Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
File:                     lYM0pMEu57_TbL84WQfAQhA0NsY.mft (raw, json)
Hash identifier:          t0kIzX4z9pSzLaKqfJmVzPIyZqaXMmEGYSwSclsJXS0=
Subject key identifier:   4A:36:28:A6:70:E2:83:7B:4C:0D:D4:1D:D1:4D:E9:70:38:82:91:BB
Authority key identifier: 95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6
Certificate issuer:       /CN=958334a4c12ee7bfd36cbf385907c042103436c6
Certificate serial:       019F93920DE0AE54DE41999B31D7DCF5F712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
Manifest number:          016E
Signing time:             Fri 24 Jul 2026 10:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:50 +0000
Files and hashes:         1: MrVUIQjfWhMeAygcTn_kB8nchao.roa (hash: CoX55bP+8UcP/V9NHXcXKWX+Bw+cYWaam37t88M/puk=)
                          2: lYM0pMEu57_TbL84WQfAQhA0NsY.crl (hash: X01p55P7/AhuSyyfwu5KQHWlX1IGy4UWOrvGdnc6VtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:0d:e0:ae:54:de:41:99:9b:31:d7:dc:f5:f7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958334a4c12ee7bfd36cbf385907c042103436c6
        Validity
            Not Before: Jul 24 10:00:50 2026 GMT
            Not After : Jul 25 10:00:50 2026 GMT
        Subject: CN=4a3628a670e2837b4c0dd41dd14de970388291bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:a8:e7:00:ca:b1:04:59:cb:3e:9c:ed:13:
                    50:ba:cf:bc:87:27:4d:0e:d8:63:85:9b:ad:7b:98:
                    a1:9b:13:f0:d4:2b:61:c7:48:36:8b:ba:45:dc:d5:
                    fc:41:48:e2:bd:2e:8e:7f:7b:c0:1a:66:ba:fa:0d:
                    d1:5c:f5:e9:90:c1:98:0d:3c:3a:17:46:cc:70:0d:
                    ed:e1:dc:b9:2c:af:d9:19:bd:6a:f3:2d:98:e5:57:
                    5c:18:fc:ef:d6:3f:58:8a:ec:08:ad:91:e2:62:1f:
                    cf:e4:6c:c2:1a:3d:bb:bb:20:92:0e:fb:43:e2:48:
                    7b:1b:38:85:76:bf:78:4b:b9:53:e7:33:a2:66:f1:
                    a8:e8:c6:98:02:35:66:fe:27:a5:52:c3:ca:59:86:
                    5b:a1:8a:4a:06:44:dd:e3:f8:fa:ec:4f:b6:20:30:
                    e0:0a:45:0c:d0:43:4a:25:97:8a:24:99:b2:a7:1b:
                    25:72:bc:2d:65:e9:2a:16:b9:93:41:a4:d8:89:9c:
                    ef:dd:42:ca:89:2a:0f:2e:6c:9d:bc:48:f7:46:6b:
                    88:48:df:14:d2:8b:fd:ca:66:e9:7f:b6:b1:de:31:
                    df:30:bd:ab:55:4d:b0:d1:52:32:7b:40:32:ce:cc:
                    b2:82:48:f6:02:70:ef:bd:bc:f2:16:84:c7:aa:79:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:28:A6:70:E2:83:7B:4C:0D:D4:1D:D1:4D:E9:70:38:82:91:BB
            X509v3 Authority Key Identifier:
                keyid:95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:9d:ce:2c:59:d6:3d:73:4e:d2:7e:71:23:09:2c:44:00:db:
         db:0e:6d:74:1d:60:1b:60:1d:9a:69:b5:24:f6:ff:79:24:22:
         19:92:a4:6e:5f:72:83:c2:33:0d:b4:62:f0:22:4d:02:c5:86:
         30:21:8b:4a:f8:62:7f:db:92:47:f6:eb:cd:1c:4c:16:d9:4e:
         29:a4:df:29:1e:6a:d5:87:c5:66:8e:3c:1b:32:5f:7f:98:da:
         fd:17:37:a1:dd:e0:1d:c3:1b:b6:36:82:8d:b3:92:7d:4a:d4:
         ef:9e:33:ef:a0:89:f0:ac:5c:33:32:05:d8:fd:bd:4c:9c:08:
         73:e8:31:54:b0:86:91:c9:80:8c:9a:ed:b3:50:db:f8:4f:5e:
         6e:fe:0d:c2:15:54:9b:b5:bf:a5:2b:79:d7:8a:9d:6a:53:11:
         76:70:78:24:04:a0:d2:fb:b7:e7:ad:7a:fb:43:84:34:1e:c7:
         05:74:96:9c:f1:9a:08:03:48:6e:fc:f2:ce:52:5c:a3:28:9f:
         c7:19:60:a1:a7:85:2a:f9:32:49:46:26:c4:e0:4b:68:db:61:
         21:b9:f2:48:e1:93:a0:6b:b9:3f:5a:a3:3a:7d:27:07:e9:8c:
         db:4a:e3:23:2d:e2:85:04:15:77:97:9d:eb:2c:ec:49:a4:90:
         de:2a:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:52 2026 by rpki-client