Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File:                     L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier:          rtxs7V6/XdU60v2U0bAGPjkS2aq75B7405FheL2YdSs=
Subject key identifier:   5E:0D:5C:11:0C:7A:96:A6:8C:DB:C9:2E:5B:4D:5E:31:0B:E7:A9:5B
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer:       /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial:       019F9324753592FE527645A1DCF95C2F5BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number:          07F0
Signing time:             Fri 24 Jul 2026 08:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 08:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 08:01:07 +0000
Files and hashes:         1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: 777o9vsNScRIJ2Hqcq3tR9NpXDWkwu/ARGQKDeRXVT4=)
                          2: moBWHmY5dUscCoFGFgkj8lgTo6k.roa (hash: SdWsLpL7bWufA3L06GIvSvKd8LEI6DM8Lhn01PlHx/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:75:35:92:fe:52:76:45:a1:dc:f9:5c:2f:5b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
        Validity
            Not Before: Jul 24 08:01:07 2026 GMT
            Not After : Jul 25 08:01:07 2026 GMT
        Subject: CN=5e0d5c110c7a96a68cdbc92e5b4d5e310be7a95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:78:21:09:2e:a1:b4:c3:68:da:17:50:9f:
                    fe:0e:e0:43:2e:5e:e1:9f:29:c3:9c:2c:8b:f3:b4:
                    4b:92:53:81:a6:57:b8:38:70:24:27:d4:01:23:aa:
                    39:fb:36:02:0e:59:bd:14:85:3b:ad:1a:10:86:a9:
                    3d:ed:b0:ea:b3:1e:ae:7b:e1:53:c1:aa:28:aa:f8:
                    6e:69:e5:a6:49:1a:a4:d5:b9:4e:89:d5:cd:4c:85:
                    d1:02:74:ba:c3:c3:26:02:a3:65:0d:8a:34:78:74:
                    ec:99:51:f1:ac:a9:a1:4b:82:e2:50:0b:13:ea:40:
                    ad:e3:03:fb:82:09:6c:59:9e:85:9c:f9:71:42:1f:
                    92:4f:b8:dd:fd:cd:67:49:0e:08:66:28:bc:c9:47:
                    ae:12:44:fb:a2:25:12:5c:f8:f3:16:a6:3c:fd:3e:
                    5a:d8:59:7f:44:f8:6c:73:1a:f0:54:d9:3e:6c:32:
                    9c:83:f9:1b:d8:b9:71:82:f0:89:6b:5e:fb:25:3b:
                    03:10:a3:57:32:94:a6:b2:f0:b0:95:1a:2e:8c:15:
                    63:3b:96:0e:2f:e5:48:fe:83:e9:56:4d:e8:c5:ff:
                    e7:6c:60:30:db:69:9a:82:23:6f:38:ad:b9:25:15:
                    81:50:f3:bd:7c:be:7b:5a:3f:1c:81:e3:c3:63:ca:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0D:5C:11:0C:7A:96:A6:8C:DB:C9:2E:5B:4D:5E:31:0B:E7:A9:5B
            X509v3 Authority Key Identifier:
                keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f9:74:7e:69:1d:30:9b:f2:34:57:e5:0c:c5:e1:22:73:17:
         a7:32:fb:06:95:d0:3d:27:ba:d4:29:f4:de:d5:fa:0d:01:a0:
         96:6c:11:e0:e1:53:5a:1a:1a:eb:e2:fa:3a:27:5a:a4:71:c5:
         91:7b:ac:7b:0c:2b:93:f2:6b:54:5e:f3:b9:d0:7f:66:08:fa:
         14:80:2f:c5:a6:2e:52:40:6a:f2:51:cb:cd:ea:a7:93:ba:e3:
         4a:73:d1:67:85:c6:b6:07:c8:50:02:a5:78:83:d1:d6:4b:1b:
         d4:d8:a0:c7:b5:f4:98:50:1e:f8:58:74:e1:6b:58:ca:9a:7b:
         40:16:84:d2:b6:c4:cd:8a:a9:bf:d7:0e:52:4a:93:06:4c:c6:
         ca:66:bf:0b:e9:10:e6:5f:96:1e:57:c2:69:39:d0:bf:27:c2:
         a5:ee:b7:b5:bf:f2:e7:bc:85:24:ad:c0:c4:ab:d4:fa:1e:3a:
         79:fc:e1:db:4d:62:be:dd:78:55:d0:f7:7d:76:f8:d4:f0:7e:
         af:33:fd:18:96:9d:23:37:4c:0b:72:ec:a5:6e:0b:94:6e:c2:
         e7:d9:1b:ab:5c:46:7f:dd:0f:71:e9:95:5e:f6:08:6d:3f:20:
         1d:10:eb:9d:a3:1d:c7:60:0c:fd:24:45:09:35:8b:29:72:70:
         47:94:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:01:57 2026 by rpki-client