Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File:                     LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier:          NDO/TTla8Las471iHF2RlbzdCtlpb0HzrAPVqPhFt0M=
Subject key identifier:   F4:09:F5:17:50:F1:47:E7:36:B0:80:48:D9:B7:4B:EC:15:FA:37:96
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer:       /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial:       019F58C7872A53ED8F61C2CE2FFE4CE55DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number:          19AC
Signing time:             Mon 13 Jul 2026 00:01:38 +0000
Manifest this update:     Mon 13 Jul 2026 00:01:38 +0000
Manifest next update:     Tue 14 Jul 2026 00:01:38 +0000
Files and hashes:         1: DQuypH-FSJ4vQcf0o0WUN-0Mc-c.roa (hash: CPSNBE1JDqZWrzRtLM0uStnUMuYrz40a9MwrDBSVFlM=)
                          2: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: 872n1yWm6kQsOeI+1JI4IsOuWgaQlvtYpbBmdtsgwQI=)
                          3: ORdc8rOF3cmXKW-LWiAz__THMfA.roa (hash: triuUpxRCnM8+3tuTZ+dsMN43CvFMeIZzgQgorkji7A=)
                          4: RUhmJdqw-3Gaw_JLROAhLOvB2IM.roa (hash: XdtV4zgfYLmkDs8xTK/8Ot/KM7BnvRi+tSC9tgSlImI=)
                          5: jYiU8bv569WiEs-qGefdtilWB8Y.roa (hash: kPGKYpkrFjV7H4hDvAWisI7rvp3jwldiGMNdXvER2ok=)
                          6: yV2ta5YIqZOtbWWi5XnowuWeO2Y.roa (hash: FMj28W2Mwf91c8T9pAxRJIkM3TCaa6JGRs6VpNG02T8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Jul 2026 00:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:58:c7:87:2a:53:ed:8f:61:c2:ce:2f:fe:4c:e5:5d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
        Validity
            Not Before: Jul 13 00:01:38 2026 GMT
            Not After : Jul 14 00:01:38 2026 GMT
        Subject: CN=f409f51750f147e736b08048d9b74bec15fa3796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:57:30:d3:84:c1:ae:dc:33:ac:c3:66:d7:
                    d3:e5:24:d3:b1:79:b6:da:49:10:bd:dc:98:23:5d:
                    50:d1:51:39:e2:da:25:88:f6:84:b3:86:a7:9c:23:
                    82:74:c6:24:11:85:0a:21:c0:47:ba:fa:38:3d:39:
                    47:e6:7e:e2:76:a2:1f:b7:e6:be:83:a6:bd:0d:d5:
                    9e:f8:24:a2:42:6d:71:af:df:a4:58:85:b1:68:70:
                    0f:79:a3:44:68:a3:60:d0:64:73:c2:ff:9e:88:4f:
                    91:66:10:91:1d:43:52:86:d3:39:1b:bc:fe:e5:d5:
                    c0:f0:b0:cd:24:14:b4:90:d7:65:0c:e6:cd:29:0d:
                    8d:5e:e0:39:09:d2:32:37:3a:33:e0:39:5f:6d:a7:
                    31:2f:50:e6:3c:34:04:c5:17:f8:8b:f0:7c:36:24:
                    f9:35:2e:d6:6e:79:0b:d0:08:83:49:64:79:f0:b5:
                    f0:f8:ca:19:eb:19:56:8a:71:82:93:9b:2d:7e:c8:
                    f6:2e:44:94:ad:7b:4b:3b:85:5c:0c:f7:b4:fb:49:
                    2b:20:c7:76:ac:e3:98:9f:29:6c:ce:ad:63:97:3d:
                    13:79:a4:e5:9d:68:51:e0:3f:f4:6a:40:3b:ae:8e:
                    89:bb:42:af:3d:b3:8f:44:85:70:2c:a9:91:3b:2d:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:09:F5:17:50:F1:47:E7:36:B0:80:48:D9:B7:4B:EC:15:FA:37:96
            X509v3 Authority Key Identifier:
                keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:7e:72:e7:16:78:3f:2c:99:e7:bb:cf:34:74:98:d7:83:
         03:13:21:83:c7:23:37:35:a9:dc:03:bc:18:21:28:2c:83:91:
         53:aa:78:5e:79:8f:34:08:be:ba:d6:00:57:e1:8c:ce:4d:e1:
         f3:5c:63:32:a9:f9:1e:e2:66:96:3a:83:d8:4f:4d:4f:18:81:
         64:04:83:59:4c:92:52:0e:98:c6:ac:69:50:bd:53:21:fb:69:
         d5:7c:a4:58:8f:d9:f4:16:f9:25:db:12:ea:fa:6e:3e:2c:db:
         5a:b1:06:b1:99:b3:c7:0a:0a:87:c6:53:08:2d:6d:d5:af:05:
         1d:a3:99:d2:86:aa:88:15:98:39:59:26:7a:c7:7f:1f:85:8f:
         7d:33:a7:0a:ca:74:8b:fe:dd:3b:f9:ed:72:34:2e:fc:44:46:
         8e:bf:94:bc:32:8c:67:4c:fe:19:04:90:96:96:a0:74:f6:94:
         67:f2:00:4f:72:6d:d2:f4:d2:64:af:91:29:5d:37:1b:20:4e:
         c9:2a:5b:80:b2:29:33:b3:6b:78:34:b3:10:95:92:f2:b1:d9:
         f3:25:ab:38:46:ad:33:8e:8c:32:1e:af:60:93:6c:eb:e4:b4:
         37:fc:54:36:66:47:d4:17:ca:4f:7d:78:7d:e8:98:f8:dc:94:
         98:68:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 09:34:04 2026 by rpki-client