Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File:                     lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier:          mf2YyPnFgcSl4ZfyWuaISId4GZuCVzSDkeucA1nlJbs=
Subject key identifier:   FF:A4:50:FF:2F:CB:08:B9:D5:BF:7C:93:40:8A:3D:23:6F:55:63:C3
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer:       /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial:       019F92117D023D4B9684254C5DFD572F7981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number:          19FB
Signing time:             Fri 24 Jul 2026 03:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:47 +0000
Files and hashes:         1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
                          2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=)
                          3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=)
                          4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
                          5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
                          6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=)
                          7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=)
                          8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=)
                          9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=)
                          10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=)
                          11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
                          12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
                          13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=)
                          14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=)
                          15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: zhMQLYWP4kbD7PSH9xJwAQOjFbHb8v7xQaXg0sjSLT8=)
                          16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
                          17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=)
                          18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=)
                          19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=)
                          20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:7d:02:3d:4b:96:84:25:4c:5d:fd:57:2f:79:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
        Validity
            Not Before: Jul 24 03:00:47 2026 GMT
            Not After : Jul 25 03:00:47 2026 GMT
        Subject: CN=ffa450ff2fcb08b9d5bf7c93408a3d236f5563c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:dd:f6:e4:ac:07:c8:09:42:01:5c:df:46:
                    28:c0:de:ed:92:41:c0:4e:a1:ff:e4:37:f5:28:07:
                    43:bd:41:ff:ca:29:c9:78:c2:49:4c:f3:f9:4b:75:
                    61:ea:48:c7:96:be:12:e1:16:53:fc:54:3c:8c:29:
                    e5:17:d9:26:be:c4:54:f4:26:a2:83:65:46:77:d2:
                    eb:6a:d2:44:9d:1a:44:82:66:ce:c5:0f:a8:b7:22:
                    bb:0b:e4:51:ee:b3:1f:91:3a:50:da:bf:c6:14:a6:
                    a3:7f:49:84:46:67:24:8a:44:31:4a:80:75:7f:99:
                    e3:23:a0:ac:3c:0d:46:b6:f7:9c:16:33:f2:89:83:
                    fc:d7:2a:4d:10:ea:00:c2:df:44:aa:d1:48:d9:1d:
                    94:5a:65:52:7d:f1:96:4c:25:cb:fd:77:94:51:65:
                    92:79:e1:a2:8e:1f:1d:bf:1e:2b:63:4d:e0:0e:2c:
                    b0:bf:88:ae:e5:88:5c:3b:9a:da:ba:10:05:ac:ef:
                    42:d0:5a:66:65:76:65:d1:e5:f1:ae:ee:5a:e0:1f:
                    ae:a0:ad:83:60:3b:29:0f:de:60:22:a4:5c:89:0f:
                    7e:0d:fe:b0:1a:aa:45:1b:53:4b:f0:78:0d:d8:dd:
                    d1:02:8d:da:35:66:18:40:b2:ad:fb:b3:1d:89:ad:
                    19:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A4:50:FF:2F:CB:08:B9:D5:BF:7C:93:40:8A:3D:23:6F:55:63:C3
            X509v3 Authority Key Identifier:
                keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0c:2e:ee:0e:c6:79:99:ef:a8:22:7e:c4:a6:53:87:f8:22:
         5e:b4:42:07:55:8a:e1:25:d0:9b:2b:a6:4e:8e:fc:4f:e7:77:
         b8:31:cb:27:5e:11:ac:03:39:40:01:50:2c:69:98:48:23:8a:
         b3:30:46:c3:ac:e8:1c:06:ab:cd:35:18:13:bb:59:e3:0b:99:
         cc:b9:94:7a:75:7a:fa:4d:cc:4c:02:fc:c2:61:65:2f:d8:6d:
         93:fc:25:0f:90:b4:a1:d0:8a:7f:86:b1:ad:02:de:56:3f:1e:
         7c:6a:0d:d7:91:d3:c9:db:d5:f7:d8:66:cd:d9:04:18:c4:97:
         05:fb:7a:8f:54:a1:c2:92:d1:8a:71:18:fa:a3:ca:73:1f:05:
         5b:51:d4:b6:4e:3e:21:fa:83:0b:c5:f9:81:43:29:5d:5d:67:
         d1:d3:5f:a6:7b:e6:64:35:d9:e3:18:d4:34:d9:23:97:75:76:
         ac:01:f5:e2:66:cc:0b:d7:bc:45:c3:46:ff:fe:07:18:d0:7b:
         d4:0e:ac:ae:ca:78:13:87:d7:ba:2c:8b:3c:06:12:9f:b2:d2:
         49:5a:78:f4:43:6c:94:8b:72:a4:cd:c9:da:11:f6:6d:c6:52:
         33:8d:76:24:a3:d2:22:68:b0:42:d9:9a:ca:88:b7:e6:91:a1:
         dc:66:b6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEX0CPUuWhCVMXf1XL3mBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYwNzI0MDMwMDQ3WhcNMjYwNzI1MDMwMDQ3WjAzMTEwLwYDVQQD
EyhmZmE0NTBmZjJmY2IwOGI5ZDViZjdjOTM0MDhhM2QyMzZmNTU2M2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpfd9uSsB8gJQgFc30YowN7tkkHA
TqH/5Df1KAdDvUH/yinJeMJJTPP5S3Vh6kjHlr4S4RZT/FQ8jCnlF9kmvsRU9Cai
g2VGd9LratJEnRpEgmbOxQ+otyK7C+RR7rMfkTpQ2r/GFKajf0mERmckikQxSoB1
f5njI6CsPA1GtvecFjPyiYP81ypNEOoAwt9EqtFI2R2UWmVSffGWTCXL/XeUUWWS
eeGijh8dvx4rY03gDiywv4iu5YhcO5rauhAFrO9C0FpmZXZl0eXxru5a4B+uoK2D
YDspD95gIqRciQ9+Df6wGqpFG1NL8HgN2N3RAo3aNWYYQLKt+7Mdia0ZnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+kUP8vywi51b98k0CKPSNvVWPDMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgwu7g7G
eZnvqCJ+xKZTh/giXrRCB1WK4SXQmyumTo78T+d3uDHLJ14RrAM5QAFQLGmYSCOK
szBGw6zoHAarzTUYE7tZ4wuZzLmUenV6+k3MTAL8wmFlL9htk/wlD5C0odCKf4ax
rQLeVj8efGoN15HTydvV99hmzdkEGMSXBft6j1ShwpLRinEY+qPKcx8FW1HUtk4+
IfqDC8X5gUMpXV1n0dNfpnvmZDXZ4xjUNNkjl3V2rAH14mbMC9e8RcNG//4HGNB7
1A6srsp4E4fXuiyLPAYSn7LSSVp49ENslItypM3J2hH2bcZSM412JKPSImiwQtma
yoi35pGh3Ga2rA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:59 2026 by rpki-client