Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File:                     LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier:          IhD28DWCZQmXT+2lpWn9DJKtNbB3+iQh8NEEdquAQzI=
Subject key identifier:   44:F0:54:B3:0F:62:CC:55:8E:CA:58:53:B4:BD:CE:86:75:17:FE:FF
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer:       /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial:       019F916C739B3626462CFEE751AE9AEE7EFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number:          04C2
Signing time:             Fri 24 Jul 2026 00:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:31 +0000
Files and hashes:         1: 8nh2nz59r4IDN5IE02ZK_JnePnU.roa (hash: EoqGd1iJrSXTEZ94UblIUe3hHKZv1dQEjjg+tiyKHkY=)
                          2: CrT-FIs9ETIARmODyPGo6Texbms.roa (hash: VHPhzwyP7ZJaAZF/RLchX9QehGLwEz/Nhb9bbKVLnBE=)
                          3: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: tT82ZtZWPmoJ+zupn30fVyexhFCs3RUHg/flgl9t/lE=)
                          4: M1lzEwcwplQSzJYIKHVS3CPULtM.roa (hash: CbzM5ppQIFt899x5QRVS7mcpi5adykj4B/FuVFp7z1c=)
                          5: PGCypFT7PpbRYHnbnL53seEehQY.roa (hash: uikj8M8pga201KYBaCnBW484YRpO24WaVAwTT3xgXLA=)
                          6: gpcRZMvvAarNXGnEQk69CRu1kTw.roa (hash: vDgS5AGwOlvvwcg7ps4GbXeY48BReojyPRTXSF9XHHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:73:9b:36:26:46:2c:fe:e7:51:ae:9a:ee:7e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
        Validity
            Not Before: Jul 24 00:00:31 2026 GMT
            Not After : Jul 25 00:00:31 2026 GMT
        Subject: CN=44f054b30f62cc558eca5853b4bdce867517feff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:8e:87:a4:2d:3c:9b:ce:88:1d:da:a9:0c:
                    f6:84:f0:3d:b3:7a:7e:63:b2:c9:36:7a:75:1a:ee:
                    02:0b:a6:03:1e:0f:2e:0a:de:f7:df:cd:10:08:4b:
                    5a:61:64:97:d8:f5:cd:6e:c3:35:ad:7e:cb:c9:8d:
                    2f:40:5a:e1:a0:63:9d:cf:0a:f2:1c:10:af:40:04:
                    78:e0:54:5f:0e:71:14:ad:be:0a:73:2d:d2:3b:66:
                    50:c0:e5:ea:1b:2e:af:50:4a:44:eb:a5:18:f2:62:
                    90:6d:12:c1:cb:e1:aa:81:1c:72:a7:66:1c:7f:07:
                    f8:b3:01:00:86:4d:49:b3:f1:fc:0d:17:75:8e:c8:
                    f7:0b:7f:07:ab:60:75:fa:54:5a:29:d1:12:f5:81:
                    74:2b:ee:56:25:19:6b:d1:38:cb:ec:e6:ba:33:0b:
                    00:ad:f5:d5:ca:01:d6:9b:6d:13:05:56:14:25:be:
                    08:8f:27:e3:49:f1:43:1b:b2:5b:56:69:23:fa:4a:
                    7a:ae:8b:87:f8:38:7f:ef:99:88:a3:5d:a8:83:b4:
                    9a:fc:cf:1c:e5:72:db:a5:1a:00:dd:07:11:d8:1a:
                    b3:a9:b3:1a:73:68:1c:54:8f:c7:4b:3f:66:81:97:
                    16:cf:50:07:17:cd:b1:84:a5:29:ca:da:c1:7d:c6:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F0:54:B3:0F:62:CC:55:8E:CA:58:53:B4:BD:CE:86:75:17:FE:FF
            X509v3 Authority Key Identifier:
                keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:08:29:e0:98:26:84:1c:56:2f:bc:a7:5c:b6:7d:ef:73:e9:
         7a:45:1c:2c:d3:23:29:2a:66:f1:f9:1e:64:9c:74:e8:84:64:
         24:13:6e:7d:e1:38:08:51:49:74:41:7e:6b:d3:f4:32:34:87:
         64:9e:21:cd:f1:c4:de:67:79:f7:5f:09:f0:37:6a:5a:ab:ba:
         4e:57:74:16:48:c1:53:9e:85:8c:e1:be:ad:fc:46:a6:ea:15:
         b9:9e:8a:55:ec:93:bf:0b:51:22:1b:a2:2d:86:12:71:57:11:
         90:fd:c4:51:ae:b5:ed:2f:6d:95:a4:1f:d0:42:e2:ee:a9:d8:
         b3:15:10:61:60:93:24:82:66:8e:80:71:a8:a3:6a:4d:8b:c8:
         2c:99:fe:5f:87:c8:72:92:62:76:b4:35:fc:6a:8d:90:26:b5:
         ea:82:86:c3:ef:08:e1:fb:4c:72:c9:e7:c9:97:b0:55:8f:25:
         72:db:84:85:14:b0:65:1b:de:0c:3b:75:4a:ff:2f:58:b1:7f:
         45:ab:76:ff:fb:cb:c0:b4:bb:31:79:0e:cd:8a:11:68:57:d3:
         3b:0a:b8:ad:4b:83:4d:20:5a:b8:3d:3d:fd:83:29:83:5f:2c:
         81:88:3c:14:6f:2a:7a:32:bc:6e:33:b3:d5:c6:52:30:12:0c:
         b5:bf:1a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:56:25 2026 by rpki-client