Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
File:                     lICKbds0DQqKISfGTaKNdw7t3pM.mft (raw, json)
Hash identifier:          gI3bFYUMYC9+u95Xv6qv4hrBCVgTHyV+nRL6r2ydLA0=
Subject key identifier:   83:8F:5F:52:EE:30:A5:7D:90:72:D4:1E:09:BC:DB:5A:6C:A7:6C:50
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Certificate issuer:       /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial:       019F916C55B0B854E7648072F57649D4CDFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:23 +0000
Files and hashes:         1: 0_aFekBMdFqNOphj1MEzPKVtmT0.roa (hash: YB/bN3AAooYOfmHTAnQ/FECmO0TWzvsn8QhVsoUQzUY=)
                          2: 64dQ7wuxDD-Gyrchphsdtk6oJ_8.roa (hash: BeGDi5VESth0C9pJC6qZlN6Zb8k5M9gWJV+LnTk4B3Y=)
                          3: Hz2P5UT2vq-r0W3iw6fkXQeM3es.roa (hash: jyeskLTbwVPBESh5W51wXjNVOuucTxX63WTMSQq/zQk=)
                          4: PdHeaDywJi7J-a3zuc6-1mdUfSM.roa (hash: l+ho2GKXOZvF0KZ6/PCYPC090Oshz6jifmJBVRB6i5c=)
                          5: lICKbds0DQqKISfGTaKNdw7t3pM.crl (hash: A2jvmdlf95lxGKy6nhLN4Z/A5p3MHA9Sz879D2RJApo=)
                          6: oThXb4QmTGdzVtthRGYRVzspjNY.roa (hash: vrCmZWsAWrsHQ4ME8ZX38nmpmr/rd33lideKndjp8sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:55:b0:b8:54:e7:64:80:72:f5:76:49:d4:cd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
        Validity
            Not Before: Jul 24 00:00:23 2026 GMT
            Not After : Jul 25 00:00:23 2026 GMT
        Subject: CN=838f5f52ee30a57d9072d41e09bcdb5a6ca76c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:d9:3f:4a:44:d8:23:6b:77:df:61:74:27:
                    68:5d:79:28:62:ce:8a:34:36:d0:e1:ac:f6:5e:4a:
                    c0:46:a1:3e:7c:4b:2d:76:dd:b7:3e:04:ee:81:e0:
                    23:10:24:6e:c5:28:92:80:56:5c:a5:9a:18:f5:53:
                    09:7a:8c:c1:0d:53:15:fb:d7:ff:58:7c:6e:48:4d:
                    f5:17:e1:00:6e:7e:5b:29:99:27:a2:1b:2f:e6:30:
                    63:b3:2f:f0:26:18:a4:ee:8a:d8:da:94:d6:8b:de:
                    43:2a:19:85:ea:ae:63:50:b0:03:2a:ef:3d:c7:ef:
                    41:1c:1c:8e:40:72:3b:b9:79:7e:ce:11:09:ee:45:
                    dd:da:0e:bd:98:f1:5c:86:f2:8c:83:c1:7f:2e:c1:
                    e6:4a:de:f7:7d:cb:82:d8:20:1e:80:8d:92:7b:f5:
                    1a:41:7e:e3:c8:1c:66:7b:1e:a3:9e:61:3c:42:d5:
                    26:70:fb:14:f5:14:24:35:53:25:fa:c6:df:aa:f3:
                    fc:54:d3:cd:46:6e:73:30:1c:8a:43:54:2e:27:1a:
                    71:8e:8a:0b:7e:94:f2:06:f7:fc:57:49:af:62:3b:
                    ec:d2:18:d7:06:06:1e:42:dc:60:5d:0a:b5:73:d0:
                    3e:ba:8f:56:9e:fa:2b:36:d2:5b:42:db:ba:75:03:
                    42:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:5F:52:EE:30:A5:7D:90:72:D4:1E:09:BC:DB:5A:6C:A7:6C:50
            X509v3 Authority Key Identifier:
                keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a0:b3:a1:a3:8d:2a:cf:63:f6:bc:e3:ee:7a:93:bf:44:98:
         63:61:0a:b3:c5:56:2c:df:91:b0:2c:ae:7a:30:8d:c2:8a:ec:
         8e:4a:c9:92:8b:85:28:d3:6d:76:4e:b4:6f:44:3f:6f:bc:d3:
         67:11:20:38:70:20:7d:1f:74:8e:43:1d:99:91:c9:d0:2c:4e:
         59:71:73:6f:78:78:11:55:ea:7e:7f:80:5e:a8:d2:ed:ed:62:
         a5:db:59:ae:6e:e1:0f:f6:7a:ed:d4:42:65:fd:79:32:bb:fa:
         36:da:9b:81:06:83:37:42:38:a7:18:8d:84:6b:be:d0:e5:4e:
         81:4d:bc:c8:83:a8:47:1e:51:56:da:6f:62:ce:db:09:bf:ca:
         d0:c7:c5:d9:32:90:9d:34:db:80:b8:d5:d9:7e:ed:96:ad:b2:
         8a:64:5b:6f:ea:bb:6c:f8:11:35:c7:71:a1:10:7b:f3:cb:ee:
         6a:d0:6d:fc:c6:40:26:ad:26:53:db:2e:6e:59:9a:09:c7:6f:
         46:7f:18:a0:6e:e0:47:c6:52:63:d3:09:f9:0f:4a:ea:c3:09:
         c7:47:06:56:54:c9:72:dd:af:6e:d0:02:30:37:05:87:b4:d1:
         a5:c0:53:58:2e:5b:6b:bf:6e:cf:ff:c7:08:d3:55:51:e3:f9:
         01:d8:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:11 2026 by rpki-client