Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File:                     LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier:          77rmRKQwpZOy3dQgwxJa28F8C8G9iGDpLqawYtBiliw=
Subject key identifier:   7A:2A:54:A0:8E:F6:63:92:9C:00:79:BA:D5:0E:4D:99:68:9C:A4:64
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer:       /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial:       019F93242F7FC324A1386A476071C8C53D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number:          08F7
Signing time:             Fri 24 Jul 2026 08:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:49 +0000
Files and hashes:         1: DdeGusYUXF2HxeIl4KxAYXCkAx0.roa (hash: LN7Iq1JfqC87JrZGAhUwyVxljrVRCFYsq2fC1ewqlM4=)
                          2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: lLqy4/YRFIxvw8IF92mFGkgl9SWkzc3pCiDGkc3KqiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:2f:7f:c3:24:a1:38:6a:47:60:71:c8:c5:3d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
        Validity
            Not Before: Jul 24 08:00:49 2026 GMT
            Not After : Jul 25 08:00:49 2026 GMT
        Subject: CN=7a2a54a08ef663929c0079bad50e4d99689ca464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:de:de:e8:3c:80:d0:18:65:5b:09:29:2a:
                    44:8e:6d:6d:f1:37:f4:0f:32:4e:33:5e:86:2d:ca:
                    c5:a3:65:6b:2a:aa:48:ae:c9:67:92:37:4b:ef:ac:
                    68:e7:9e:5a:12:d6:d0:91:c6:5a:14:6f:ab:2c:58:
                    a2:94:fa:45:8f:51:9e:63:51:15:54:02:69:92:9e:
                    65:2f:a2:d7:6e:8c:6f:09:2e:d6:bb:31:7f:b4:4f:
                    78:66:48:f5:f7:a1:f8:61:16:16:81:77:21:70:b4:
                    92:df:b5:e1:49:5c:1f:5f:e6:af:27:33:37:80:bd:
                    94:90:ec:9a:05:0e:4a:3b:29:c3:71:13:d5:c9:6f:
                    43:59:58:ff:fe:4c:a2:58:b9:b1:ca:fb:2a:e7:dc:
                    0c:67:d4:79:59:58:72:c5:f9:95:06:df:e5:47:4a:
                    3f:6e:c3:e5:c9:7f:4b:54:85:87:a0:7f:9b:ab:37:
                    98:4c:bf:17:d7:45:40:98:90:ba:79:bd:6f:44:0c:
                    40:e3:36:4b:2e:7c:3b:d0:bf:a7:8f:b5:d4:bb:e6:
                    49:4e:8b:7a:10:6c:ad:4e:8c:05:9e:7a:6e:14:66:
                    66:84:6b:b7:3c:20:7d:cf:58:7a:28:02:9d:22:d7:
                    d7:38:2b:90:5a:70:09:a6:ea:64:9b:a3:55:0d:16:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:54:A0:8E:F6:63:92:9C:00:79:BA:D5:0E:4D:99:68:9C:A4:64
            X509v3 Authority Key Identifier:
                keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:31:72:52:ed:30:fb:42:52:7e:26:4b:98:5c:63:99:d1:bf:
         c8:52:a4:ce:15:50:88:25:b0:1f:54:db:3e:6c:8a:73:b9:09:
         10:0e:ea:58:c8:94:d2:11:ad:f4:a3:6e:69:b7:b4:4e:c5:13:
         6a:cb:8c:28:c8:98:3a:6f:f7:dc:de:06:f9:7f:af:0e:24:89:
         98:0b:ed:5e:a4:fb:1c:3d:ca:85:96:d6:be:3c:3b:eb:a7:9c:
         f2:5c:d7:bd:62:d9:f2:20:c9:f0:4e:06:1e:32:ed:95:27:9c:
         35:d5:bc:a1:2b:e1:47:29:b2:97:38:22:44:67:47:3a:d6:75:
         00:8a:13:bf:14:3f:00:fa:17:40:c1:11:02:68:f7:cf:fd:c4:
         a4:4e:69:6b:8f:a4:13:da:a9:50:57:db:b3:1a:72:09:08:ab:
         a4:ca:b1:a0:ce:cf:75:13:9b:54:3c:c5:bc:20:fe:27:9a:78:
         dc:a5:73:88:e4:6d:a6:e6:a9:21:f2:a1:cf:34:84:14:38:b5:
         d3:71:c2:6c:da:15:f1:18:0a:70:8a:64:66:8d:b0:96:7d:38:
         be:dd:1a:08:e1:0d:be:52:7c:bf:67:7e:b0:e2:44:b1:0a:11:
         e8:36:51:ac:64:ea:ca:50:af:d0:a8:56:7b:f5:3c:0e:e2:9e:
         d9:00:67:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:23 2026 by rpki-client