Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File:                     p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier:          3BcsM/2XaRzUebrsVvVwsig8onQwZuS2pzou+HJA0sQ=
Subject key identifier:   C6:32:03:D9:CD:D8:A7:73:C0:08:59:B2:1E:29:1B:07:50:8D:83:DB
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer:       /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial:       019F94000A12044C86204E07DEB7A16FA53C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number:          19DB
Signing time:             Fri 24 Jul 2026 12:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:58 +0000
Files and hashes:         1: 1FmJS162fQbGwB70KRRIxqQYTPA.roa (hash: wZ0mqVcfmtfFGvqCihWmXQC/JMhhCh9+TH6XvIsulCo=)
                          2: 6oZ5EjqZisGcBSFRGAY0I58w2z8.roa (hash: L22Ki4i/bHR4nsGJUs2wsOygUoNgPdGybFfVf2yeFJ4=)
                          3: HWUcvkLmGASdhSYwC9AP_DWAGsE.roa (hash: xz26m/XdZaiAuUnY/3mFY/BnQNYa0NzUclmOKktyTEI=)
                          4: Jcrma76ylAdAlGHz2It6HjItjVY.roa (hash: gxRmdXqrCHXXDsq6yXCM2hWnNFd/SuqVgvjo3oxIpIo=)
                          5: MBnHYmvHgfFqe99fU0s4rn0KXV4.roa (hash: Wq2dVDQ3LLdiDt+3Q/nPxFVfP5iqbuOdoj4/h9WIEZA=)
                          6: OkvrHqovIuCvA9DKylZPzJjsiLw.roa (hash: zDYM6sW/jEHSN9/osUFU8Hrx77FyqMIJs5+jayqems0=)
                          7: Z-Bltd0Hd8Wiwq9a-uJVdfU9kmY.roa (hash: 9o3h5OJ6yuOmpiGRC8WyL9keSG9Y6pKzn5PzuEfOyaY=)
                          8: huYXzYbwmRIlzSXqCG_XMzLFfLI.roa (hash: KMWYZ0oGUPWGO8v+CPLewWBemgNzQ4Q4bJS+rkHUyUY=)
                          9: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: 9+SXm385xeMJXvX+WXoyqmLlFo5RZErCI+3fXYrrB90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:00:0a:12:04:4c:86:20:4e:07:de:b7:a1:6f:a5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
        Validity
            Not Before: Jul 24 12:00:58 2026 GMT
            Not After : Jul 25 12:00:58 2026 GMT
        Subject: CN=c63203d9cdd8a773c00859b21e291b07508d83db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:d2:ad:99:00:cc:45:23:0e:a3:ae:f2:3c:
                    e7:09:ee:4e:7e:08:8e:42:34:ba:27:f8:05:f0:d0:
                    2d:66:df:03:74:08:03:85:05:e7:55:32:2e:db:80:
                    4d:28:d2:09:25:a0:a7:30:73:6f:62:86:24:0f:38:
                    11:48:44:12:b9:fe:12:5d:be:35:8d:b3:df:53:e0:
                    ff:e6:e0:09:46:04:81:0f:33:ac:a0:5f:61:8e:3d:
                    e7:e6:7f:40:83:e0:2c:eb:34:3d:94:df:6f:23:37:
                    05:7d:e2:38:58:f8:0e:df:5b:73:a8:f9:ab:99:4a:
                    8b:e5:23:f6:62:fb:4d:cb:22:cd:d4:3e:45:ad:aa:
                    ee:c0:51:8c:38:37:ad:44:bf:bc:41:40:12:20:0e:
                    04:b5:b4:52:ac:b0:32:35:6f:38:02:80:0f:4b:2d:
                    9f:44:9b:ca:01:d0:c7:2b:0e:46:9a:2b:c9:8d:fa:
                    86:59:73:95:dc:2e:38:45:24:a3:37:c8:ed:90:2c:
                    0c:80:b4:64:be:fc:05:2e:e5:03:44:46:14:f2:9f:
                    4e:db:f7:31:df:03:12:19:2b:49:e1:ad:0e:cf:4d:
                    14:3a:70:2b:3e:04:87:ac:05:7a:ad:71:7a:10:e1:
                    b7:e6:4d:0c:bd:57:79:99:42:1b:b5:83:75:ce:45:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:32:03:D9:CD:D8:A7:73:C0:08:59:B2:1E:29:1B:07:50:8D:83:DB
            X509v3 Authority Key Identifier:
                keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a2:95:c1:fd:9b:bc:2c:d2:b3:f1:58:3e:d2:86:d1:6e:d7:
         b0:71:fb:0e:48:57:0f:77:9b:b7:61:b8:5e:7c:bb:11:6e:67:
         ef:7b:76:65:c3:18:0c:59:5e:93:47:1a:d3:c0:37:e8:45:f3:
         d9:83:a4:47:a6:1e:c2:78:56:8a:57:6f:57:6e:74:de:b0:79:
         c8:50:62:5e:69:0e:ff:b4:92:ea:d5:33:6d:2f:5d:8e:28:7a:
         7c:0e:0a:3f:f1:8f:e3:6d:29:08:60:87:c8:6f:d1:06:b5:fc:
         f1:6c:79:bc:74:b8:55:81:7c:22:9e:f5:6c:d6:cd:4b:d9:47:
         18:40:f5:73:5d:93:d9:74:43:c5:a8:2a:46:50:62:84:08:c9:
         4d:f8:de:ec:1f:46:0b:45:02:78:72:15:9a:bf:3e:ff:0d:21:
         88:98:7e:60:f7:bc:b4:f3:c9:59:39:f2:36:e9:90:a8:3d:94:
         fa:9a:49:11:ea:81:9a:d6:69:25:e6:01:01:56:9b:b5:ce:bc:
         25:73:80:e4:f5:e8:7e:ef:04:ea:35:de:4a:c7:84:7c:13:ca:
         fc:cf:8f:f9:80:0f:34:5d:1d:06:ba:f6:28:2e:56:bc:1a:6f:
         d4:ce:58:82:7b:c0:32:7c:2e:b6:be:d1:50:17:b3:59:2b:19:
         19:fc:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:14 2026 by rpki-client