Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File:                     LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier:          TVwfHW3ta2LaqyBf/cp/QCWrqHScANyz55+gjnKYSGw=
Subject key identifier:   4D:E0:6E:27:32:AB:81:B0:AE:AA:AC:70:F2:96:B4:87:07:E9:C4:92
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer:       /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial:       019F9392508E5A78B2BD23DB498C99C14285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 10:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:07 +0000
Files and hashes:         1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: Mlqun1jCYzRdLR0KsNdyFaKjmoEMTfUsNztizdG3/pE=)
                          2: _v7GfhVuqUV1D7sW2SlcrySGsrA.roa (hash: KzmQ49grnGxQlCZ2CCyjpnejNzdZeWdhTo34zMYUN0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:50:8e:5a:78:b2:bd:23:db:49:8c:99:c1:42:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
        Validity
            Not Before: Jul 24 10:01:07 2026 GMT
            Not After : Jul 25 10:01:07 2026 GMT
        Subject: CN=4de06e2732ab81b0aeaaac70f296b48707e9c492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:4c:81:f9:cf:d1:00:b7:1d:7f:e0:d7:95:
                    a4:9d:62:12:7f:e9:8b:e1:ee:60:16:d3:5a:88:d6:
                    b9:6c:3f:4e:cc:c3:f8:fa:e2:ab:94:8b:69:37:8f:
                    b5:7a:3e:e9:75:11:31:10:4d:d2:42:a4:a0:df:f6:
                    ff:ae:6a:10:5a:cc:ba:88:e9:33:be:e1:cb:1a:d0:
                    70:ed:f3:7c:6f:b6:55:29:f4:41:0e:1a:da:9e:61:
                    2c:d8:fd:31:d0:22:a6:02:57:f9:b7:2a:5f:2d:5e:
                    c2:ae:fa:44:9f:8d:5a:f2:b0:2c:4a:bc:f7:a3:0e:
                    ec:74:f8:07:c2:d0:c6:b4:2b:98:bb:75:c9:a7:a3:
                    48:fd:bc:28:67:58:b4:a6:50:ea:92:07:f6:b0:5c:
                    0e:d2:93:03:d6:94:2e:5b:54:21:5d:2e:9b:4f:71:
                    dc:4b:a4:cf:ed:af:7e:74:58:5c:b1:eb:3b:f8:12:
                    d9:4e:68:b1:37:37:ff:a3:79:08:cb:fd:c5:06:de:
                    28:09:93:6d:62:93:fa:19:e3:cc:fc:39:5a:ba:b6:
                    af:d7:0e:ba:02:77:22:50:dc:2d:48:24:3a:05:3d:
                    12:ea:ca:d1:1e:5e:e5:55:42:75:ac:d0:e9:09:d4:
                    ea:46:2a:d1:bd:6b:e1:d5:93:53:82:a6:3f:88:3d:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E0:6E:27:32:AB:81:B0:AE:AA:AC:70:F2:96:B4:87:07:E9:C4:92
            X509v3 Authority Key Identifier:
                keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fe:65:2e:09:8b:69:07:37:76:6e:ea:a2:e5:46:60:3b:0a:
         df:01:d2:8d:38:cf:97:7f:4a:44:5b:85:aa:5c:dd:a3:91:08:
         ad:0f:a3:0d:eb:2d:c8:b5:4b:40:5d:aa:9e:32:1f:77:a2:eb:
         42:d4:ac:77:89:cf:4e:82:ce:fa:97:44:86:1d:fc:78:8e:2f:
         36:27:af:9d:fe:5a:62:72:ed:48:45:2d:40:46:d7:b1:70:e0:
         31:96:5d:45:ef:a0:c7:83:6a:c5:03:02:6d:60:b0:6e:88:b7:
         2d:2b:a2:2f:3e:43:a7:de:65:00:27:cd:62:a1:a1:61:6e:8b:
         ff:4b:97:26:02:0f:4d:e0:78:c4:e9:cd:ba:de:bd:01:c9:20:
         2a:32:d7:4b:21:6d:c7:70:b6:8f:2f:e3:00:c0:17:96:6e:27:
         3d:fb:bd:2a:9c:5b:03:19:3d:5a:4b:12:73:d6:23:51:a8:cf:
         73:9d:5f:23:08:0c:44:38:e2:fe:d9:2e:7c:5a:49:34:6a:36:
         a5:75:97:46:6a:df:4a:66:d6:3d:5b:77:07:e1:6c:5c:2f:8c:
         58:31:7f:8d:80:91:09:3e:13:e5:02:5a:02:58:1c:d4:76:71:
         cf:5c:fe:d9:c7:f4:67:92:11:b6:71:94:88:63:92:0e:0a:f4:
         49:a3:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:43:28 2026 by rpki-client