Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File:                     lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier:          baUN42ppHZlErMYawxqTi8QktMu5YLcouxWTwrfGZOw=
Subject key identifier:   07:D6:B2:70:0B:2D:61:7C:07:F9:38:35:64:3D:ED:37:4F:12:3B:1C
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer:       /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial:       019F93C945FEEFAF09864D15D359D6E954AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 11:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:09 +0000
Files and hashes:         1: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (hash: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=)
                          2: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (hash: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE=)
                          3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: u4SL3W7wTY7BDw9s2mSooCxY/cRz9mlYX0f3qsRbPyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:45:fe:ef:af:09:86:4d:15:d3:59:d6:e9:54:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
        Validity
            Not Before: Jul 24 11:01:09 2026 GMT
            Not After : Jul 25 11:01:09 2026 GMT
        Subject: CN=07d6b2700b2d617c07f93835643ded374f123b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:7e:6e:e5:f9:13:13:6e:df:0c:b5:43:55:
                    04:da:5b:0c:2d:3a:da:ad:af:8e:55:26:09:e2:11:
                    ed:d7:fb:9b:a6:2e:f9:dd:c4:92:e4:0b:2d:7e:cf:
                    fd:f8:a7:71:c0:28:3e:03:51:55:1e:5e:54:96:9f:
                    16:76:3f:d3:aa:ce:b8:52:46:81:8d:93:ff:fa:0f:
                    b9:e3:ce:98:79:40:3e:1c:22:54:7b:3a:70:8d:87:
                    c9:c7:51:0d:08:1e:db:6e:b5:5d:53:25:1e:c5:e3:
                    e3:c9:6b:71:8a:c8:75:eb:58:5a:95:82:45:27:a3:
                    69:88:1d:ae:c7:ec:75:b8:e6:e8:c5:ce:fd:d7:32:
                    66:9f:3f:7c:c3:4f:ec:b0:67:b8:fc:99:b7:ab:3d:
                    db:db:37:e9:a0:91:72:55:56:f9:02:13:d9:f2:8a:
                    53:52:ec:5c:ba:0d:45:3b:06:40:7c:f0:c8:43:78:
                    7d:19:ca:ef:1f:cf:04:99:6c:4b:29:e0:0c:da:54:
                    9d:aa:49:cd:fd:e8:f4:f8:90:6b:6a:7a:b0:e1:8d:
                    0b:0b:05:4a:ff:a5:3d:a6:84:59:8e:18:f8:6d:cd:
                    e5:60:9c:01:77:e6:d0:df:e8:75:54:27:93:37:2b:
                    d5:5b:fa:68:b0:e8:c7:45:5d:55:38:b3:7f:e8:92:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D6:B2:70:0B:2D:61:7C:07:F9:38:35:64:3D:ED:37:4F:12:3B:1C
            X509v3 Authority Key Identifier:
                keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:14:ed:fa:00:71:ff:2c:8a:53:79:db:19:ba:8b:4e:46:e3:
         0d:84:de:6c:7e:8d:d1:b0:07:ef:44:c5:5c:ef:b5:69:55:1e:
         a9:8f:7f:17:cd:83:8b:29:e4:8b:93:5e:3f:80:6a:ec:83:c0:
         72:3a:85:cc:ed:0f:39:95:d5:b8:34:8a:8b:27:46:03:c7:f3:
         d0:96:a9:d0:c5:9f:e0:f0:64:df:c5:ab:15:92:91:a3:a1:fe:
         de:82:87:a3:aa:61:26:40:e8:08:fc:6c:4d:e9:f2:16:2f:3e:
         ca:b0:d4:cb:ce:35:26:70:4b:d4:6d:44:67:68:f1:fd:26:58:
         68:e8:1d:87:ed:57:0e:46:89:89:91:8a:63:11:0c:4e:d8:7a:
         7a:29:fc:fd:62:d0:f8:d5:8f:8e:89:91:cb:ba:bf:4e:9c:70:
         c5:68:bf:fb:90:9b:85:3f:0a:54:18:2f:e4:26:af:2e:4a:4f:
         40:46:d8:44:46:9a:f6:56:5b:b2:42:18:55:0e:08:25:e2:b4:
         79:bf:a3:1f:91:1b:99:09:72:4e:e8:0a:c3:e3:e0:a4:79:85:
         f7:c9:d0:5b:d2:ad:5d:85:93:2b:52:33:07:16:15:81:07:c2:
         7d:44:8e:9f:34:1f:a8:d9:80:4e:8f:72:bf:f9:62:1c:3a:4a:
         b9:17:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:46 2026 by rpki-client