Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File:                     ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier:          1kcbAFg/QvzjdzBmJiSTQE+X+//K7fT4jVelmzC9sqo=
Subject key identifier:   24:D8:51:15:B6:4E:30:24:B2:6A:39:5D:81:A2:F6:5D:76:66:86:50
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer:       /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial:       019F905A243B34850779B9AEBCCD03ACCDB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number:          06C8
Signing time:             Thu 23 Jul 2026 19:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:54 +0000
Files and hashes:         1: LUonv2RCWvu1zL14QrHsu9P2rS4.roa (hash: sYEwbsM2ctHv6cNHrCxgkHRsQW+if3GIsRAYyp3V97Y=)
                          2: S8keSl8NDHVc6KPmbXVZh56DkMo.roa (hash: gehjFU9x+RbJrI179PzTfPP1zreMHK8V8b0riuey5sI=)
                          3: dXBxqg2WRY0bNZSrjzenz8d7Y10.roa (hash: bonkDkqWKImRRfgE/vT3fEawIKDM/g7JC3uJ3coEEKE=)
                          4: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: TThxfwZuC5rH8AM1eaOSHncIqV8tTawkXRdQF9BMRJ8=)
                          5: rNttweQh2PLctodsZ8mGF8Xdou4.roa (hash: RnrUAyBZsGmfOkyGXTt4MMRoQ1xT0nGSE3thOB+UT3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:24:3b:34:85:07:79:b9:ae:bc:cd:03:ac:cd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
        Validity
            Not Before: Jul 23 19:00:54 2026 GMT
            Not After : Jul 24 19:00:54 2026 GMT
        Subject: CN=24d85115b64e3024b26a395d81a2f65d76668650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:fc:ff:85:87:dd:c8:71:8b:2a:4a:03:d7:
                    52:c1:15:af:65:08:a8:58:26:33:1c:47:65:d0:71:
                    4b:50:05:4b:ae:c0:8e:ac:75:33:88:a9:d7:8d:a0:
                    14:b0:68:7c:b5:80:25:2a:19:8b:13:c3:5d:bd:c8:
                    94:fa:e5:c7:56:bd:0a:7a:62:3c:89:a4:d4:84:75:
                    4f:27:6e:af:16:98:aa:a8:eb:11:8b:fa:85:8d:37:
                    6e:ca:8c:b4:d3:cb:8a:c7:48:3e:d5:e2:73:ec:b2:
                    05:f4:98:77:d7:8e:71:4c:f2:36:e0:37:a0:64:01:
                    b7:d9:da:f9:47:55:30:23:03:6b:43:c0:6f:5a:f1:
                    60:f3:0f:d2:40:c9:fb:37:e5:2a:ef:08:4a:fc:36:
                    ec:54:4e:56:1c:4a:e8:eb:fb:4d:8b:18:55:d1:fc:
                    fc:38:7c:33:9f:85:e1:2f:95:9c:8d:c6:09:9c:dd:
                    41:a7:98:3e:2d:39:97:a2:c5:86:9c:14:76:8f:8c:
                    91:4b:e6:5f:1f:e9:54:0c:72:2a:5c:9c:31:1f:65:
                    94:f4:2c:ff:13:9c:d7:b0:7e:a2:fd:0d:0a:5e:3d:
                    82:0d:e9:0d:ff:e6:46:56:d6:01:2f:6d:83:27:df:
                    b4:c1:10:bb:b5:cc:17:e9:cc:80:7b:9f:50:c4:a3:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D8:51:15:B6:4E:30:24:B2:6A:39:5D:81:A2:F6:5D:76:66:86:50
            X509v3 Authority Key Identifier:
                keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:da:a0:83:92:1c:24:5e:eb:7c:d8:15:43:a5:c8:16:7e:30:
         0e:27:e5:75:7a:50:fc:57:36:e8:00:61:9f:04:a4:76:cb:1f:
         19:28:f4:8b:c9:84:cd:18:61:3b:71:8b:67:6c:59:10:7a:fe:
         76:be:14:ac:2e:e2:18:62:58:be:c7:7f:8f:4c:55:dd:e1:de:
         65:b7:ff:3f:6b:89:1e:41:7a:a0:64:62:49:ae:db:ee:77:c8:
         8f:73:21:d0:19:20:81:09:27:89:f3:58:8b:a2:51:22:c6:42:
         52:fe:15:9d:de:f8:f3:3d:b7:d5:8e:81:01:24:ec:42:59:48:
         fe:a7:f4:53:da:3e:13:33:51:97:d4:48:97:bd:85:01:02:92:
         a0:6c:da:7b:c6:bf:41:38:a1:77:5b:61:7e:cf:07:74:88:93:
         63:ee:6f:b8:03:25:a9:7a:91:58:f5:b3:0e:d1:83:9a:6b:67:
         45:c6:e7:fe:6f:1a:c7:ab:46:34:31:1a:14:19:5e:53:69:c7:
         f8:2d:05:87:8b:94:fe:d3:05:25:6c:17:89:f6:e2:f8:81:2a:
         a9:0d:0e:51:25:24:89:21:56:ee:fb:19:f2:77:23:29:e5:ab:
         08:0e:b7:e5:c7:63:39:5c:c9:3d:3e:4d:77:2e:d6:fc:78:c1:
         63:10:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:08 2026 by rpki-client