Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File:                     L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier:          Jkaz43cJBNRWJzEnPRfshnrrJs5/tpQNijcGqyieTCs=
Subject key identifier:   F3:0B:E7:D9:06:EE:E8:07:55:76:F0:E7:87:A9:A1:67:77:E1:32:53
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer:       /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial:       019F954A004B74F74B180313F5BE1059E764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number:          11D5
Signing time:             Fri 24 Jul 2026 18:01:22 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:22 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:22 +0000
Files and hashes:         1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: XcAHazw4rBvikJX2MFkoxhojrqi33esoA3qNYNcoYUU=)
                          2: VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa (hash: 4yjY0Y/5nyei1ONwFqlQ/gYOuf/J9WjX6PHuI2NreOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:00:4b:74:f7:4b:18:03:13:f5:be:10:59:e7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
        Validity
            Not Before: Jul 24 18:01:22 2026 GMT
            Not After : Jul 25 18:01:22 2026 GMT
        Subject: CN=f30be7d906eee8075576f0e787a9a16777e13253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:5e:ed:9d:3b:09:0d:65:16:94:cb:e9:ce:
                    eb:ba:29:b5:24:b9:d0:0a:6b:c4:7d:26:24:26:36:
                    6e:b0:13:8a:a5:d9:41:2f:b6:9b:66:cb:2f:00:aa:
                    19:8e:a2:b9:b8:f7:96:0c:6c:af:48:83:7d:6b:d0:
                    e8:52:03:7a:da:2f:42:9d:fa:37:cd:6b:c4:b7:af:
                    b8:8c:c7:a5:d7:90:98:30:3d:87:73:92:1a:fc:0d:
                    fe:05:2d:e6:b2:1e:65:f6:f1:cc:13:57:85:66:3b:
                    e5:82:76:b2:6e:0a:5b:91:88:dd:d1:57:a8:93:a8:
                    b2:f6:cb:1e:e7:b8:49:9e:b0:10:41:5c:97:cf:54:
                    11:49:0e:56:5f:93:8a:3d:ac:a1:9b:85:e3:8a:66:
                    ed:62:84:4d:42:1e:6a:c5:3d:2a:ed:cc:54:74:b5:
                    b5:d6:51:23:97:45:bb:49:e7:3d:a7:d5:2a:dc:d1:
                    09:2d:f0:73:88:d3:ba:2a:47:a7:f5:20:4d:d8:a9:
                    71:32:17:64:46:9c:fd:af:e2:e8:91:07:61:46:cf:
                    eb:ad:ac:cf:ac:d8:18:6b:ac:52:cd:04:35:c3:f9:
                    ac:80:0e:80:e2:8e:4e:09:a8:bd:1b:32:1f:93:4f:
                    b4:8e:87:1b:22:49:78:6a:be:ce:a4:8a:2b:e2:a3:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0B:E7:D9:06:EE:E8:07:55:76:F0:E7:87:A9:A1:67:77:E1:32:53
            X509v3 Authority Key Identifier:
                keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:37:ad:42:d3:3c:01:70:95:c3:df:09:18:2f:21:35:51:25:
         e4:9f:b4:7a:a4:cb:cd:82:c7:9f:e8:62:b7:cd:83:75:49:41:
         a0:1d:d5:a2:b7:aa:fb:e4:0a:9c:42:fc:a4:de:4b:24:b5:19:
         01:44:e4:f0:06:86:8e:07:6c:a7:da:a0:d0:45:bb:11:10:04:
         e2:38:86:63:98:59:56:28:1e:b7:ef:d6:26:c6:0a:26:5d:d6:
         1e:be:18:9c:ec:b3:ad:5a:23:bd:a8:2d:d1:e3:73:42:cd:fa:
         5d:b6:fc:3b:fe:9d:1a:ba:c8:32:9c:cb:cf:99:25:84:34:6a:
         bf:1a:98:df:8e:95:6e:af:b0:74:94:5a:6a:ae:d2:fd:f8:2a:
         e8:ab:ee:ae:f2:45:f0:da:7f:86:3b:8e:c0:23:42:a0:4b:65:
         d8:8d:08:65:f7:70:4f:c8:46:40:61:c6:46:3e:87:a4:cb:39:
         b4:c7:93:4a:32:32:75:5f:70:3f:16:cb:d4:42:bb:8d:6f:e2:
         2b:05:d2:bc:4a:af:42:85:67:82:42:f7:45:15:ff:46:0c:55:
         40:70:4c:70:bf:5c:31:23:46:9a:96:42:24:40:3b:36:2a:0f:
         af:74:15:a7:72:e3:68:eb:61:c2:49:14:16:e1:bd:6a:6a:bc:
         66:9f:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:47:00 2026 by rpki-client