Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File:                     LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier:          841KJx+jQ7ft7m3fKUUgpfc2dTKjZkJxN11rgrxnRPo=
Subject key identifier:   A0:2B:C7:A0:39:4D:00:03:6D:F0:35:45:BD:D0:6F:4A:D6:CB:BB:55
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer:       /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial:       019F83B0D043DA9208F2E3B401E0FBBBE445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number:          0181
Signing time:             Tue 21 Jul 2026 08:00:30 +0000
Manifest this update:     Tue 21 Jul 2026 08:00:30 +0000
Manifest next update:     Wed 22 Jul 2026 08:00:30 +0000
Files and hashes:         1: 0xXbCURhYGAah-ub3QgpVnkd5sc.roa (hash: Q0oF/ybiwcu5gijOk6b+e5zoOovn/M1MtfwaMpdjGcE=)
                          2: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
                          3: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: keD3EXfUqQjN89NvOjseCbHD3i/ZPhBlE5WGoA2EDUI=)
                          4: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
                          5: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
                          6: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
                          7: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
                          8: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
                          9: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:b0:d0:43:da:92:08:f2:e3:b4:01:e0:fb:bb:e4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
        Validity
            Not Before: Jul 21 08:00:30 2026 GMT
            Not After : Jul 22 08:00:30 2026 GMT
        Subject: CN=a02bc7a0394d00036df03545bdd06f4ad6cbbb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:68:ae:a5:06:d7:42:14:d7:f0:cf:9d:89:
                    db:c1:3a:b1:a1:5f:6d:41:15:19:25:ef:e9:a1:18:
                    8e:8e:e8:d9:ae:66:eb:a7:71:29:90:a2:9c:50:39:
                    72:26:7b:f7:b8:b4:9e:13:7d:59:fb:f1:b9:57:af:
                    98:4d:fb:a0:4d:25:91:a3:80:07:bf:58:f6:a5:74:
                    3f:14:a2:88:ca:ec:e3:84:59:34:47:11:f8:e3:52:
                    aa:70:08:ed:a8:9b:f9:0b:c4:ae:1c:0e:65:f3:74:
                    2d:b2:d8:c5:5f:28:6c:77:79:3f:60:50:d2:e6:f1:
                    d6:fc:a4:1f:dd:18:42:43:bf:c8:a8:be:64:31:4a:
                    dc:53:4a:a9:ea:91:a8:29:b5:18:60:b1:48:34:9d:
                    b4:3b:9d:b3:83:e0:9f:06:8d:b9:2d:57:a3:a5:35:
                    e6:bf:55:9b:0d:ad:de:1d:e0:32:03:4a:04:b2:08:
                    d5:1e:05:f6:83:56:0c:35:b1:f2:aa:12:a1:a0:ee:
                    11:70:04:69:fe:54:99:66:0b:e3:cd:a2:d9:8e:21:
                    f1:48:4c:94:7b:a1:43:ed:3d:ad:1a:23:c5:65:e1:
                    f2:f8:3c:cf:b6:24:91:67:72:6d:7f:92:3d:65:bd:
                    4d:d4:49:4a:da:df:56:07:a7:6e:e3:e5:25:46:09:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2B:C7:A0:39:4D:00:03:6D:F0:35:45:BD:D0:6F:4A:D6:CB:BB:55
            X509v3 Authority Key Identifier:
                keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:62:b5:aa:32:e2:a0:8b:c1:e3:06:9d:24:e9:77:98:08:
         c5:f0:57:43:b7:18:4c:87:b9:75:32:17:67:0d:b5:e3:de:73:
         b2:28:28:2f:9d:ca:b8:40:fc:d3:a0:06:37:89:2f:77:1e:f6:
         16:66:6d:0d:e3:58:cb:36:f6:af:b9:3a:2e:95:9c:32:23:38:
         d0:e1:eb:6b:69:d1:d7:8d:a9:40:b4:3f:d8:f4:cf:64:76:fc:
         45:37:b7:12:75:30:24:e2:d5:c9:40:f6:ad:12:99:88:18:f1:
         0c:88:b6:82:1a:1f:4c:8c:aa:3b:a0:bc:06:6b:67:9e:5a:de:
         a4:3b:22:9b:1e:75:8e:20:73:06:3d:68:ba:58:c5:12:e5:e4:
         0d:80:4b:64:86:70:d2:f0:ad:df:d5:6f:64:62:f8:3d:83:a8:
         0a:8b:06:7f:ba:24:d1:c2:53:cc:fd:19:51:a0:82:92:a6:8f:
         89:b1:6e:f5:71:ba:69:b0:6f:9e:3f:ef:4b:ac:54:69:dd:9b:
         c7:a6:a6:12:29:ed:7e:cd:73:14:95:d9:4c:fa:31:94:9a:95:
         2b:60:92:d8:e6:84:f5:80:22:8e:58:9a:e0:86:b6:c3:ea:e2:
         17:d3:1c:69:83:88:7a:f9:20:f9:89:cc:8c:a2:6c:d5:4b:f1:
         cf:b1:0a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:17:17 2026 by rpki-client