Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File:                     LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier:          qJLeqGzIe75ELjkDOK/1pmWjfeZpKg4sAeFZlqxPZLY=
Subject key identifier:   57:EC:80:E7:C7:13:31:8D:CE:C9:13:A0:6B:1A:7D:80:0D:17:05:C6
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer:       /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial:       019F130A6DC1D5F2EC4D6915E9DE9FEEBCDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number:          1998
Signing time:             Mon 29 Jun 2026 11:01:18 +0000
Manifest this update:     Mon 29 Jun 2026 11:01:18 +0000
Manifest next update:     Tue 30 Jun 2026 11:01:18 +0000
Files and hashes:         1: 9l4eTxQiJdfwsUpte57Ojwmqkt8.roa (hash: emeHHUrFvsDMnCrOVZjdq3feYW1b8D0yrHBj07czvhI=)
                          2: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: lyecrcLQ2IiXym1Qf65Ux83JYJBEAdtx4WM13xKHyVk=)
                          3: cAVdSGytSyux4FQsZuWB3TVoUN8.roa (hash: RAtVEud/Ywx68w73bvy2E2uTPg4lltVhihmdYUF5drI=)
                          4: grtZ88A4ab4V_GiK5bfawAFeBik.roa (hash: Gok5HzoG6ye09AxYK0QJqUuAYdVlePP8eXldni6wygU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 11:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:0a:6d:c1:d5:f2:ec:4d:69:15:e9:de:9f:ee:bc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
        Validity
            Not Before: Jun 29 11:01:18 2026 GMT
            Not After : Jun 30 11:01:18 2026 GMT
        Subject: CN=57ec80e7c713318dcec913a06b1a7d800d1705c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:32:90:35:e3:d5:1f:ba:c0:ff:12:82:dc:75:
                    b3:6e:50:cc:84:80:bb:6c:e5:18:76:89:e5:21:51:
                    6a:00:8d:2d:ae:5d:e7:9f:aa:e0:2f:3f:3b:f8:42:
                    1b:00:60:ec:14:1a:19:1a:60:cd:e8:82:26:90:a6:
                    a9:bf:77:03:cc:b7:ba:53:89:e6:7e:08:42:ed:ce:
                    ba:58:8d:60:1a:8a:fa:a5:05:e0:7c:c3:ee:3e:54:
                    79:33:a7:ad:54:4b:5f:80:36:ad:9c:e8:63:ba:9a:
                    a1:f7:df:58:d1:20:89:dc:e8:84:b4:19:e2:7a:e0:
                    9b:5a:f8:74:24:33:e0:04:1a:62:ff:08:27:64:7c:
                    cd:26:fc:e2:ba:b7:6c:05:50:65:54:40:33:8e:07:
                    9b:6d:38:18:ac:0b:7c:63:10:59:bd:00:74:33:c3:
                    44:83:79:8b:a7:29:cd:b3:d2:52:f5:03:6b:7a:0a:
                    55:ce:44:93:7d:28:62:fa:f0:3c:0a:39:16:b9:5f:
                    90:70:8e:a6:4b:30:f5:84:1f:06:e3:59:04:26:c1:
                    8f:7c:40:af:eb:8e:fd:b4:dc:10:5e:32:4e:59:b5:
                    eb:20:c4:ae:a8:71:dc:17:71:72:3f:db:d1:dd:64:
                    57:a1:05:cb:f6:f1:a3:53:7d:35:08:e2:e1:e4:52:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:80:E7:C7:13:31:8D:CE:C9:13:A0:6B:1A:7D:80:0D:17:05:C6
            X509v3 Authority Key Identifier:
                keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:e1:bc:06:ff:dd:46:8a:a5:02:d0:8f:8f:25:06:3b:7a:
         a1:65:3a:17:d3:66:2a:38:87:36:70:d1:bc:6b:77:fa:fb:1b:
         66:10:cd:af:f5:3c:bb:94:2f:fb:02:f6:fa:11:96:60:5e:80:
         0c:36:eb:9d:f7:5e:18:b8:46:30:e0:60:cb:a5:ec:d6:44:c2:
         bb:3a:ec:81:da:6e:a2:0e:f4:dd:62:be:15:60:ca:b4:1b:c2:
         48:6b:1c:25:0f:40:48:ea:4a:59:c1:47:5e:81:76:ab:b4:a8:
         c9:4d:4b:31:df:8b:60:a0:02:84:cb:e6:59:6c:2d:d4:79:20:
         70:44:08:6a:49:43:42:19:8e:d7:f9:c3:3c:fc:a7:79:2a:aa:
         a9:97:8a:a2:57:ba:81:41:ac:d3:69:78:ef:ee:b6:eb:b4:f2:
         5f:39:02:db:16:a9:16:f0:b2:4b:15:45:40:cc:a9:15:ef:01:
         8a:01:9c:44:24:c2:22:e9:61:e5:fb:1d:ff:93:28:f1:f9:ab:
         db:57:fb:8d:cb:38:7d:f8:20:6b:cf:aa:7b:86:d3:3f:f3:35:
         26:51:41:7a:2a:b2:b7:b9:7b:8e:f0:ea:0c:a4:c4:c2:38:b9:
         ea:46:5f:d0:e5:04:ab:84:66:f6:41:a0:eb:38:c7:7d:5d:24:
         a5:5c:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:43:16 2026 by rpki-client