Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
File:                     LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json)
Hash identifier:          SDjjYDNdlmrG6pCAjQgT2yUC7y7aL7POeyUuXPSKpJA=
Subject key identifier:   0E:D1:2E:0B:88:A2:A7:F1:28:B0:47:31:3A:AE:80:B6:0B:95:91:8A
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Certificate issuer:       /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial:       019F921144FC96D771F3D61719602C3F347E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 03:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:32 +0000
Files and hashes:         1: 5jc2wZ5h8yJqzKoCHWycS9o75jA.roa (hash: oCcrDJgLBEA08xoRtgAzvU9F//XHVcP3y0L3DCbnQ2I=)
                          2: 7GoUojZZ6diF9qsUn9IS925PZ7o.roa (hash: Sz9PIg50qPliDwsm2Y9z/qtxdUkq5QME6EMfyNzUMrk=)
                          3: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: p4k8xBA42Oxwfr9dDQEfZiDBn5fz5SrBDChhUoVv5qA=)
                          4: ZqdZ82l6x_sImb0z2qHfrZ32niI.roa (hash: 5tEujsZakk6ZY2BbCuw7ovz7bymmGnvvS7AlQ1ZU4NA=)
                          5: c7lZje9uN1P8Z0Pai2JJbiwVpOQ.roa (hash: qt+6d63QI9K54qUjpXO2acJvethD5zarG3xunh8N+xA=)
                          6: mlNWM6dCU5UIxS4aP3BuiFtRgxY.roa (hash: TLA7VcAnegDakU8vEm/ShMfxKp3pK7fJGLX8w4pyHi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:44:fc:96:d7:71:f3:d6:17:19:60:2c:3f:34:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
        Validity
            Not Before: Jul 24 03:00:32 2026 GMT
            Not After : Jul 25 03:00:32 2026 GMT
        Subject: CN=0ed12e0b88a2a7f128b047313aae80b60b95918a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:90:83:e4:8f:df:d6:3b:c3:fc:49:2f:e2:
                    40:4c:99:81:31:3e:55:37:4a:7c:ed:79:c6:76:2e:
                    7d:35:17:da:4a:c6:da:00:05:3a:89:57:b2:12:d8:
                    81:93:ec:fc:3f:61:94:af:93:3d:c6:48:43:17:aa:
                    19:c0:98:95:0e:64:ed:f2:d7:33:c9:52:15:b8:48:
                    e3:58:30:e5:db:f6:06:2d:e2:c8:85:e0:e1:34:2c:
                    a8:cd:38:0e:e6:54:3b:e4:cb:b8:18:68:ac:43:5d:
                    a7:72:a9:0a:27:fa:3d:bc:63:38:23:c9:2a:80:25:
                    12:a4:a3:0c:c1:d2:e5:f7:23:a0:60:a3:95:78:dd:
                    1e:81:19:df:4f:ef:ce:6e:6b:60:24:d2:ca:c4:99:
                    3b:80:49:cb:95:b2:95:02:20:b6:46:09:2d:f9:6f:
                    b9:85:b6:a6:68:77:d6:a6:94:ff:83:da:d9:f5:88:
                    8b:46:57:5d:7e:ca:20:4a:56:bc:88:c3:c6:7a:07:
                    40:61:25:ca:ad:38:f2:2b:82:70:42:eb:4f:01:81:
                    63:cd:48:9c:d6:56:f8:0b:98:64:c8:f7:9f:4a:46:
                    80:cc:19:b5:46:50:b5:08:5b:4e:c0:62:0a:7d:d7:
                    86:e7:f4:2f:e3:3d:3b:8d:de:e1:c4:b7:cd:c1:44:
                    73:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D1:2E:0B:88:A2:A7:F1:28:B0:47:31:3A:AE:80:B6:0B:95:91:8A
            X509v3 Authority Key Identifier:
                keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:e4:f2:58:7e:8c:38:43:d3:c0:c3:a8:63:bc:ae:bd:34:
         91:75:58:24:84:8a:8a:8b:94:e4:d6:fc:d0:3f:e1:a3:75:f4:
         8a:e2:85:4d:a9:fb:97:fc:eb:c9:3b:70:05:26:6e:72:9b:41:
         9d:8d:34:23:cc:6a:ef:8d:48:3e:13:29:26:45:5b:f7:b0:db:
         13:cb:d7:4a:2f:dc:40:0f:72:17:7e:1e:09:69:06:63:e3:92:
         d3:59:59:96:bb:7b:3a:25:24:29:87:cb:66:cc:94:46:f3:d5:
         c6:0f:b4:85:d0:07:c4:54:10:cc:33:c6:f4:f1:61:30:5e:99:
         f1:71:8f:ad:25:92:20:44:13:ec:cf:cc:5e:87:6c:13:32:46:
         e6:0e:4b:57:b1:36:44:e6:97:d1:45:c0:e3:ba:96:24:db:70:
         13:9d:d5:5d:ea:64:21:7b:1a:e0:3e:b8:4f:80:58:45:0b:d6:
         83:14:ec:82:b3:be:e6:11:09:2c:e0:0e:d4:7c:6e:14:3b:68:
         ab:68:fc:ce:a4:bc:f1:b8:db:61:a7:73:48:a5:28:72:e8:b9:
         07:f0:a6:8c:21:b0:e4:33:87:06:32:2f:85:b4:4e:53:e5:29:
         45:a6:69:04:ae:40:3a:8b:d8:2e:e0:ba:8f:98:50:52:3e:3a:
         76:72:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:13 2026 by rpki-client