Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File:                     LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier:          UgWT+YASRrelEZ841kqkPY0ivifk2rNQQqvFuP+Blqw=
Subject key identifier:   4C:5B:92:2F:DA:5C:BB:88:B4:0E:EC:30:94:EB:5A:A8:0D:09:A7:CE
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer:       /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial:       019F9135A479861B74C5D34E26E1615F3EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number:          19DD
Signing time:             Thu 23 Jul 2026 23:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:39 +0000
Files and hashes:         1: 1jBYr9FWsRPu64lYAnK0ta-WBdA.roa (hash: 3LputYmrn0IPDDaA7qSescZ3E0lTXKfvLlqfzkE/kU0=)
                          2: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: hvLDKUxJ21B0zhwBjEWyeGBi/FsHfKNv6Vg1A1mC+6Y=)
                          3: PTD9xAwEKqmx4gmmtDTPK0hTyJw.roa (hash: ovDAPJ84DYuT4dk89ty5XzeA2lvBX0g4FHWlLvwK+L4=)
                          4: e0gBckKM8RCRyEWahinENn_HbtU.roa (hash: DWkQzCqPzt4lmehS+9KyYFJuTYn4w267Y8hX/gXWw5Q=)
                          5: hXW_JJYbDEuARBvQ3ahscidHNa4.roa (hash: vgu1i3fvHneLweEnm2qJqevE9QNy+k15JJYScMlG9SQ=)
                          6: iAjz_7XGgeyKjKOC5mMhN8Ql2MM.roa (hash: 9fe4RXvq0cI0elK7H6sALndgETw3KtEVWMKky23SlPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:a4:79:86:1b:74:c5:d3:4e:26:e1:61:5f:3e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
        Validity
            Not Before: Jul 23 23:00:39 2026 GMT
            Not After : Jul 24 23:00:39 2026 GMT
        Subject: CN=4c5b922fda5cbb88b40eec3094eb5aa80d09a7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:b1:d3:bb:ea:db:45:4f:7c:39:f9:81:b6:
                    84:95:51:5d:00:73:99:26:35:60:b7:7c:ad:a9:9b:
                    31:90:c5:9e:77:08:4b:0e:56:d8:6e:8f:76:35:b0:
                    dc:af:fb:f4:e9:33:69:75:c8:4c:56:e3:9c:73:31:
                    c1:bc:13:8e:8c:69:38:cb:c9:0d:d3:10:96:56:21:
                    f9:8b:56:80:51:47:2f:44:35:ca:bc:df:b7:93:cd:
                    93:98:ba:2e:79:7d:ef:fa:96:68:e9:fa:46:ce:78:
                    51:03:43:a9:5c:b7:aa:d9:50:5a:c0:b0:bd:ab:55:
                    70:0b:1a:fc:18:c0:c9:1f:2f:81:49:5b:0f:66:34:
                    07:4d:14:88:8c:04:cb:6d:f8:12:58:19:3e:20:d1:
                    db:3a:55:a7:dc:4e:d7:fc:a4:bb:e8:a1:24:48:4a:
                    25:ce:8b:ac:8c:76:41:6a:44:e4:bf:52:aa:9a:ef:
                    00:2e:07:1d:8e:5e:c1:a8:1b:86:2f:1d:a8:24:dc:
                    c9:c4:67:33:d5:bd:3f:47:a3:a6:2f:57:a6:5c:67:
                    b7:20:d0:2c:32:e2:82:a0:d1:4d:72:59:2d:34:26:
                    b7:2c:3b:2a:34:8e:5e:d3:78:e3:1a:81:df:ab:27:
                    91:85:25:83:6f:8b:95:da:ae:11:ee:92:aa:ec:61:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5B:92:2F:DA:5C:BB:88:B4:0E:EC:30:94:EB:5A:A8:0D:09:A7:CE
            X509v3 Authority Key Identifier:
                keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:13:73:1a:75:70:f2:cb:8d:b5:e5:73:1e:03:3d:39:1e:cd:
         90:2e:c9:51:c8:ab:74:c7:46:a8:15:b1:5e:bb:db:d8:66:2e:
         ad:07:24:ae:a0:42:4d:63:82:6b:70:64:e4:98:cd:2d:70:54:
         b7:26:79:ce:be:93:25:83:6e:93:a5:53:93:71:6b:15:e6:b6:
         2e:9f:08:41:cb:d2:c4:0f:6e:2a:64:c3:65:51:9b:45:09:b7:
         58:35:f8:cd:d5:67:a2:a6:ac:d2:86:cd:c3:a5:62:ce:86:c1:
         d0:1e:4f:c2:64:4f:22:53:29:2d:bd:d7:ed:3a:d1:2b:36:54:
         27:41:29:d5:12:ae:7f:45:f3:d1:1f:3c:d3:b9:fc:7c:97:cd:
         cc:fa:ab:7d:2e:a7:8f:3b:1e:4a:10:4f:e9:82:1c:07:af:92:
         66:f3:ba:1d:39:44:1e:60:3c:69:b2:16:5a:de:16:bf:44:03:
         b4:24:61:26:f6:0d:3a:33:ec:1d:5c:f5:63:09:c9:39:52:3e:
         eb:ee:da:30:dc:86:fc:b6:69:fc:1b:63:31:85:47:20:d2:71:
         a6:c4:04:41:15:2d:c1:07:f1:23:34:a8:5b:6a:d6:d6:84:69:
         c3:85:d2:5c:b3:13:90:12:6d:9c:b5:d0:e0:44:f2:c4:7b:4b:
         6e:2b:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:04 2026 by rpki-client