Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File:                     lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier:          9E0PO2Q2juU+1nDJLUq49XgAoRdBw+qwIwy/hOQP0v8=
Subject key identifier:   A1:D2:4B:9E:67:33:53:1A:E0:EF:B1:95:19:2E:F7:A2:BB:BB:D0:BE
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       019F91A4003C6E1CAE29305275BDE4B0A505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number:          12B5
Signing time:             Fri 24 Jul 2026 01:01:11 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:11 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:11 +0000
Files and hashes:         1: 1ZFzpY9gqaxllEXCBRcpbFZtvSI.roa (hash: 5BFrURuD3slP3IWW2XdDULNhAMP/7M8VYqXagPl/wDQ=)
                          2: 1uykX7XuB8BdjpT1ugfsAuVxO_o.roa (hash: +nVFIj8xJeJ89FbQF7uxdxGPy/z6Fq4PX9E3VSgew2Y=)
                          3: EtJ-6tnlV-8Aq-PH552cwzFu99I.roa (hash: SBFjWOaED819zRLjY2dQChZmsO5IFbHiGrw9/77Wj6s=)
                          4: GtNPLSqRjUfiSLxRi-Ce9sVuTGQ.roa (hash: JB1pYw57Yr1bAJrz8smCssS+SCyFT5zXYqbhByC3w8s=)
                          5: GtaUr1pVDYR4nA-DpuJ2QCpNuw8.roa (hash: mG29UJlTWQAPMIt0L2ia2KsTcVs37XsyB6zB2jjrPLM=)
                          6: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: +Sl+m3aFPBAtY9ZeGqjixTs5G3rPF93UY5PvJO33gAI=)
                          7: wGMUVNncpYfWtK4-oyStFeTWsBk.roa (hash: rt+8kuiSOGaDXCD9dzirhX9La3uLydkllJTxo+PVxQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:00:3c:6e:1c:ae:29:30:52:75:bd:e4:b0:a5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: Jul 24 01:01:11 2026 GMT
            Not After : Jul 25 01:01:11 2026 GMT
        Subject: CN=a1d24b9e6733531ae0efb195192ef7a2bbbbd0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:02:58:d0:27:3d:27:cb:5d:42:0a:c1:aa:
                    ef:b9:2b:fb:34:9d:08:63:01:90:b2:0e:c0:51:c0:
                    8b:4d:c0:9d:49:34:02:c7:06:dc:90:f5:76:c6:26:
                    6e:55:42:78:08:32:5b:c2:7c:f1:99:28:f7:fb:9e:
                    21:83:dd:e1:69:3b:0c:63:b9:6c:88:3f:be:63:2f:
                    fe:6b:33:19:92:18:ae:0b:0b:c7:b5:54:02:0e:bd:
                    29:6c:6c:39:0b:09:e9:2e:e6:8c:2d:04:1e:b8:a3:
                    e6:a0:b5:b6:d1:35:59:78:06:b0:da:a4:15:3d:be:
                    0e:6f:6d:2b:b1:38:0a:5f:66:b2:5e:f3:03:b8:4a:
                    78:23:8f:48:a1:76:c2:84:29:0b:a7:e8:4e:fe:e3:
                    54:9e:a8:9c:bb:cd:87:b4:66:d7:4f:cb:da:c0:ff:
                    2d:9d:5b:f3:30:66:09:84:e8:2d:11:fb:85:4c:ea:
                    bb:d3:58:30:82:56:d1:5e:35:0d:c3:ed:99:61:dc:
                    08:6a:ac:3e:9c:9a:a6:d3:64:f7:88:fb:fb:a6:51:
                    26:45:d5:c4:46:f3:bc:07:23:9e:1c:74:6e:9f:48:
                    64:26:fc:72:9e:92:5e:f2:cb:07:ce:19:94:64:88:
                    a1:0e:d3:f7:cf:21:9e:4d:72:73:d4:2f:ac:6a:eb:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D2:4B:9E:67:33:53:1A:E0:EF:B1:95:19:2E:F7:A2:BB:BB:D0:BE
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:95:3c:a5:1a:5d:17:61:28:e7:c2:09:f1:69:6d:dd:23:45:
         4e:0a:41:e0:ae:4c:cd:e4:88:8e:9e:ab:39:54:57:1d:a0:5b:
         cc:7f:a8:fa:75:54:63:eb:e9:4b:33:80:00:ce:69:3a:e8:44:
         b0:ac:9a:11:14:16:fc:8d:55:ad:52:eb:49:6b:3f:35:b7:af:
         50:ac:13:0e:75:23:09:b0:e6:6a:c4:8e:73:9d:b9:4f:e8:7d:
         8a:65:31:71:70:9c:1c:b1:9e:21:6e:61:6e:6f:09:ff:9b:6a:
         d9:ef:f0:71:8a:59:ab:e3:da:fa:1a:2e:1b:15:17:ac:1f:0b:
         ad:bc:ca:71:c6:11:8d:f9:c8:0b:a5:1e:01:fa:3a:0c:55:45:
         98:73:36:9b:8c:82:46:b3:71:cb:04:39:fd:03:97:5e:ce:3c:
         56:1d:5a:b5:ea:db:c4:4b:37:86:ed:53:a7:6c:16:4c:3f:b0:
         57:70:1e:84:d4:c5:ae:33:ed:d1:3d:fe:48:6b:f3:cf:f0:39:
         df:93:52:5a:aa:dc:6a:fd:03:1b:25:74:69:42:f3:31:e6:d5:
         6b:86:13:c2:54:d6:36:5e:5b:f7:39:2b:ec:1a:d5:cc:a0:b0:
         52:84:8d:28:53:7a:1a:b0:f4:23:ba:ae:c5:08:bf:bd:a7:03:
         cb:e4:81:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:46:50 2026 by rpki-client