Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File:                     lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier:          cmGjbaMWtlJU50IH8QoNVzEHvbUqJptaAabCUbAzXzM=
Subject key identifier:   82:F7:B7:C6:7A:4C:4C:81:AB:6D:84:6C:FE:5A:87:83:58:FF:77:A7
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer:       /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial:       019F94DB97382F2B5E0F00A06CC2C86CF2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number:          0F40
Signing time:             Fri 24 Jul 2026 16:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 16:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 16:00:46 +0000
Files and hashes:         1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
                          2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: keOKs8Iup4oIfWMhDnN8H3E188CkecPV4sefv9+tXE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:97:38:2f:2b:5e:0f:00:a0:6c:c2:c8:6c:f2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
        Validity
            Not Before: Jul 24 16:00:46 2026 GMT
            Not After : Jul 25 16:00:46 2026 GMT
        Subject: CN=82f7b7c67a4c4c81ab6d846cfe5a878358ff77a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1f:4f:82:de:a5:b5:e0:8a:d9:91:56:3c:f5:
                    6f:96:e4:22:d8:50:c4:e9:2c:b3:83:c5:a0:eb:c8:
                    3d:a9:6a:cd:74:5a:82:f4:0c:33:52:d3:6b:eb:f4:
                    63:1d:56:c6:a5:11:f0:6e:03:b4:ea:28:2c:cb:7f:
                    72:9e:b3:bf:8f:43:b7:c2:00:9d:d8:a3:4b:98:b5:
                    69:b5:0f:81:44:1f:84:fc:65:8e:ac:47:70:bc:dd:
                    c1:95:4c:b4:88:7d:b9:ea:11:83:47:ad:87:fd:1f:
                    cc:f6:1a:62:91:d5:9b:cd:24:50:e3:54:2d:71:f3:
                    a6:db:d6:95:e1:86:a9:e9:19:46:dc:26:67:27:70:
                    8b:a7:5e:35:bd:5d:ef:06:03:de:5f:da:b8:e3:e4:
                    ff:77:45:06:b7:28:a0:c9:80:f7:98:0d:58:7a:8f:
                    0e:e1:4b:e1:70:eb:cd:f4:15:d3:6a:59:52:c3:4e:
                    3c:09:a0:19:89:e2:78:d8:cd:38:9a:c3:a4:54:bb:
                    ac:31:25:bd:4e:57:b1:48:5f:2a:1c:70:c5:4a:4d:
                    8c:dd:d8:38:48:a7:53:1d:50:c8:1a:00:16:ce:2e:
                    ed:77:5e:08:55:77:17:0c:8c:78:4b:de:d0:66:87:
                    df:d3:02:be:31:7b:9a:01:7f:b5:b9:3b:b2:84:d0:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F7:B7:C6:7A:4C:4C:81:AB:6D:84:6C:FE:5A:87:83:58:FF:77:A7
            X509v3 Authority Key Identifier:
                keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:42:97:a2:72:34:24:34:cc:76:6f:0d:8f:dc:08:4f:44:29:
         5f:88:15:87:df:7d:1e:27:ae:34:99:e6:24:ff:ce:b7:e7:59:
         4a:79:4f:12:54:ee:75:98:57:95:08:56:67:98:0a:df:ba:6f:
         15:54:64:c7:c4:0c:5c:40:f2:42:5a:49:42:8f:65:69:c4:3a:
         33:5b:cb:3d:99:f2:9f:b3:28:30:6a:c6:02:fb:3f:45:84:16:
         9d:53:70:a5:ec:53:db:7b:a0:55:cc:e0:19:5e:62:90:7c:c4:
         16:5b:01:7e:8d:4a:85:65:c3:98:fa:56:49:4e:d6:18:f9:84:
         ed:b5:f5:49:f1:e1:62:50:34:bb:e8:37:a8:c4:3d:ca:05:ed:
         6c:1c:f4:b9:2b:80:71:60:94:78:1b:59:fe:91:35:33:17:65:
         42:3f:d5:b1:3e:6d:81:b0:8a:a2:8c:fb:44:08:15:65:40:29:
         ab:c8:07:01:fa:06:37:bf:2d:0e:e8:da:20:3c:4f:3b:60:ca:
         24:ce:d8:33:b5:8f:cc:70:89:df:d7:dd:a8:6e:a7:ae:6e:cf:
         ba:82:74:e3:3a:75:76:c0:4b:96:6c:d3:52:ba:1b:ae:6c:2f:
         4e:9d:4f:7c:a8:7f:8f:16:4e:c2:cc:82:04:fe:ca:66:c2:f9:
         7c:9e:a9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:38:17 2026 by rpki-client