul 21 18:00:15 2026 GMT
            Not After : Jul 22 18:00:15 2026 GMT
        Subject: CN=0fb321bad22ebfcf402681a15267e833ded427e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:4e:0f:04:cb:80:03:c0:21:61:2b:3d:2e:
                    a2:4f:27:15:f7:38:5c:02:90:c2:3a:52:96:4a:0e:
                    4f:49:0c:2e:60:7e:38:7c:23:45:c9:ad:fe:e6:16:
                    de:09:8e:94:8a:fc:55:39:9a:51:98:cf:4c:12:63:
                    98:16:da:74:8c:ee:2f:89:33:e1:3a:77:e4:02:b0:
                    e8:59:b3:25:60:ad:92:8f:ff:36:81:1b:e3:35:ba:
                    b4:45:4c:0c:d7:19:9b:cb:7c:6f:d8:69:df:e4:ad:
                    e8:3d:76:9a:f8:5e:bb:7d:1f:05:b7:27:ea:4f:38:
                    01:f8:f8:57:f1:eb:9d:7b:f4:43:58:56:8e:97:f5:
                    81:7e:58:29:a5:f5:0c:1d:af:90:7d:e9:c0:e0:2e:
                    52:f6:10:e4:b8:d2:af:9d:ee:a6:f9:d7:a9:45:4f:
                    81:fb:19:f7:b2:e3:51:82:c9:75:86:4e:c8:2e:dc:
                    90:f6:8c:c6:12:f5:48:10:0b:02:63:05:e4:19:e0:
                    bc:db:d7:7f:3d:88:60:a0:bd:5f:d1:db:20:a0:ed:
                    64:b6:09:3e:00:0f:4b:81:11:2c:20:33:56:6c:b1:
                    bf:67:71:86:fa:59:c5:06:1e:9b:16:90:e2:38:76:
                    2d:34:10:fa:28:12:88:b4:00:5c:58:1a:0f:22:f7:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B3:21:BA:D2:2E:BF:CF:40:26:81:A1:52:67:E8:33:DE:D4:27:E9
            X509v3 Authority Key Identifier:
                keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fc:5f:e8:f5:d7:a2:3a:b9:26:6f:cf:2b:31:1b:05:93:79:
         57:15:7e:01:3e:13:db:26:45:a6:91:03:a1:b6:54:48:c7:89:
         29:fe:30:b4:82:e3:4e:c8:c2:fb:7d:c6:02:58:70:a9:aa:94:
         65:3f:57:43:7c:fd:dc:4c:fa:53:7b:7c:a8:74:25:25:9e:69:
         45:b5:df:07:07:f5:d8:b3:bc:f0:4b:b2:e3:86:c5:45:96:0e:
         bc:3c:48:b7:b2:a2:d4:91:f6:d5:14:9e:7f:b0:81:25:93:43:
         cc:b3:0e:87:fd:e7:c9:76:f7:a3:17:0e:c3:65:40:e1:a9:88:
         f3:c0:b2:3f:7d:1e:33:6b:d6:cb:19:b1:3c:3c:8a:d9:a8:f2:
         20:e2:64:66:8e:87:f2:25:59:ce:fe:18:c4:44:50:4b:ee:f4:
         72:fe:be:b9:ac:a1:74:c0:b9:01:e0:33:47:ff:88:aa:5a:83:
         02:3b:e8:55:85:65:7b:a4:bc:3f:76:b1:97:f9:b1:e7:b9:a9:
         c7:01:28:4b:ce:91:b7:68:19:2c:b2:07:ec:cb:92:34:c9:f5:
         d3:63:fd:d0:f5:de:6e:67:e0:d8:b6:54:87:0d:8c:49:29:0b:
         d1:b9:2f:93:65:47:00:9c:4d:4e:56:1e:98:9f:f1:b0:cf:17:
         68:9a:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:05:42 2026 by rpki-client