Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File:                     lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier:          wmG1m9otowA7RPl5Ge5PP0B6shYm03Mzf+0O2N2dovQ=
Subject key identifier:   50:E4:35:95:F1:61:21:C1:73:9E:E0:B4:6A:E3:94:6B:30:B8:73:C9
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer:       /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial:       019F935BAA2774094735017F9A34C1F385F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number:          1810
Signing time:             Fri 24 Jul 2026 09:01:25 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:25 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:25 +0000
Files and hashes:         1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
                          2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: N3R9JJpeu+pFUkUdiPveGcTsW9I+okDuZoAPvnWYomw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:aa:27:74:09:47:35:01:7f:9a:34:c1:f3:85:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
        Validity
            Not Before: Jul 24 09:01:25 2026 GMT
            Not After : Jul 25 09:01:25 2026 GMT
        Subject: CN=50e43595f16121c1739ee0b46ae3946b30b873c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:86:7a:02:17:2a:04:a3:73:a2:14:5c:34:
                    db:93:01:be:89:a4:37:e2:be:ff:f1:9c:48:8d:70:
                    62:c3:00:f5:9a:63:fa:7a:14:bf:83:3a:74:dd:72:
                    5a:4d:cd:8b:1e:0f:21:85:37:21:f8:12:e4:e0:bf:
                    d9:09:2d:cf:4e:11:e4:26:20:36:60:a5:b7:a7:42:
                    66:5d:dc:03:70:67:23:40:b3:69:49:09:f6:8b:95:
                    23:64:49:aa:55:79:d5:d4:f6:13:39:48:69:29:61:
                    1c:60:c6:c6:89:7b:07:93:9c:24:2f:5c:13:67:da:
                    78:0a:6b:d3:b4:5c:5f:d3:24:3c:6c:41:e6:82:cd:
                    48:14:7b:8e:0a:19:84:c4:8a:34:5c:b5:79:ae:88:
                    d2:89:99:94:f2:cb:78:d5:56:d8:ab:37:15:44:d7:
                    16:06:a9:0c:fc:35:41:39:84:69:84:2f:4f:a9:11:
                    49:05:b4:db:28:ba:24:3e:b8:9c:6e:dc:2b:ea:e2:
                    de:43:5e:53:e4:56:86:c0:0f:77:51:1d:84:c0:93:
                    79:42:cd:fe:ae:00:4d:88:1a:e7:68:07:0e:6f:84:
                    f0:a5:bf:a5:d0:9f:85:83:0d:b9:c2:43:1e:e7:78:
                    6a:89:d2:67:36:65:b2:21:7e:9f:c0:12:71:c2:71:
                    6c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:35:95:F1:61:21:C1:73:9E:E0:B4:6A:E3:94:6B:30:B8:73:C9
            X509v3 Authority Key Identifier:
                keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:19:e1:e4:6c:b8:cb:12:26:32:00:41:01:d9:44:64:66:f9:
         20:94:ef:ba:a2:99:76:87:1f:3e:ea:9f:e4:f9:ef:11:06:7e:
         85:9a:a4:b8:48:74:42:80:cc:b9:6e:2a:5d:a9:89:1a:c5:9b:
         81:50:13:d3:16:1e:d9:04:55:92:b3:2b:b3:f5:9c:a1:f8:32:
         f0:2d:57:3c:88:c9:73:7f:b2:f5:28:c5:83:17:b4:e9:f9:45:
         a5:fe:30:09:6d:90:ce:a8:f1:18:09:38:a5:c1:30:83:aa:2e:
         09:80:8f:f5:39:96:62:ee:d5:12:00:38:e3:19:6e:d7:20:76:
         13:ec:35:72:33:ba:86:ae:5c:76:b9:4c:02:0b:24:6e:a9:23:
         05:dd:d3:59:98:66:e6:a7:a9:2c:d0:0d:90:d3:cb:dd:a6:60:
         23:78:da:1e:f0:b0:1d:da:44:16:96:c6:90:0e:75:8a:7b:5a:
         64:8b:d9:ad:23:8a:55:74:23:2b:ce:4e:00:e1:e4:54:d2:15:
         38:85:80:9d:78:43:0e:a4:9f:31:18:3d:f1:d6:aa:f3:84:5f:
         be:c5:a5:43:24:f1:1e:b6:33:ab:fd:dc:40:95:be:07:ad:f4:
         00:fa:df:25:0b:e7:dd:f3:18:ad:cd:6d:1d:5a:65:cc:84:cc:
         2c:c8:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:23:28 2026 by rpki-client