Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File:                     lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier:          lLLeQCITxArbm/pVYhTrsju42LWRUtmTBryq+ok4DfI=
Subject key identifier:   78:57:1A:19:2C:63:70:8C:77:D1:4C:FC:08:E5:F1:34:B9:D5:73:ED
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer:       /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial:       019F8F1007C644F97E526470C4194328A064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number:          01E2
Signing time:             Thu 23 Jul 2026 13:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:20 +0000
Files and hashes:         1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
                          2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: 2JcPrgdt/CVt95L+7aX9WVpchBSJevlNYcHYyKMUCVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:07:c6:44:f9:7e:52:64:70:c4:19:43:28:a0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
        Validity
            Not Before: Jul 23 13:00:20 2026 GMT
            Not After : Jul 24 13:00:20 2026 GMT
        Subject: CN=78571a192c63708c77d14cfc08e5f134b9d573ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:8f:00:13:77:73:bf:72:0e:28:13:37:4b:
                    20:2b:27:b9:bc:ad:8d:1e:ba:1a:3b:f7:e5:90:92:
                    25:0b:b7:13:5a:d6:21:d5:7d:9d:e9:d3:04:85:52:
                    30:d6:d0:1e:f9:53:c9:72:6c:f8:88:65:15:4e:91:
                    d1:ab:92:c2:e5:d3:a2:f4:cf:a5:f0:a0:57:0a:48:
                    07:27:d0:6b:d9:d0:94:1b:04:7a:62:72:ab:03:f3:
                    0a:59:cd:4d:91:0a:00:b3:69:d5:29:6f:01:7c:89:
                    ed:66:b4:28:18:47:84:3b:a2:73:d1:07:a0:ee:84:
                    fd:4a:aa:5d:99:d4:46:85:9b:de:42:e5:3c:bd:29:
                    b7:dc:04:b9:19:55:6e:1a:b9:03:c2:dc:e8:8e:12:
                    22:56:3a:bd:84:70:66:d5:38:25:e2:f8:f7:99:eb:
                    a6:4b:d0:34:6c:fe:de:36:f8:f4:33:5f:4d:66:29:
                    a7:6a:c3:89:7f:ec:53:22:f3:7b:18:3e:bd:83:4a:
                    33:50:2d:39:50:41:a0:f8:4a:68:eb:e2:99:16:75:
                    7a:b7:16:7f:60:bf:61:03:ea:f6:11:61:a5:ea:89:
                    12:a6:71:da:38:ba:ef:27:cc:0c:ef:05:74:b3:c8:
                    45:40:7f:88:67:cf:c0:f8:b0:11:a9:e6:c0:73:20:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:57:1A:19:2C:63:70:8C:77:D1:4C:FC:08:E5:F1:34:B9:D5:73:ED
            X509v3 Authority Key Identifier:
                keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:79:1d:7f:fe:2f:0d:73:9b:a6:0a:c8:6c:2a:ef:0a:d8:a3:
         da:0f:26:17:ca:60:4c:28:ec:01:62:34:a2:a0:da:da:a0:d6:
         b5:b7:75:28:fa:a1:d4:aa:48:d0:19:25:8d:06:e5:b5:61:7e:
         25:71:92:06:cb:8a:3a:e3:d2:9a:91:98:c4:37:5c:dd:4b:89:
         27:45:a7:40:9c:99:8b:6f:37:f1:7e:78:90:70:d6:c5:72:b8:
         ed:d2:16:21:1e:b5:a9:5c:6e:16:37:bf:04:e2:53:a3:7c:95:
         60:7b:88:a7:1b:77:e9:f6:6d:b7:8b:64:50:c2:3c:dc:34:61:
         63:b5:72:90:d3:c3:f2:08:d5:20:5d:03:78:df:ab:4a:6b:03:
         de:c0:f4:c0:5b:45:d1:e6:de:c3:d8:ac:ea:1e:43:8c:36:d6:
         ef:53:53:83:66:be:db:49:6a:a3:23:ac:2e:fc:aa:83:17:5c:
         c2:b8:16:61:90:89:e5:1a:3e:ba:92:45:c2:02:23:50:b8:be:
         b5:b7:ad:12:e5:7b:42:13:5d:11:4a:37:76:a4:c1:9c:29:ba:
         0e:c6:29:b7:2a:96:07:f5:7f:b1:42:d9:2b:06:12:90:7a:18:
         ab:7f:8b:f3:6b:4c:58:a8:05:b8:89:1d:a8:e5:0d:d0:f1:0b:
         5d:10:7c:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEAfGRPl+UmRwxBlDKKBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGZjNGQ4ZGE1NzY1ZjA2ZDdjMjRlZTI3ZGFjMGFmMzQz
MWVkZmEwHhcNMjYwNzIzMTMwMDIwWhcNMjYwNzI0MTMwMDIwWjAzMTEwLwYDVQQD
Eyg3ODU3MWExOTJjNjM3MDhjNzdkMTRjZmMwOGU1ZjEzNGI5ZDU3M2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzOPABN3c79yDigTN0sgKye5vK2N
HroaO/flkJIlC7cTWtYh1X2d6dMEhVIw1tAe+VPJcmz4iGUVTpHRq5LC5dOi9M+l
8KBXCkgHJ9Br2dCUGwR6YnKrA/MKWc1NkQoAs2nVKW8BfIntZrQoGEeEO6Jz0Qeg
7oT9SqpdmdRGhZveQuU8vSm33AS5GVVuGrkDwtzojhIiVjq9hHBm1Tgl4vj3meum
S9A0bP7eNvj0M19NZimnasOJf+xTIvN7GD69g0ozUC05UEGg+Epo6+KZFnV6txZ/
YL9hA+r2EWGl6okSpnHaOLrvJ8wM7wV0s8hFQH+IZ8/A+LARqebAcyCnqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhXGhksY3CMd9FM/Ajl8TS51XPtMB8GA1UdIwQY
MBaAFJVPxNjaV2XwbXwk7ifawK80Me36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMWNlMDUtOWNjMi00NDUxLWJkMTkt
MDQwODQ0ZmE0MjM4LzEvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMWNlMDUtOWNjMi00NDUxLWJkMTktMDQwODQ0ZmE0MjM4
LzEvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHkdf/4v
DXObpgrIbCrvCtij2g8mF8pgTCjsAWI0oqDa2qDWtbd1KPqh1KpI0BkljQbltWF+
JXGSBsuKOuPSmpGYxDdc3UuJJ0WnQJyZi2838X54kHDWxXK47dIWIR61qVxuFje/
BOJTo3yVYHuIpxt36fZtt4tkUMI83DRhY7VykNPD8gjVIF0DeN+rSmsD3sD0wFtF
0ebew9is6h5DjDbW71NTg2a+20lqoyOsLvyqgxdcwrgWYZCJ5Ro+upJFwgIjULi+
tbetEuV7QhNdEUo3dqTBnCm6DsYptyqWB/V/sULZKwYSkHoYq3+L82tMWKgFuIkd
qOUN0PELXRB8kw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:17:37 2026 by rpki-client