Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
File:                     LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json)
Hash identifier:          4WxABEk2yVvRj7YWx1osZg9BUnkobqZWz+qWmKV4y6o=
Subject key identifier:   12:2F:C3:19:83:E4:7C:86:81:89:8E:7D:26:80:2D:67:0C:FE:4E:5B
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Certificate issuer:       /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial:       019F913573C14B8B1F88B3B1FEDA3A12D11C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
Manifest number:          19D4
Signing time:             Thu 23 Jul 2026 23:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:27 +0000
Files and hashes:         1: 1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa (hash: 5WKu4LWonKHRxxs99iSw6h5aj4s3WEayXBY2TqBi9nA=)
                          2: 1Gik3uokQgHgJGrEqX2lFkzr0cY.roa (hash: Kk98fLYxI9U7uOT4mbQ7y0T5RVTRCELUDm+h4tCANjs=)
                          3: 2RbyrkRyfy89JjRg3To0T1X7M24.roa (hash: b2qdxjwNibknS7GfNAq+qHd1R5651Flic59AvsJpQf4=)
                          4: 34lSajmzV7ghbV2u1KSVPerBr80.roa (hash: NamtEVy8eAOlAQdliJbJze4twHs6pp1lCvXKU+23zoI=)
                          5: 6brxduzXhHDEdEdLPYo-IkEXumQ.roa (hash: BNtGnX+ZgfT95cD+u1NiIdsjMWlhX2+WUP0xdw5BCqw=)
                          6: CDi03via9tSrSWhEkc8SyFAzxU8.roa (hash: 4E5NjZdVovSPIPi8ZzMY1G+T+skgT6FVyGUEU7eeF4A=)
                          7: Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa (hash: 5IPdnacUry/jeLV3YhfaDu6Wg2YGyXm/oHlA8O6l+z8=)
                          8: F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa (hash: 23DkMsSVoahaS49VnCTPljUSOUkll2ueapsYq9u+mmk=)
                          9: FHznUXLD8rFTI78uN7oxhc4DhSU.roa (hash: b+nymXPjgks3IFJ/o1An5mcttD+ZdDuxy6fPoMhsETE=)
                          10: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: MwIMWFUa7reSDaYs91a49iE5Fabs7p+r23MMwhS9BUs=)
                          11: LumDKv8yJCaTy-63lwCESoCV9wg.roa (hash: sY6Zv0xvPu2a/4QF003FOap0XFsW2Wqm364DnIdq744=)
                          12: Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa (hash: HJ9iHQ4hdTkZ4JJds6Vw/2RFkXgvBx/DD5d+J3cy7Ts=)
                          13: R9KDbq4_KK0GlGPdLMfTos0CBjE.roa (hash: QHS2bULmvFoSCrqKfTl/c1ypYsSyCSgswpWvIKsISSU=)
                          14: XZk-yWmlDDM9CxBVtm8oXZP5lLg.roa (hash: 4M0vAZEtj82VVd8AbgFS4P7h6woEavJ+CLFH4jVH08E=)
                          15: lPjhCpLeDikKgymVS-eWXgwxAp8.roa (hash: MyuMAm1eed/9jmE8+GgWWmDVqy3fbOF+fkCjwKELi/0=)
                          16: n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa (hash: Mdos03oYdbkiZzG/wC3jhapVhZc0L3yy3J3lEF+MNPQ=)
                          17: rjJb7Ma4JA2QDwSLDvxE_nuqcm0.roa (hash: QxeA9lmoqDy9aA4mXJ53DXoy59LVGmnnOAFARnPU/Bk=)
                          18: uea9rgFUf1JA0CrNAzpNKJzb_aw.roa (hash: k8IR4W1p+ygIWocTeYwLCg/tltltxbnE44agYQdWhgs=)
                          19: x0-zbjoQNIYj_qDoGiAxC9MpnYc.roa (hash: 7TMD01f8lLY3g9AO1/72S5iTfUyRV4cwvwL1UdzW4pQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:73:c1:4b:8b:1f:88:b3:b1:fe:da:3a:12:d1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
        Validity
            Not Before: Jul 23 23:00:27 2026 GMT
            Not After : Jul 24 23:00:27 2026 GMT
        Subject: CN=122fc31983e47c8681898e7d26802d670cfe4e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:af:9a:5e:ae:32:e8:14:6e:6d:6c:dd:cc:
                    20:a0:a5:30:fd:6f:f7:69:f5:6f:60:aa:35:9e:9c:
                    0d:62:f7:6b:3e:04:b2:af:c4:97:c5:9e:fb:32:d8:
                    a0:ac:c1:58:90:af:ea:88:8b:3f:48:72:99:c8:05:
                    26:f6:6f:12:67:19:0b:2b:ee:7c:f4:bb:ab:9e:51:
                    28:30:5b:4a:cb:ff:d5:88:40:b2:d0:2a:74:d3:e6:
                    18:80:70:03:67:a6:2d:6d:96:d6:f5:60:e2:8a:cb:
                    60:2d:aa:de:27:d6:fa:22:69:c7:d6:a5:ef:57:de:
                    dd:72:e7:3d:ae:c6:e9:f6:7d:62:d6:7a:e6:55:4b:
                    32:d9:92:a9:b9:12:2c:32:fe:ee:09:92:bc:6d:dd:
                    ac:ad:fc:1b:f1:6c:2b:28:5e:9f:d6:ca:c0:f8:21:
                    37:c8:cd:0e:be:9b:59:93:25:af:dc:19:1e:d9:a8:
                    96:70:6a:f8:15:2c:9a:bb:0f:74:b8:f2:f8:74:82:
                    79:0f:80:5c:34:9e:7b:fb:cd:1c:b6:70:ec:f7:de:
                    3b:e6:a0:5e:e4:01:37:bd:6e:c9:0d:09:ae:af:2f:
                    86:a6:83:fa:d8:1c:7b:c5:2c:6f:6b:26:19:64:7f:
                    c1:f4:25:78:5c:c6:c5:c8:02:b7:08:3f:21:ae:de:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:C3:19:83:E4:7C:86:81:89:8E:7D:26:80:2D:67:0C:FE:4E:5B
            X509v3 Authority Key Identifier:
                keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:54:7a:16:74:30:66:ee:35:e4:62:43:49:8c:48:fb:c4:
         47:c2:7c:dd:8a:5f:d6:5b:ab:8a:6d:11:6d:78:5c:bf:68:cb:
         6f:1d:04:e0:46:01:83:b9:20:1b:f9:88:57:63:4c:a6:c2:fe:
         98:ea:41:b8:92:24:45:a9:4a:43:06:2e:80:9e:c9:db:de:6e:
         20:0f:1d:94:26:03:ca:63:b8:e4:ca:17:02:85:22:3e:46:46:
         17:9f:c7:f5:1c:38:1a:c6:9b:19:c1:d9:85:10:91:44:7b:cd:
         46:f9:14:ec:a8:b5:5b:67:64:3a:00:c4:a0:d5:ee:22:9e:ee:
         7d:5a:f0:e9:b8:55:7c:8c:81:b8:85:5a:54:23:14:e6:1e:c9:
         24:7d:62:8e:ab:d2:3b:36:92:0d:b5:57:23:95:41:d7:30:59:
         a2:47:4c:4a:07:12:df:ee:56:4b:4c:1a:69:65:16:7a:54:be:
         c7:6b:a2:0c:f3:ab:45:f0:98:e5:f2:db:bf:91:14:fd:3d:37:
         c6:f1:69:16:48:ed:70:d1:e0:90:4d:79:f4:d5:fc:64:b7:c5:
         62:3a:89:28:2a:7e:69:eb:c3:ef:bc:1d:72:f4:a5:8c:d1:2f:
         d3:ed:c7:26:c5:58:c6:ed:af:a4:18:44:16:75:8d:c9:a5:07:
         5a:2d:5f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:12 2026 by rpki-client