Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File:                     lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier:          5Lze8L+dAmel6cwRUr9tWoIVw1H9dt57W1RNWW1MDPg=
Subject key identifier:   1E:1F:BA:47:E1:87:FD:23:2A:F8:E4:EF:8F:65:FA:B1:3E:4A:C4:26
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer:       /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial:       019F93921040A9847C42B1DDD728AAF9A6DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number:          1072
Signing time:             Fri 24 Jul 2026 10:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:50 +0000
Files and hashes:         1: C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa (hash: 1x0Uuntsxdx1mq0mpp7kC3SseRJDTb+Eb50/cVmhJPA=)
                          2: C463m9ZyZEk3eM2l-6N_RbriHU4.roa (hash: 7UxqANlJ4UF+XXfc6ygm/hisOtlOicfBVxWeVwS1Pqk=)
                          3: cfmv_tc0fZVJXvMbEzxp3huvJQA.roa (hash: 5exQ8N+3HVkALP9EFbCrgal+azdpyvlnwuRFMo6QR2M=)
                          4: itRgULwAbwVfFqgG9Kx01p2QKgY.roa (hash: GVdHMBdMKKywqVWD+wbqJLZMEEEZjb1V4iiL5vClFfE=)
                          5: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: VG1LOiCgVhMjRHdkAwSm8mOVVP0BrSaoexuqpin2XLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:10:40:a9:84:7c:42:b1:dd:d7:28:aa:f9:a6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
        Validity
            Not Before: Jul 24 10:00:50 2026 GMT
            Not After : Jul 25 10:00:50 2026 GMT
        Subject: CN=1e1fba47e187fd232af8e4ef8f65fab13e4ac426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:b8:e1:13:3d:df:6e:40:a8:8d:c2:61:16:
                    ab:fd:3a:d0:54:65:6a:95:d5:c4:b4:fc:b8:ea:b1:
                    6d:8c:f3:15:38:68:35:a6:a0:07:1d:d4:af:97:be:
                    de:41:45:6f:49:ec:bf:cf:5e:65:53:96:fb:a9:33:
                    d6:86:19:d4:e3:eb:48:ba:d2:a7:80:a5:e6:0c:ba:
                    fd:3e:9b:cd:11:33:ab:5f:51:5e:bb:ea:89:c1:ed:
                    d8:89:06:ec:b8:99:3c:19:5b:4f:bc:a4:9f:a9:12:
                    5d:db:c9:02:eb:17:c1:ce:a9:c8:d3:70:79:32:9f:
                    6d:35:5b:25:28:e2:eb:d5:f1:49:9d:88:5a:aa:41:
                    08:83:bb:9c:b3:48:1e:ea:72:ed:e1:ee:1b:65:ad:
                    54:2d:29:db:2f:db:d9:e4:26:ab:97:57:96:81:12:
                    a5:b4:c2:68:b0:6d:da:8a:d7:5c:4a:af:0c:28:b2:
                    5d:71:9b:21:09:e4:97:9d:d7:2a:d2:eb:0a:98:ed:
                    47:84:dd:3a:43:8c:c4:e3:6d:68:d5:bf:37:a1:68:
                    e1:25:3e:c1:5a:00:63:a0:ee:e3:00:19:e2:35:f5:
                    87:13:8c:ef:4b:42:d8:c3:2d:ef:24:24:08:a1:c3:
                    52:d0:3c:a8:41:fa:ad:2e:4c:e4:b3:11:29:ca:d5:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1F:BA:47:E1:87:FD:23:2A:F8:E4:EF:8F:65:FA:B1:3E:4A:C4:26
            X509v3 Authority Key Identifier:
                keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6c:27:ee:86:6c:79:0f:28:69:4a:84:7e:0c:b9:47:7f:c9:
         e5:99:7c:50:ca:a6:e3:69:31:40:e8:28:ec:e9:08:0c:f0:44:
         c7:24:78:c1:ec:34:bd:30:db:09:61:c2:8b:34:14:19:0f:f1:
         93:99:b6:8b:5e:5d:fb:6a:48:d7:3e:90:5b:8e:1f:02:c0:e6:
         12:41:28:9c:b8:68:8b:2a:17:3d:50:2a:25:25:2c:81:ed:9e:
         eb:e6:82:2f:fd:c7:05:c9:7c:3e:56:f1:da:a3:58:5e:2b:4e:
         04:2f:45:86:c4:1f:f3:90:32:3e:7b:93:2c:16:b0:5d:a3:a5:
         db:6b:f7:c3:ba:52:87:00:09:80:52:14:1b:bc:a3:a8:21:54:
         36:92:63:49:ae:70:a1:1f:13:a3:4d:bd:cd:bd:ce:79:ea:ae:
         d7:55:71:b5:79:98:28:5d:70:25:4f:1d:f9:73:ef:0b:17:f9:
         1d:10:1f:d9:e2:a1:29:83:49:d6:f0:2b:9f:fd:21:9b:04:08:
         79:6a:5a:a7:1a:c2:64:09:f1:72:9a:ab:d0:3f:fb:d4:bf:3f:
         18:2f:98:72:24:4e:49:c6:6f:89:8e:a0:b7:f3:93:11:4d:46:
         2a:7d:a2:69:24:c5:fa:14:0e:b0:6e:da:b2:34:c2:80:b1:7d:
         ce:94:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:09 2026 by rpki-client