Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File:                     LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier:          dYuGzYz+tDcVaNNCfR6Uk/b/umFDzAALVoTOmGKuoz8=
Subject key identifier:   BE:42:C9:9B:EA:4A:9D:3A:EE:7C:44:C3:9A:CB:A9:2D:27:C9:A4:EC
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer:       /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial:       019F927F5370C1B19BC0D189CA54173B135F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number:          19DA
Signing time:             Fri 24 Jul 2026 05:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:45 +0000
Files and hashes:         1: 9l4eTxQiJdfwsUpte57Ojwmqkt8.roa (hash: emeHHUrFvsDMnCrOVZjdq3feYW1b8D0yrHBj07czvhI=)
                          2: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: S/X2+KYr9H3WuKYTU6846FPn1N/PS+PURCUGRyODyTU=)
                          3: cAVdSGytSyux4FQsZuWB3TVoUN8.roa (hash: RAtVEud/Ywx68w73bvy2E2uTPg4lltVhihmdYUF5drI=)
                          4: grtZ88A4ab4V_GiK5bfawAFeBik.roa (hash: Gok5HzoG6ye09AxYK0QJqUuAYdVlePP8eXldni6wygU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:53:70:c1:b1:9b:c0:d1:89:ca:54:17:3b:13:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
        Validity
            Not Before: Jul 24 05:00:45 2026 GMT
            Not After : Jul 25 05:00:45 2026 GMT
        Subject: CN=be42c99bea4a9d3aee7c44c39acba92d27c9a4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:d9:16:14:a8:d8:7e:49:4e:3f:12:05:87:
                    14:4d:32:b7:43:44:c0:6c:12:69:39:a6:54:1a:67:
                    8c:fa:ea:c8:da:67:56:cb:8b:65:2e:67:7d:e4:d5:
                    8a:85:9c:21:7d:5a:7a:da:f4:31:54:fe:1b:47:d7:
                    4b:3b:db:7f:97:be:c5:52:85:63:cb:d5:be:ac:39:
                    b5:f1:2d:3e:1a:ed:35:4a:34:1b:4c:16:f8:1b:ef:
                    07:77:b0:44:ec:01:87:b5:59:cd:5b:27:f8:4e:45:
                    f5:b8:3b:9d:b0:7f:b4:e0:8d:f2:e9:4b:fc:fb:85:
                    ce:54:59:ac:87:62:ff:c2:a1:5d:fa:0f:f3:ca:5a:
                    73:e0:de:08:3e:ea:d3:22:ff:02:64:92:61:21:e1:
                    f5:0e:b6:bf:c8:d2:5c:b9:d3:ca:22:1b:23:45:f4:
                    80:09:a5:cb:23:be:14:ed:d9:3e:9d:59:9d:62:8c:
                    46:a8:e4:88:04:dd:34:8c:28:57:19:a4:1b:86:ec:
                    43:47:69:8f:3c:e8:9c:4c:13:27:5c:60:bb:1e:41:
                    96:2f:06:0c:40:8b:5b:1a:ef:eb:7a:e0:b2:5d:1c:
                    10:6a:55:7e:af:33:81:03:e0:f3:69:cd:24:21:3b:
                    3b:10:b3:d2:ce:b9:c9:a7:29:55:fb:04:83:6f:59:
                    c5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:42:C9:9B:EA:4A:9D:3A:EE:7C:44:C3:9A:CB:A9:2D:27:C9:A4:EC
            X509v3 Authority Key Identifier:
                keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:3f:b5:ce:eb:1a:f1:23:7a:be:85:f7:64:9d:7d:ce:7d:
         aa:61:63:d5:13:73:43:56:9b:cd:89:26:c9:9f:4f:af:1a:61:
         70:10:f1:81:df:bd:d2:42:b3:21:02:c1:ec:90:9e:4e:ee:a4:
         45:f3:95:5f:e9:48:42:d4:9c:bc:7a:8a:ba:8e:0e:2f:13:f8:
         23:4f:9f:59:15:02:3f:f1:db:7a:ab:9c:fd:02:cd:df:eb:14:
         19:00:17:a4:0f:32:24:90:29:41:23:32:ac:b8:97:59:74:33:
         67:c5:24:ed:c6:59:80:cf:c6:4e:0c:3a:9c:8e:fb:af:ba:0c:
         c0:4a:7c:0d:e1:b6:2f:12:80:89:83:d8:6a:b2:b4:f3:27:ff:
         e2:dd:85:fa:f0:93:77:07:32:8b:9a:25:ac:ce:9a:21:33:22:
         34:41:07:39:41:58:af:e8:ee:54:8b:0a:b7:5e:30:73:4b:b4:
         28:e5:18:ab:57:e6:77:03:72:f4:9a:b3:4a:d0:36:36:b1:2e:
         86:42:1c:09:63:cc:7e:1c:ba:ba:b9:99:ad:61:24:0e:b5:e9:
         be:51:bf:24:92:99:18:92:4f:60:f4:aa:95:e2:7c:dd:87:82:
         e6:5c:88:82:ca:f4:b9:f6:18:83:d3:5e:6d:24:86:2c:e8:e1:
         d2:ec:e6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:21 2026 by rpki-client