Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
File:                     lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft (raw, json)
Hash identifier:          IDt2A1zQYVQo4ossVr4ylcaLlIjBNjB4vkIyBAiQbMc=
Subject key identifier:   A6:48:DF:89:93:01:BD:4F:67:0A:0F:A3:3D:51:FF:DC:F8:D1:E4:F0
Authority key identifier: 96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
Certificate issuer:       /CN=961727130c259990b005ea9433b57e0792f1af15
Certificate serial:       019F92116A9228DB0583C14C4B3860F3159E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
Manifest number:          015C
Signing time:             Fri 24 Jul 2026 03:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:42 +0000
Files and hashes:         1: IBxQMw202wI9H-2El0dEcabarmQ.roa (hash: nV5yVbote6ZsQPTplfUETazD8sVRzYP39kvT+GSB85A=)
                          2: lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl (hash: kM1rzTx4qNOwlMXOAayzpVdZ3Uoi7WMZJKVdrwHOSyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:6a:92:28:db:05:83:c1:4c:4b:38:60:f3:15:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961727130c259990b005ea9433b57e0792f1af15
        Validity
            Not Before: Jul 24 03:00:42 2026 GMT
            Not After : Jul 25 03:00:42 2026 GMT
        Subject: CN=a648df899301bd4f670a0fa33d51ffdcf8d1e4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:d6:2d:ee:6d:66:04:a3:03:eb:35:45:3b:
                    75:9a:26:94:26:2e:32:9c:b2:5c:29:86:e7:86:bc:
                    25:a5:ad:d0:ad:87:4b:5f:38:0e:54:2f:fe:76:33:
                    89:35:55:72:39:33:83:34:7e:6f:cd:e2:70:80:86:
                    fa:1c:f4:12:59:90:cd:6f:e2:fa:e3:a1:db:09:ba:
                    bf:eb:d9:48:b2:d3:8d:20:46:45:14:4d:55:26:eb:
                    02:47:d5:8e:53:cb:c6:7c:9d:d9:e7:2f:f1:a0:40:
                    27:ff:c2:fc:2c:3b:25:85:4f:3e:da:25:1b:53:9e:
                    c8:5f:78:be:e4:4b:4f:31:cb:40:32:0c:29:9d:75:
                    f6:57:cf:a8:64:27:88:a7:aa:70:3a:d3:1e:19:a0:
                    97:b1:1d:3f:cf:6a:77:9f:3f:5c:3c:ce:fb:38:bc:
                    78:e3:74:0d:92:69:e4:6c:09:c5:ee:d5:40:45:c1:
                    49:fd:a2:30:db:2b:ff:78:c4:79:ee:ae:7f:a8:f5:
                    72:19:bd:de:2b:7d:f4:b4:3c:55:5a:6d:7f:5c:f3:
                    ad:da:fc:b2:52:ac:65:10:81:dc:1a:27:47:5e:5e:
                    97:41:54:86:b2:74:59:11:8b:eb:34:47:74:85:3f:
                    f8:2a:c9:e6:0c:46:e2:33:bb:1b:d7:5d:e7:3a:e4:
                    fd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:48:DF:89:93:01:BD:4F:67:0A:0F:A3:3D:51:FF:DC:F8:D1:E4:F0
            X509v3 Authority Key Identifier:
                keyid:96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:9e:11:e9:9c:d8:9c:5c:3f:45:f7:75:9d:95:db:26:a7:
         24:e9:3e:41:8e:72:83:26:5d:7c:d2:63:6e:c7:f2:0e:33:99:
         36:8c:fc:49:fc:c5:08:1e:a5:0a:d2:a9:18:82:20:be:f5:b7:
         01:43:d6:d3:51:ba:15:61:a4:fb:e7:f9:71:85:26:77:58:27:
         62:1c:9c:a6:6e:1a:02:38:4c:cd:5b:8b:5e:22:54:6b:70:be:
         1b:a4:dd:0d:b8:60:65:2f:e5:3d:82:14:43:e1:ec:f7:db:9f:
         6a:21:3f:34:c6:4c:af:80:9b:0b:c3:8e:80:86:c5:8e:23:aa:
         2f:ce:1b:0c:6f:a7:bb:7d:39:d0:d5:eb:e9:40:f8:40:e4:cf:
         16:13:f2:10:a7:08:2d:74:04:10:88:d6:77:97:00:07:8b:35:
         0e:b4:77:51:67:25:1f:78:13:0b:4f:f4:81:b3:5d:93:3c:3e:
         e1:d4:4e:7f:40:1b:e1:b6:73:f7:50:fb:73:a4:a9:49:d7:b4:
         80:51:94:8a:81:a6:0f:45:4c:63:56:74:05:79:f2:1f:7a:d9:
         45:20:7b:9d:cf:d8:97:db:ab:71:aa:22:30:4a:15:48:51:58:
         62:95:f6:58:67:6c:16:66:92:48:13:2d:78:6e:bb:90:3a:d9:
         a4:63:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:54 2026 by rpki-client