Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File:                     _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier:          HKQ2Dk+RJwRxL3PbBM5RBE8PMRG+i23oMmGXUyQnqLw=
Subject key identifier:   82:C9:74:D8:81:25:4A:98:16:5E:E1:41:B5:02:CA:0D:B8:B2:44:D3
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer:       /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial:       019F916CB2118F40773115E632F1AC811142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number:          07E2
Signing time:             Fri 24 Jul 2026 00:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:47 +0000
Files and hashes:         1: M-XgOjesPXIogjBIQr0FL2b7KV0.roa (hash: cfiY/wJuu827u4/W0gn3sJ9LCmjPRCXCxBqRyHWf5wA=)
                          2: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: VxjnY2GM+lfldg4A29s9dGjh2DXeud4LkOWVNCI8kPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:b2:11:8f:40:77:31:15:e6:32:f1:ac:81:11:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
        Validity
            Not Before: Jul 24 00:00:47 2026 GMT
            Not After : Jul 25 00:00:47 2026 GMT
        Subject: CN=82c974d881254a98165ee141b502ca0db8b244d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:1e:a8:d6:75:df:c9:63:2b:a5:91:7d:23:
                    dc:a2:e2:4c:ea:9a:26:87:c8:4f:22:ad:52:39:59:
                    f5:9d:ce:fb:6d:b9:38:f7:d8:2f:98:e6:32:c2:60:
                    a4:19:73:93:04:8b:78:78:da:3a:48:1f:d3:25:ba:
                    1a:23:92:8b:e6:97:4f:ef:b9:c5:2d:45:a0:57:27:
                    cb:e5:a9:bd:a9:12:7c:15:41:4b:0d:12:2d:0f:8a:
                    d6:8f:65:d3:03:ca:95:22:91:52:aa:80:06:a0:68:
                    32:2b:c8:04:f5:cd:f3:36:4c:54:e5:9e:6d:b5:db:
                    11:23:2b:7d:a8:e5:52:97:7f:f1:2b:8c:33:c1:22:
                    eb:eb:55:fa:37:f7:8e:9e:73:a1:87:7f:1a:8e:3e:
                    c9:e9:82:05:16:d5:82:af:d9:81:d2:66:3e:45:fb:
                    94:f0:1c:6d:48:22:ed:d8:4c:4e:0d:67:1c:e1:07:
                    51:f8:37:15:43:8f:23:5c:be:59:0f:6b:a8:db:b6:
                    d8:0c:07:5a:53:16:97:87:5f:6d:d3:43:26:cb:77:
                    de:04:d8:0b:99:e6:4d:a6:d4:b4:63:6b:bf:72:24:
                    88:48:df:88:52:c8:17:f8:34:00:ce:fc:d4:68:f8:
                    1d:f1:a9:e7:5e:fa:e8:aa:5e:c0:32:64:89:38:a6:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C9:74:D8:81:25:4A:98:16:5E:E1:41:B5:02:CA:0D:B8:B2:44:D3
            X509v3 Authority Key Identifier:
                keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bf:6c:85:62:4f:de:37:c9:7a:3a:46:a3:9c:76:5d:95:6d:
         77:b6:c2:c4:57:36:1f:72:51:c7:64:96:e0:c7:f7:2f:87:1b:
         34:f2:d7:c6:a2:69:27:b2:17:2b:36:24:e5:20:0f:f3:be:2a:
         e7:98:d7:ff:ee:66:cc:37:a9:d9:49:66:19:92:50:d5:ef:5c:
         bf:4b:28:96:a1:96:10:cc:15:1d:12:8c:95:a3:86:82:a6:58:
         3a:40:b6:f8:c9:a4:63:17:f0:c2:33:cb:82:06:7b:56:80:16:
         98:bd:51:49:fa:eb:6e:f8:83:08:ec:8a:3a:22:c1:d0:5c:4a:
         19:8e:54:a6:6e:03:1e:da:9a:46:8d:6d:08:46:38:c0:3d:1f:
         cb:41:ff:9e:65:4d:00:b0:3d:16:c4:96:a0:be:f0:d7:a8:3a:
         17:ac:79:65:02:ef:52:41:48:a6:09:60:bc:91:bb:9e:9f:c2:
         ba:bb:87:c0:d1:00:1d:c8:00:1f:fa:68:68:48:90:1b:c8:cf:
         92:c4:fb:e9:9c:94:9a:c9:d2:6f:bf:8e:43:ae:0d:b3:59:9a:
         2a:55:66:1a:7f:ff:57:aa:48:78:4c:27:54:db:e5:b6:fb:c9:
         0c:7b:e7:82:e1:de:7e:10:27:11:43:d2:cb:77:59:ab:3c:9e:
         0e:99:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:22 2026 by rpki-client