Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File:                     LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier:          XofgT2b1D7R6FuI4JwlhVjlfDp7C0B6xnlZ1a+sgMXA=
Subject key identifier:   50:CA:52:CF:6E:4D:7F:FA:6C:A6:EA:F3:C7:F2:58:A5:D8:23:D9:5D
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer:       /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial:       019F8F7F6ACB602E573C58B564E6CBAFFBD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number:          08DB
Signing time:             Thu 23 Jul 2026 15:02:00 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:00 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:00 +0000
Files and hashes:         1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: 7+6HoJcYSSiB8gfn/wZrtIxlrnwAzxKORcyFTy2LrLo=)
                          2: no40MMxKtGazjrQJuK_hKTX_kQ4.roa (hash: ZQzvJpr6epq0Aai6epv/lFRS0bDsbahhA2A50WGodXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:6a:cb:60:2e:57:3c:58:b5:64:e6:cb:af:fb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
        Validity
            Not Before: Jul 23 15:02:00 2026 GMT
            Not After : Jul 24 15:02:00 2026 GMT
        Subject: CN=50ca52cf6e4d7ffa6ca6eaf3c7f258a5d823d95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:b2:fd:43:72:4f:df:a5:50:9a:9d:0f:77:
                    6d:98:96:0d:88:4e:9a:e1:cb:22:8d:23:5a:fb:3e:
                    c7:24:e2:39:04:81:e3:b1:72:2f:63:e2:2e:2e:ba:
                    0a:2e:ad:9a:0c:3f:d0:c6:0e:8e:50:5d:f9:18:aa:
                    44:c1:a1:13:8e:5b:d9:a0:c1:08:17:7b:af:67:fc:
                    ba:0f:f8:b5:69:e7:1f:4c:2b:18:f0:5a:af:f0:bc:
                    ac:75:3d:8d:90:4a:2e:18:8c:d6:f1:77:0f:7b:d6:
                    22:f9:c7:2e:48:76:ef:27:e4:48:80:e6:96:b3:97:
                    40:27:af:62:70:c3:ee:78:53:b3:51:85:69:4f:50:
                    c5:13:82:8b:04:e3:64:3b:45:05:49:9a:f0:72:e3:
                    f4:f6:35:33:82:c3:12:48:0c:69:11:25:bb:31:f8:
                    09:b8:46:83:24:3c:42:c5:4b:9d:90:fc:28:e4:84:
                    7a:77:61:1e:8a:dc:52:62:fe:a9:f0:95:c3:68:06:
                    70:f5:dd:fe:c0:8c:29:4a:d7:2d:c1:20:28:8c:04:
                    b8:80:f3:08:97:18:04:3a:d3:73:7a:8e:e1:90:61:
                    4c:22:a6:f3:ff:cd:20:dd:9a:9a:6d:81:71:e8:e8:
                    02:66:73:7a:40:c4:b7:19:b3:54:72:9a:d7:42:d8:
                    86:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CA:52:CF:6E:4D:7F:FA:6C:A6:EA:F3:C7:F2:58:A5:D8:23:D9:5D
            X509v3 Authority Key Identifier:
                keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:31:76:4d:5d:77:34:0f:8d:7f:b6:8b:de:05:ab:83:f6:2d:
         e4:af:34:ac:48:64:b8:a9:f5:e5:fc:7a:de:74:4b:ad:ac:9a:
         cd:b6:d8:a6:4a:5f:16:99:56:60:67:e6:c2:99:5a:9b:bf:eb:
         b7:72:ca:67:c3:11:1b:a8:65:9f:4d:32:ae:0a:a8:35:99:23:
         72:79:b6:05:43:fb:48:5b:7c:d9:3e:6d:7c:40:5b:0b:42:33:
         50:7b:e7:35:e9:64:d1:48:7e:b2:88:2a:1e:0f:c3:de:46:ac:
         15:9a:e4:3e:66:18:0c:d3:94:46:47:86:2a:ad:87:f7:5f:4f:
         b8:1e:3d:df:9b:c9:09:f1:ed:b2:eb:83:a6:81:0c:c3:da:41:
         af:a4:e6:69:f1:db:70:29:a9:af:88:2e:39:01:d4:ec:44:f0:
         dd:85:2e:63:ff:3e:f2:b0:7c:d1:70:7a:12:4e:1b:eb:72:58:
         24:39:d9:02:21:53:2d:11:4b:cd:41:b1:c0:09:80:54:bc:05:
         b0:52:d5:85:27:75:56:d4:42:dc:d0:3a:af:ca:25:10:f7:ea:
         aa:5d:8c:e9:fc:c8:9b:b5:f3:ef:b6:10:5d:8f:09:9e:2b:bc:
         6a:73:03:e5:88:4a:76:05:33:a7:3a:11:72:0c:06:d8:95:e3:
         e9:4f:93:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:39 2026 by rpki-client