Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
File:                     LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json)
Hash identifier:          kwf40bjpVObQXDq2vbUhCuqOt/9ed/hfblDseLMXFNE=
Subject key identifier:   87:08:6F:63:7D:E8:D4:D0:E0:45:C4:04:D5:A3:A9:3B:A5:19:01:8B
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Certificate issuer:       /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial:       019FA0039C51CA4828B7B1C3C3EA566F4901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
Manifest number:          19D1
Signing time:             Sun 26 Jul 2026 20:00:18 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:18 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:18 +0000
Files and hashes:         1: F8ssCXzm5DlQ97WN2xVb9wJjA_g.roa (hash: RedzK3Q4KVLEhYDQGEu2AFOE8F+deCMqCtqno/fcLrc=)
                          2: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: /9x3YqtidO8vi/FE1jOAXOzGfX1w+sJiCisSQ65LaBU=)
                          3: Tx4rGOskR8UsbyOhXGF9kJnJ7vw.asa (hash: IR65pK4PSkniZY6Jc9WLdUsu5O9juE1eZaJzF2M4+RM=)
                          4: Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa (hash: DKeEzZKgIArxoLoLfWTEY4XadPn2TLkkEnTA5gJhx7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:9c:51:ca:48:28:b7:b1:c3:c3:ea:56:6f:49:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d5894923bb002a434128810607dfb526722004f
        Validity
            Not Before: Jul 26 20:00:18 2026 GMT
            Not After : Jul 27 20:00:18 2026 GMT
        Subject: CN=87086f637de8d4d0e045c404d5a3a93ba519018b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:d2:2b:bc:9a:65:e8:27:93:40:19:aa:05:
                    ff:1e:f4:f6:80:55:b3:52:aa:c7:be:64:8b:f5:68:
                    cc:da:5c:df:e6:16:d5:85:10:74:a9:53:8f:02:69:
                    1f:13:a4:32:58:81:56:37:b2:9a:2d:78:02:a5:67:
                    b1:8b:e6:60:e9:13:97:b4:0a:2b:6d:50:77:f9:b9:
                    21:b0:dc:11:f0:df:fe:a3:20:c3:b5:cb:c9:4e:c0:
                    89:05:9a:25:f6:49:0d:c5:7b:ea:3b:21:a1:36:a7:
                    f6:57:c7:ab:db:bb:76:a7:5c:12:84:f6:eb:14:49:
                    88:b8:53:19:3b:30:88:20:ff:5c:94:31:82:4e:ab:
                    af:0c:64:85:f5:66:ac:26:e4:d5:d3:19:63:81:5f:
                    f4:29:6d:5a:aa:86:71:45:e5:1b:f2:79:21:a4:9c:
                    04:83:f6:83:41:8d:11:42:18:dc:4c:c0:85:bb:5d:
                    73:5d:75:81:04:15:fc:58:42:c7:9e:98:df:9e:1b:
                    25:b6:47:96:9a:e6:05:6a:4b:b4:c4:0b:43:89:7c:
                    c6:1a:26:b6:5c:a2:f3:4d:33:44:a1:22:24:97:db:
                    02:7f:87:ac:0a:30:9a:13:b5:75:26:2a:a0:df:47:
                    fa:6b:bf:38:07:1b:01:cc:5f:2a:63:01:5a:d9:3d:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:08:6F:63:7D:E8:D4:D0:E0:45:C4:04:D5:A3:A9:3B:A5:19:01:8B
            X509v3 Authority Key Identifier:
                keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d2:d4:88:e1:2a:3d:52:50:0b:82:24:32:e0:b0:08:95:8b:
         62:f8:4b:f1:d6:d3:50:f3:d0:39:30:0b:9b:fe:62:5b:81:50:
         68:60:5c:d0:9c:2e:62:6b:67:89:bb:67:49:16:bf:1f:41:7e:
         9f:c6:aa:9f:02:3b:f8:c6:c4:86:c3:3a:67:54:b3:51:24:f6:
         c0:15:e1:1e:bc:87:44:4b:df:a3:47:2c:9e:80:d0:a0:d5:6a:
         52:d3:0e:5e:be:18:be:a9:7b:7c:c8:5d:6c:f5:bf:a9:06:39:
         de:b8:64:86:1e:82:f5:8b:23:3d:5e:e3:49:4f:39:84:b3:53:
         3c:31:29:40:75:75:a6:46:c1:63:84:fc:5b:23:30:67:0e:b8:
         b6:e5:25:d0:36:dc:02:9f:67:d3:30:be:de:58:cd:07:48:98:
         b1:77:f3:08:48:94:78:d5:45:1e:51:55:b4:35:39:3c:48:98:
         b4:98:8e:bd:30:62:6f:18:bf:84:5c:4a:d0:cc:b8:f2:ee:8b:
         84:79:89:18:02:85:ba:c5:0f:2b:93:b4:57:8e:99:66:21:87:
         00:0b:d7:a3:70:ca:88:07:0c:3a:dc:fb:99:dd:12:6c:92:09:
         e4:d8:fe:33:93:fb:9a:43:9d:fb:11:02:0e:34:ef:b9:a7:72:
         b8:bf:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:30 2026 by rpki-client