Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File:                     Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier:          SpBplBHGxwREq2iyX975w9Ve5FRW362Z7kIRIAb6+qA=
Subject key identifier:   86:0E:1F:A7:08:98:16:AB:AF:D7:D0:26:66:0D:D0:D6:17:E2:8A:95
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer:       /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial:       019F9391F617698D51801841A59E89F4C8C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 10:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:44 +0000
Files and hashes:         1: DsgH-2l0ZUEQ5QwDCoj8o-EpJFs.roa (hash: yvpnLBP9aiLVJJIHtl3Or2O/+llJmxZ1ZUNn0YtwZpg=)
                          2: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: gkJJag/3OzPNmRJIsGqhV6mmTTLjmTWP+t7uqpSIizE=)
                          3: NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa (hash: UE/nLkMq9esL2M39yDKTuiYBOgv6z8tQHjDR2GXbU1s=)
                          4: PpfIHCD22AUayAWPFxeE0m6hL9o.roa (hash: tEQKGH709CVuan0YOwHt1iqyxRmhemh2Iabk8KfvabM=)
                          5: X9ZqGynMA1KtK65ZVtTizqC4m9M.roa (hash: hcMM10zcyfbfDa1u/NFR+3E0NC3GcUNUVcvC/8j8tfA=)
                          6: pR8icRPbtmxZyLYy7ClhNlyoP3I.roa (hash: hJET2JInI9K0Hd2BzAqq/nSPxKB057Gd1PzyTDZKZpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:f6:17:69:8d:51:80:18:41:a5:9e:89:f4:c8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
        Validity
            Not Before: Jul 24 10:00:44 2026 GMT
            Not After : Jul 25 10:00:44 2026 GMT
        Subject: CN=860e1fa7089816abafd7d026660dd0d617e28a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:01:bb:ee:2a:9e:73:91:2e:c9:21:55:ea:
                    81:29:2b:51:88:3c:4b:61:e3:b4:22:21:d1:3d:17:
                    ed:8a:eb:d2:71:ac:2b:10:0b:42:e8:2b:5b:04:3a:
                    7b:b4:d3:b6:59:20:67:40:1e:b1:4b:3e:6c:c6:98:
                    02:5d:d7:b9:aa:c8:14:44:bd:63:cb:ed:6c:9d:03:
                    ae:af:9e:57:30:35:42:38:df:7d:77:89:a3:f8:3b:
                    a2:6a:ca:65:ac:e3:91:6b:f1:8c:6e:43:5d:ab:26:
                    00:be:cc:44:ec:28:3f:7f:08:ed:ad:49:8f:c8:50:
                    32:e9:2d:ef:88:45:fb:0b:55:bc:33:a8:e5:5a:4c:
                    21:07:49:7b:3b:2b:3e:5f:93:ea:2f:f1:2c:02:e1:
                    55:18:7c:89:05:12:a2:d8:8f:21:ad:03:7e:91:c3:
                    12:6a:d0:8a:27:a1:88:ea:ab:01:50:c3:19:ea:98:
                    98:1a:33:f0:5c:fe:90:38:0c:be:c1:1e:d8:5c:08:
                    37:77:92:91:b3:1e:1c:23:d5:bc:d8:52:c1:5d:1b:
                    17:51:61:57:97:a0:7b:a1:85:25:0e:d2:9d:55:ae:
                    bb:44:c0:83:ce:3a:b3:be:b3:5a:59:0f:07:29:1c:
                    e9:30:18:0e:c5:6c:40:67:98:b2:74:4a:3d:b6:5d:
                    83:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0E:1F:A7:08:98:16:AB:AF:D7:D0:26:66:0D:D0:D6:17:E2:8A:95
            X509v3 Authority Key Identifier:
                keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:05:ee:e0:34:d5:a5:39:1c:e5:83:38:de:ca:17:c6:f9:
         15:03:10:87:71:7e:78:fc:d4:f0:66:45:26:e0:8a:2a:61:4e:
         78:c3:14:2e:c7:f1:69:6c:9d:2e:a4:72:b4:02:21:73:f4:2a:
         2a:dd:f9:6d:16:0f:f0:2b:e3:1f:67:0f:96:54:ae:ce:4d:40:
         c8:e2:df:7c:91:df:b8:41:82:60:59:0b:0c:be:b4:12:43:f0:
         0e:ef:3c:db:71:f4:7b:7a:d4:b1:96:22:bd:05:ac:89:a3:cb:
         ce:64:55:c4:c0:76:a0:13:2e:10:99:79:08:15:54:65:4e:aa:
         8f:46:fc:a5:d8:2c:04:86:32:76:a7:40:3e:bd:f8:6e:b9:2b:
         17:c3:8d:0f:ba:30:67:c8:25:a0:93:97:37:eb:a3:8d:9e:69:
         34:be:e4:d1:96:11:0e:df:bf:0d:0f:f0:cd:e1:28:e6:46:9e:
         91:99:08:cd:64:bd:30:6f:27:85:d8:b8:46:2c:ec:29:34:85:
         39:69:3d:cd:1f:59:76:28:de:97:7e:e0:b1:fd:06:83:3a:62:
         4e:9f:be:15:b3:6d:e8:ab:a2:95:c8:56:3b:04:81:9e:42:92:
         bb:9f:24:c5:62:5e:17:25:a3:b0:ec:48:a2:01:1f:47:15:fc:
         43:cd:76:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkfYXaY1RgBhBpZ6J9MjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWVjNTIzMWQyMTJiMzEwNTc5ZDc4ZmM0MTQ3OWNhNmVj
MmFhMDcwHhcNMjYwNzI0MTAwMDQ0WhcNMjYwNzI1MTAwMDQ0WjAzMTEwLwYDVQQD
Eyg4NjBlMWZhNzA4OTgxNmFiYWZkN2QwMjY2NjBkZDBkNjE3ZTI4YTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PQBu+4qnnORLskhVeqBKStRiDxL
YeO0IiHRPRftiuvScawrEAtC6CtbBDp7tNO2WSBnQB6xSz5sxpgCXde5qsgURL1j
y+1snQOur55XMDVCON99d4mj+DuiasplrOORa/GMbkNdqyYAvsxE7Cg/fwjtrUmP
yFAy6S3viEX7C1W8M6jlWkwhB0l7Oys+X5PqL/EsAuFVGHyJBRKi2I8hrQN+kcMS
atCKJ6GI6qsBUMMZ6piYGjPwXP6QOAy+wR7YXAg3d5KRsx4cI9W82FLBXRsXUWFX
l6B7oYUlDtKdVa67RMCDzjqzvrNaWQ8HKRzpMBgOxWxAZ5iydEo9tl2DYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYOH6cImBarr9fQJmYN0NYX4oqVMB8GA1UdIwQY
MBaAFC7uxSMdISsxBXnXj8QUecpuwqoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDIt
MjcxYTk1NzZlYWU3LzEvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDItMjcxYTk1NzZlYWU3
LzEvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrIF7uA0
1aU5HOWDON7KF8b5FQMQh3F+ePzU8GZFJuCKKmFOeMMULsfxaWydLqRytAIhc/Qq
Kt35bRYP8CvjH2cPllSuzk1AyOLffJHfuEGCYFkLDL60EkPwDu8823H0e3rUsZYi
vQWsiaPLzmRVxMB2oBMuEJl5CBVUZU6qj0b8pdgsBIYydqdAPr34brkrF8OND7ow
Z8gloJOXN+ujjZ5pNL7k0ZYRDt+/DQ/wzeEo5kaekZkIzWS9MG8nhdi4RizsKTSF
OWk9zR9Zdijel37gsf0GgzpiTp++FbNt6KuilchWOwSBnkKSu58kxWJeFyWjsOxI
ogEfRxX8Q812fQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:01 2026 by rpki-client