Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          WX5IGTY7yWhUsqarIBrOZBRvdfJwWi58oyqAqM/RAoA=
Subject key identifier:   6D:FE:B3:12:B1:3E:B7:3B:F5:82:FD:C2:50:C0:E4:1A:1C:A5:7B:FA
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       019F90FF3CECC70214F52FBCB004D65129CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          0C3E
Signing time:             Thu 23 Jul 2026 22:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:14 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:14 +0000
Files and hashes:         1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: pIw6aY/AtBjIMzg9kYsRrehqjrXQyanBisLkgE9Bxuw=)
                          2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:3c:ec:c7:02:14:f5:2f:bc:b0:04:d6:51:29:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: Jul 23 22:01:14 2026 GMT
            Not After : Jul 24 22:01:14 2026 GMT
        Subject: CN=6dfeb312b13eb73bf582fdc250c0e41a1ca57bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:22:a6:0e:90:ff:d6:16:ed:37:67:c0:ed:
                    73:3b:ff:9a:ec:db:d0:d0:b6:36:97:dc:a9:7b:fd:
                    30:8f:bd:93:a1:c2:cf:ff:ce:49:ed:db:0a:c5:d0:
                    d8:25:0a:42:be:84:e9:97:e3:b3:a4:c7:d6:3f:5a:
                    92:01:6e:ac:e1:67:78:9b:95:ed:b8:9c:03:67:29:
                    ef:be:8c:91:08:b7:a9:b8:17:09:47:15:47:4a:85:
                    16:da:6b:c0:54:7e:00:9b:2a:c5:26:a7:e4:24:d9:
                    61:b5:b4:a1:20:38:f7:32:fe:e1:00:4c:8d:19:7b:
                    ca:77:47:a0:84:aa:84:25:7c:42:97:d1:08:5c:bf:
                    0d:a6:f5:34:36:61:1c:a0:22:dc:ef:01:9f:81:82:
                    f5:d3:ea:6b:2c:9c:10:50:e3:bc:fd:e5:ae:c1:90:
                    3b:57:9c:2d:93:44:ef:bf:c3:cc:5e:02:60:a3:32:
                    09:7e:96:b3:3d:9b:01:7e:a9:bd:5d:2d:a6:10:b9:
                    4f:af:56:3d:bf:38:74:8e:4a:62:e0:80:10:f6:5f:
                    6d:40:45:aa:10:5c:60:b7:5d:2a:5c:0b:e6:77:9e:
                    c8:13:8e:58:4b:90:b6:8d:1c:7e:b6:36:28:99:9c:
                    ef:ed:58:70:1b:e7:2f:83:44:83:a2:e6:07:38:3d:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FE:B3:12:B1:3E:B7:3B:F5:82:FD:C2:50:C0:E4:1A:1C:A5:7B:FA
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:41:b4:01:38:b1:98:b7:38:bb:07:7b:90:be:68:a8:8e:
         4e:43:3c:c7:69:29:31:87:3c:7c:6c:c9:ef:b2:94:15:1f:f5:
         72:55:19:c5:c1:b3:4b:39:6d:38:87:37:c0:fa:4b:f7:21:48:
         c0:81:69:80:28:80:53:93:6f:60:5f:f2:31:a7:2b:88:bc:f2:
         46:73:9c:b7:13:89:04:6f:73:05:b1:c6:c1:1e:92:a8:03:c1:
         49:f9:7a:c2:86:59:4b:9a:fb:b9:51:58:3b:f3:c0:40:8c:fd:
         4f:2b:3d:e6:5f:bb:67:55:11:7a:e9:48:55:d3:c0:47:e9:00:
         aa:d2:a1:59:fa:72:fc:61:c4:5d:b2:54:77:f3:7f:2a:ac:c0:
         dd:e7:53:bf:33:bd:90:78:f2:55:31:3b:0d:c0:d6:73:20:a0:
         43:c7:8b:57:20:ec:2a:28:4e:54:69:8c:93:0d:e0:e3:a0:e1:
         8a:94:64:9b:41:a0:b7:01:d4:b4:4a:19:9d:15:07:cc:a2:ef:
         7e:4b:d1:95:8c:97:dd:a2:5b:32:07:98:e3:a4:fe:73:64:9c:
         1c:c5:17:d8:d5:70:f8:4c:3f:b9:dd:44:63:2f:fe:4d:08:39:
         61:1f:20:5d:c2:7a:83:0a:8b:13:4f:a8:7a:f0:33:e3:38:b8:
         f6:0c:77:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:15 2026 by rpki-client