Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          G4UPEBSizrJu/Fw4QJqUrBvvADTyVuxGJdYgopTsafM=
Subject key identifier:   7F:5B:3F:A4:54:48:F9:EF:E1:64:DF:DF:25:E7:16:E2:B0:02:C0:A4
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       019F9091114CEB3479B905B11DA088C3B6A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 20:00:53 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:53 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:53 +0000
Files and hashes:         1: 84vd5jFW7nOmlqfDw_xa2JGg7Bg.roa (hash: rNTsCrnkBSEotffzabMsfyCIf6z9oVHssU96RenS0Ts=)
                          2: LCzOtBHmWZH3LMf19Tv6iZ3PyAA.roa (hash: ok1BqU/j817hL0rg14Y5eXLHkWWn2Jj6wQeonBm4dcs=)
                          3: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: zzO9nt2LCjW8mXuMpWD3NFM72q5PymXP77rz92TnBrE=)
                          4: MBwRKSHfxRIenZ6VTtp6s77mU-g.roa (hash: ZUftLriouLT0rVggX9Wl5+VKJOkkEmSY4zXobVbg1VA=)
                          5: XIo_9-qFy5wjas20w7MdEaNT8T8.roa (hash: mjSD46sU4dPzZBYqQEdjYI8aGEpVPeI7VUJMRwMVNGY=)
                          6: aZBPshcpYuW3uiPNklELJKpWxB0.roa (hash: FDs/jppjg3SFmpeDxF8pcdK8smBMdmkqoES9cLDqS0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:11:4c:eb:34:79:b9:05:b1:1d:a0:88:c3:b6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: Jul 23 20:00:53 2026 GMT
            Not After : Jul 24 20:00:53 2026 GMT
        Subject: CN=7f5b3fa45448f9efe164dfdf25e716e2b002c0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b4:e1:e2:e1:57:d9:e9:a8:11:57:b4:ee:31:
                    34:08:70:b3:2b:14:54:9c:72:07:23:fa:3f:ef:e0:
                    b5:38:e0:a9:59:b7:ce:20:3f:8f:c7:16:94:c9:57:
                    17:92:1e:d3:4c:f1:fa:0d:6d:da:61:1c:14:2c:09:
                    96:02:1d:86:58:78:19:13:98:5f:65:2d:4a:16:92:
                    e7:b7:3e:e1:16:41:75:9a:6f:28:1c:28:b4:47:d7:
                    80:7d:2a:83:f8:f0:08:86:6d:7d:b5:9f:c2:42:51:
                    43:31:25:a4:6a:b0:78:9d:c3:64:cc:50:83:b1:be:
                    11:4d:03:41:8f:10:2d:77:be:72:86:5d:d7:f6:84:
                    ea:1e:c0:96:bd:ab:83:a9:91:d2:a4:76:a9:93:16:
                    57:ae:e4:13:1b:7f:c1:72:9a:22:35:db:2a:7e:6c:
                    28:f7:f7:ba:2c:a4:95:53:20:cf:18:4c:ed:f5:b4:
                    ca:b3:ca:d1:0f:32:5c:30:66:84:7b:e4:29:f6:68:
                    ed:84:66:9c:fc:c3:63:ab:ab:3b:cd:40:36:5d:84:
                    8f:a7:b4:c0:a6:86:64:92:62:dd:26:24:50:d8:5d:
                    e8:b9:79:e8:aa:98:14:33:e3:01:1b:a6:70:cc:e3:
                    42:78:0e:9b:95:5f:9d:67:0e:f4:5e:3b:58:0a:df:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5B:3F:A4:54:48:F9:EF:E1:64:DF:DF:25:E7:16:E2:B0:02:C0:A4
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:03:9b:c8:8d:78:97:a0:b4:fe:16:fd:cc:63:6b:19:2d:
         7c:25:20:8a:d2:18:cb:dd:35:3e:61:7d:53:c2:8a:31:62:58:
         34:38:89:b2:cf:66:57:08:8b:81:c7:ff:9e:53:b5:34:ca:b5:
         2a:aa:5a:48:12:ea:46:04:c1:44:6d:5c:d5:fd:c5:55:b2:ae:
         63:37:aa:0e:28:8e:8c:fb:23:be:47:c3:c4:c4:69:01:9a:29:
         9c:2c:cf:46:da:3f:dc:15:1e:51:04:4f:6b:bc:b9:56:be:71:
         3e:b4:c6:96:65:94:8c:ae:d4:c8:ce:df:a2:bc:02:d6:1b:5a:
         5d:cc:3c:2f:4b:e0:7e:fb:e4:31:5a:c3:2f:41:f0:db:72:dd:
         9a:5b:de:6b:5c:04:e7:d8:9b:78:79:af:b8:53:7c:96:55:70:
         d9:ea:ac:6a:94:2a:68:43:1a:6d:9b:c5:2f:cb:7f:7b:8b:7f:
         12:02:e4:fa:b0:99:91:fd:56:85:65:a2:61:85:cd:85:24:9e:
         0c:35:a4:e6:96:69:3a:77:cb:b1:c3:4b:2b:be:d8:aa:42:f3:
         0e:95:9d:d8:33:6d:ba:02:01:a5:d1:ce:51:4c:fc:38:f8:b9:
         42:85:32:50:09:9a:77:58:59:95:16:2c:7e:65:e8:e0:38:52:
         98:c1:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:51 2026 by rpki-client