Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File:                     lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier:          XKii71LhuczNRZnMY8c7PlZx19SUwlDe1sVAMdSK80k=
Subject key identifier:   01:62:D6:BD:F3:F1:48:AF:79:B4:D0:E1:81:A0:43:0A:0E:62:79:7D
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer:       /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial:       019F9FCD86D4CC9C47E638DC96C84108F954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number:          1400
Signing time:             Sun 26 Jul 2026 19:01:14 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:14 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:14 +0000
Files and hashes:         1: MxY3wYjJf-HzpELgQOqWr-CuO5k.roa (hash: esg/AqYi4A1ugA5X6Pi57Y+6AvgsMKQZF7yVPFwOVOY=)
                          2: ha3A5YiON6pwuQbKycX4Nu-iCJU.roa (hash: /mkj5tkVuu0LcdOKt7MFz4DExlQhsM54fwEEAhXdQGE=)
                          3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: H77KwsfSlAnWystq7Iv1K7WwxA++utThw8yhPdpN3OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:86:d4:cc:9c:47:e6:38:dc:96:c8:41:08:f9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
        Validity
            Not Before: Jul 26 19:01:14 2026 GMT
            Not After : Jul 27 19:01:14 2026 GMT
        Subject: CN=0162d6bdf3f148af79b4d0e181a0430a0e62797d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:9f:bf:8b:1d:59:06:7d:c6:45:7b:a9:6b:
                    dd:bc:54:0c:d4:48:88:9a:54:9c:fa:c1:ed:a9:88:
                    c4:bd:c7:23:ae:69:10:92:18:e2:5d:ee:e7:c8:4b:
                    bf:de:50:41:6c:15:ae:59:26:d2:27:55:8a:d2:e1:
                    58:1a:6d:42:9c:38:77:31:94:0b:af:b3:f9:37:14:
                    c2:87:fb:e3:99:77:61:d0:4d:fe:83:b6:b4:bc:0b:
                    08:f7:56:e8:60:2b:47:c2:97:e8:16:a2:bf:99:02:
                    c7:49:49:4a:88:2a:ca:a3:bb:f5:e2:d1:af:c4:82:
                    49:a7:f9:40:be:77:34:35:c1:7f:80:dd:a4:aa:a9:
                    6b:fc:95:66:04:5d:c8:45:ca:26:4b:ac:a9:f7:f8:
                    c5:ec:38:63:8a:c0:17:06:3e:a5:d7:5b:f6:4c:68:
                    b9:39:8f:2d:ad:d2:64:8d:03:c8:de:15:90:1f:05:
                    6c:ff:3f:8e:20:24:5b:2e:4a:32:1a:3c:80:3f:b2:
                    4d:0d:42:39:4d:43:6b:11:cf:24:23:5d:0b:fe:8a:
                    c3:df:28:f9:44:ee:0e:7e:91:58:59:5e:10:e8:ea:
                    2f:2a:42:fc:01:d8:03:f5:89:eb:84:97:f8:ec:b2:
                    2c:56:5a:c5:26:f6:ee:d3:19:bf:76:10:38:30:85:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:62:D6:BD:F3:F1:48:AF:79:B4:D0:E1:81:A0:43:0A:0E:62:79:7D
            X509v3 Authority Key Identifier:
                keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fe:9c:ec:f5:c6:b6:8e:fd:1f:d0:45:c1:d0:3c:81:0a:5e:
         c6:72:97:03:16:f0:e5:ee:74:ae:07:04:a5:35:89:50:d7:51:
         19:99:4b:66:29:5f:1c:61:d0:da:fd:8a:6b:5a:32:a1:3e:df:
         55:d3:6f:ed:74:82:a2:43:43:d7:31:c1:35:d4:30:97:f3:08:
         66:41:52:7a:e5:21:2d:68:2a:5e:2d:5d:da:3c:a9:7f:6c:3d:
         fe:f3:b5:4c:ac:c3:14:f9:1f:59:15:5a:6b:d3:e4:71:82:3b:
         fc:e1:45:ba:1c:94:df:e4:02:fe:28:84:04:f5:c9:44:b2:5b:
         e9:2e:d5:33:64:e1:60:f0:86:e7:8a:a9:a7:03:ea:ef:d4:95:
         c3:64:63:27:dd:6b:bb:6c:96:c6:4e:2e:a6:b3:0e:8b:51:68:
         69:7c:a5:db:f5:10:8b:fa:24:29:48:84:96:d8:11:ae:60:de:
         f0:81:6b:7f:f4:89:94:c3:fc:28:ff:8d:d7:7e:a6:cb:8e:a5:
         b7:7a:9c:19:5c:4d:b9:d8:96:cc:b7:90:cd:d9:a2:d8:39:61:
         19:30:14:97:32:cb:09:32:29:39:63:84:ed:26:93:66:6f:71:
         ca:fc:5b:ba:1f:e3:f4:37:4b:86:e5:5f:26:f6:1c:e0:54:d7:
         fe:a0:19:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzYbUzJxH5jjclshBCPlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjcxYjIyNzNhYjM0ZWQ0YTU0ODExNzZlZjcwZmFkODY3
ZWYxNjYwHhcNMjYwNzI2MTkwMTE0WhcNMjYwNzI3MTkwMTE0WjAzMTEwLwYDVQQD
EygwMTYyZDZiZGYzZjE0OGFmNzliNGQwZTE4MWEwNDMwYTBlNjI3OTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhyfv4sdWQZ9xkV7qWvdvFQM1EiI
mlSc+sHtqYjEvccjrmkQkhjiXe7nyEu/3lBBbBWuWSbSJ1WK0uFYGm1CnDh3MZQL
r7P5NxTCh/vjmXdh0E3+g7a0vAsI91boYCtHwpfoFqK/mQLHSUlKiCrKo7v14tGv
xIJJp/lAvnc0NcF/gN2kqqlr/JVmBF3IRcomS6yp9/jF7DhjisAXBj6l11v2TGi5
OY8trdJkjQPI3hWQHwVs/z+OICRbLkoyGjyAP7JNDUI5TUNrEc8kI10L/orD3yj5
RO4OfpFYWV4Q6OovKkL8AdgD9YnrhJf47LIsVlrFJvbu0xm/dhA4MIX1EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFi1r3z8UivebTQ4YGgQwoOYnl9MB8GA1UdIwQY
MBaAFJb3GyJzqzTtSlSBF273D62GfvFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAt
NDY5MzVmY2M4NTVlLzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAtNDY5MzVmY2M4NTVl
LzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgv6c7PXG
to79H9BFwdA8gQpexnKXAxbw5e50rgcEpTWJUNdRGZlLZilfHGHQ2v2Ka1oyoT7f
VdNv7XSCokND1zHBNdQwl/MIZkFSeuUhLWgqXi1d2jypf2w9/vO1TKzDFPkfWRVa
a9PkcYI7/OFFuhyU3+QC/iiEBPXJRLJb6S7VM2ThYPCG54qppwPq79SVw2RjJ91r
u2yWxk4uprMOi1FoaXyl2/UQi/okKUiEltgRrmDe8IFrf/SJlMP8KP+N136my46l
t3qcGVxNudiWzLeQzdmi2DlhGTAUlzLLCTIpOWOE7SaTZm9xyvxbuh/j9DdLhuVf
JvYc4FTX/qAZ3g==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:19:16 2026 by rpki-client