Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File:                     LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier:          F0d6IahDJ+LvE0WnkU7sab0ohfzrZP7cBx813GpcPA0=
Subject key identifier:   EA:57:A7:E5:AA:9E:61:80:8B:81:28:C9:81:E4:FC:B6:94:B6:58:AD
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer:       /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial:       019F8F47526BF4B7A2970D2CD77C2F93776E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 14:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:43 +0000
Files and hashes:         1: BHb65oEe87M0M_POvyT9Y4SCR5o.roa (hash: sBqJRrwyip4eAtZfyp+mo4JP1rjpyldZyBdCRdUfx7M=)
                          2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: 2CRNo/ebjrvHcBwpVpfMZuEsfgeeJKd+y4X5e321raE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:52:6b:f4:b7:a2:97:0d:2c:d7:7c:2f:93:77:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
        Validity
            Not Before: Jul 23 14:00:43 2026 GMT
            Not After : Jul 24 14:00:43 2026 GMT
        Subject: CN=ea57a7e5aa9e61808b8128c981e4fcb694b658ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:96:27:bf:97:e2:4f:63:50:c3:4c:fa:9f:b7:
                    0c:3a:d2:79:e0:d2:10:3a:64:1d:86:6c:e6:f4:26:
                    d5:c5:9e:4e:41:7d:8b:29:41:de:65:50:4c:e6:7e:
                    4f:5b:e7:f7:c4:3e:9d:17:e0:75:f8:6d:a4:c4:b3:
                    48:e4:34:14:c3:ba:02:af:e3:b2:01:60:b0:53:f6:
                    06:b4:58:2e:0f:65:a3:5f:e6:62:19:90:50:c0:b1:
                    6c:8d:d8:e8:d0:6a:38:e7:e9:de:68:5d:e3:0a:31:
                    d3:7d:20:46:d7:6d:1a:32:25:c6:0a:1b:00:6c:43:
                    b0:e7:ba:db:87:9f:43:43:32:34:27:52:4f:b6:9d:
                    37:7d:0d:b8:a4:18:6d:44:39:e6:44:9b:90:9d:5f:
                    e7:11:67:19:a0:a5:39:cd:cf:fc:2a:74:21:1c:74:
                    7c:38:70:07:5d:aa:44:3e:ab:d3:37:d1:9a:dc:32:
                    95:9f:d2:92:47:b4:ae:f4:89:cd:4c:ae:c5:f3:be:
                    de:fd:b4:e6:f4:73:76:8e:c4:ae:7f:30:56:48:4f:
                    7e:7a:22:a7:69:3b:be:10:0d:e5:8b:46:f0:e7:49:
                    1c:96:eb:1f:0b:d9:09:ac:bf:92:51:ce:59:3f:9a:
                    be:a6:f8:ca:f6:d3:76:2a:1e:0e:16:7d:56:87:3b:
                    f2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:57:A7:E5:AA:9E:61:80:8B:81:28:C9:81:E4:FC:B6:94:B6:58:AD
            X509v3 Authority Key Identifier:
                keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:17:69:65:09:39:23:31:24:24:5f:fb:e2:fe:c2:be:b7:ae:
         cb:a0:d6:92:8d:59:7b:87:5c:28:80:a8:5c:77:44:2c:43:ed:
         33:11:4b:50:8b:53:9c:63:d9:7e:d5:75:13:0d:a8:3a:42:a3:
         01:87:f9:22:ae:d0:85:fb:c8:82:30:4c:c8:27:c3:83:38:d2:
         4c:cb:ae:05:5f:f5:b9:ed:e0:44:3e:6c:29:6a:0c:de:ca:93:
         4a:9d:72:ee:31:97:f3:10:53:e0:c9:b9:ab:37:82:1b:e4:2f:
         2b:37:3d:09:de:f2:3c:b4:84:94:16:46:0b:18:5d:79:88:5f:
         6c:41:bb:30:51:c3:28:73:65:ba:d6:ae:a1:ef:de:10:7c:61:
         40:0d:3e:05:be:d6:4a:37:fa:6b:a5:c0:26:cb:7f:04:92:79:
         3b:4b:88:58:a9:bf:f2:53:ab:73:46:f3:10:6b:a0:7d:5f:33:
         4c:96:0b:97:fe:5e:cd:79:8a:58:d5:1d:75:9e:1f:1a:5b:dd:
         f3:94:b4:81:e8:7f:8c:de:99:86:94:d0:51:60:01:27:f0:32:
         6b:9d:23:84:02:72:2e:ea:13:f9:89:97:1a:f9:09:b4:d1:a7:
         dc:91:45:42:19:dd:87:28:bf:a8:0f:3d:9f:0c:26:9e:34:1b:
         ec:1d:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:03 2026 by rpki-client