Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File:                     LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier:          euAR56F6bhGo34ulUuMmqjNvR8Gaq/GmTanEFd5KAgM=
Subject key identifier:   07:DC:7A:5A:07:DE:D2:F0:4F:2B:19:36:4E:15:D0:01:16:0C:E3:64
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer:       /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial:       019F92116FF160874539E3B067DB7D190F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 03:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:44 +0000
Files and hashes:         1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: NBZ3Z1hclyjH3muhWT9IlvYZLx2vIjQZ884VX+s8Jhk=)
                          2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
                          3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
                          4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:6f:f1:60:87:45:39:e3:b0:67:db:7d:19:0f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
        Validity
            Not Before: Jul 24 03:00:44 2026 GMT
            Not After : Jul 25 03:00:44 2026 GMT
        Subject: CN=07dc7a5a07ded2f04f2b19364e15d001160ce364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:90:ac:ab:75:f3:a8:d2:ad:e4:a7:8a:7e:
                    4c:aa:22:fe:fa:ec:4a:4a:1f:08:b2:fc:6c:bc:d0:
                    db:45:43:e0:c2:15:ab:bd:c2:19:0a:19:43:11:42:
                    6f:78:f2:85:cc:8b:2a:35:a8:7f:d6:f8:37:c4:17:
                    07:1f:7b:30:2f:0b:2e:b8:2a:76:22:74:58:e9:0b:
                    18:57:17:76:63:3a:c9:b9:d3:f0:cc:c3:fa:0e:40:
                    1f:7b:c5:06:1e:82:b8:65:6e:2b:4f:78:b9:88:e7:
                    13:e2:9c:77:a2:df:48:d1:8c:4d:1f:cb:3b:58:df:
                    45:12:7f:c8:29:ca:91:9e:76:f1:f7:bd:6c:fa:00:
                    a2:8d:71:37:79:54:6c:5f:ec:f6:5c:0f:97:e1:4a:
                    3a:89:70:86:91:26:9a:92:46:6b:10:25:c6:eb:ba:
                    23:26:65:47:ae:59:8e:c1:a0:eb:0d:2b:08:f0:dc:
                    e5:d4:8f:1d:6f:e4:bd:0c:04:23:ea:3d:23:c0:b6:
                    bd:46:38:09:47:6b:bc:c7:8e:7c:22:76:8d:02:0a:
                    b2:3a:aa:7a:a5:87:cc:d3:ae:c1:ee:c5:d6:24:ab:
                    e7:ed:5a:6f:a4:64:8f:33:5e:6b:7f:4e:5f:39:66:
                    28:a7:5c:4b:e0:f6:9d:a0:bf:54:87:de:3d:3a:c1:
                    a5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DC:7A:5A:07:DE:D2:F0:4F:2B:19:36:4E:15:D0:01:16:0C:E3:64
            X509v3 Authority Key Identifier:
                keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:d5:0a:f4:61:3d:51:64:1d:f4:b6:af:d6:a8:91:89:64:
         cd:3c:70:fc:a8:14:51:f0:ee:5f:d9:7d:37:f2:73:16:f3:d9:
         c2:3a:1f:f4:5f:15:4a:08:8d:08:4f:0a:4f:da:a2:52:40:70:
         a2:e9:13:86:51:ae:89:47:56:f5:82:b0:24:6a:b3:db:84:ca:
         d7:fd:32:60:76:8b:f5:93:21:fd:4d:08:36:ec:f2:bf:58:db:
         d3:09:dc:17:35:0e:58:69:ba:6e:dd:07:b9:51:df:62:d5:3a:
         0c:dc:c6:26:64:27:fe:3f:bf:a7:43:78:4c:f2:7e:83:83:58:
         63:01:d2:52:13:1c:fb:91:0a:00:5b:c8:f7:25:ba:0c:d1:03:
         29:2a:82:d7:c9:e8:35:06:aa:b3:6f:be:fd:38:10:b0:c8:2c:
         0d:01:21:86:7f:f2:5b:14:3c:ea:ff:f1:23:4a:5e:29:64:57:
         08:4b:90:f5:fc:49:6b:11:32:da:a0:99:c4:f9:3b:a8:83:3e:
         3e:f2:6c:83:bb:d9:57:1c:cd:ef:99:5e:e0:d7:b0:a2:1b:ef:
         bb:95:ed:7d:88:c1:ef:dd:97:90:35:59:d1:c7:3d:db:c4:87:
         fb:5d:42:e2:1c:ef:ae:75:57:d0:ac:c9:69:ff:84:bd:14:e3:
         c4:5e:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:43 2026 by rpki-client