Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File:                     7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier:          ymxoYJzm+ulpEM4swHX3T16WoA22kZhjanHuYPxigcg=
Subject key identifier:   06:90:76:7E:14:58:B0:BF:73:72:BE:9C:5F:51:E4:D0:56:66:BB:87
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer:       /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial:       01A001DCF621135F145575A40EB320625485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number:          1842
Signing time:             Fri 14 Aug 2026 20:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:53 +0000
Files and hashes:         1: 6XsZO_TltMpWaIXpEJ9j4Ijt3Wo.roa (hash: AmndDW7NkmhQPmIE+LZ+wdkjraSPxi3//yw9gxzh3WQ=)
                          2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: cFEa9wlOjBHheUXk+YZLs8YZmy8OnhoMwG7pjOVIn8U=)
                          3: qS1FhvHNjTct9kkj2vIxWEw1yv8.roa (hash: WpowF4fjiVOFY59c2MXRRHLypjY6PRS8W4ndaISZRLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:f6:21:13:5f:14:55:75:a4:0e:b3:20:62:54:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
        Validity
            Not Before: Aug 14 20:00:53 2026 GMT
            Not After : Aug 15 20:00:53 2026 GMT
        Subject: CN=0690767e1458b0bf7372be9c5f51e4d05666bb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:32:04:af:d6:31:bf:fe:3f:9a:e2:f3:72:
                    cf:75:bb:51:ba:23:6d:3a:ad:44:75:92:74:e0:6f:
                    84:2e:8a:fc:a9:ed:c5:4f:54:62:1f:dd:5d:c6:49:
                    09:98:a9:ab:47:b1:ee:40:74:ae:13:ae:da:e3:a1:
                    2b:60:60:f3:54:ab:e1:5d:b5:40:4f:86:b9:4b:df:
                    de:8a:f6:29:d6:aa:f3:d8:8f:3c:2e:33:1e:fe:2f:
                    89:ce:c4:ee:8e:6b:38:c0:0e:81:bf:df:2d:b7:27:
                    f8:9e:5e:44:0d:60:12:85:5f:a7:e7:51:7b:fd:cc:
                    0d:be:c9:cf:90:ff:0e:ed:5d:50:5d:b9:44:de:a2:
                    f7:c4:bd:3c:b7:c3:cc:e4:b2:4c:75:82:a3:4a:d4:
                    92:45:0e:22:1e:94:5f:41:0f:bc:03:61:13:93:96:
                    94:d3:18:97:fa:e3:23:6d:51:7f:96:94:29:13:18:
                    f2:e2:b8:b7:a1:fd:14:3d:84:bd:bc:85:52:89:bc:
                    38:3a:cb:4a:3e:f8:f2:df:68:7d:e4:a3:a6:b5:13:
                    8e:29:53:86:a4:c4:97:2b:26:76:e2:72:7b:a3:a9:
                    68:ec:e8:1e:a5:01:cc:75:81:85:07:b6:52:a4:f0:
                    4f:f4:e7:a3:80:7e:ff:2d:ee:2a:af:bb:68:ae:76:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:90:76:7E:14:58:B0:BF:73:72:BE:9C:5F:51:E4:D0:56:66:BB:87
            X509v3 Authority Key Identifier:
                keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:0b:62:cf:c2:29:0c:9d:3c:cc:05:9c:52:77:ac:99:dc:
         21:53:1b:de:7d:b8:68:47:f0:8b:83:66:f5:75:7d:b3:e5:f0:
         da:be:96:3e:e4:e1:47:5e:20:1e:5b:58:78:57:3a:56:fb:84:
         34:8d:d2:c8:f1:c1:9b:d6:74:ac:fa:fe:8d:49:18:cc:72:12:
         40:83:30:db:ef:7d:a3:6d:df:a4:fc:fd:1b:e3:5b:16:2a:77:
         2d:34:5d:71:df:a7:56:c7:c6:30:b8:bd:e0:19:68:c2:44:fd:
         c7:0f:35:d2:84:39:19:22:77:67:dc:fd:2e:8a:25:7a:80:d5:
         60:bb:8b:1b:9f:e5:c6:cc:3a:84:59:09:d3:fe:b1:61:d0:9a:
         70:c6:25:87:3f:25:50:a3:82:0e:13:55:6e:04:bf:10:49:e0:
         97:c5:cb:6c:70:2f:b4:7a:34:93:d4:80:9b:43:cd:1b:e9:64:
         c0:77:9d:f3:e3:79:3a:f1:a1:3d:86:b6:7e:01:07:df:14:f2:
         c4:23:41:13:da:c1:de:eb:2b:f9:55:78:cb:07:82:2a:4f:39:
         28:75:06:e3:4e:91:dd:33:d9:8a:a5:32:8f:8c:05:a0:c6:16:
         c6:ff:58:b5:ec:bb:20:eb:2f:c3:76:a7:98:ac:d9:5c:eb:ef:
         25:93:f9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:06 2026 by rpki-client