Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File:                     LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier:          bWtAPe9O6mmegl5otqFxAjWR4AwOMRJ6OSWATLAOKCI=
Subject key identifier:   33:7D:C5:41:D2:50:A2:69:02:F3:7D:8E:50:08:CD:33:1A:C1:FF:9F
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer:       /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial:       019F9549BAE6451BED469511B700348CF863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number:          195A
Signing time:             Fri 24 Jul 2026 18:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:04 +0000
Files and hashes:         1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=)
                          2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: SkAYyosuOoKCYAHR5uOTAYDv9Io5caKb8fCaCFiuduc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:ba:e6:45:1b:ed:46:95:11:b7:00:34:8c:f8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
        Validity
            Not Before: Jul 24 18:01:04 2026 GMT
            Not After : Jul 25 18:01:04 2026 GMT
        Subject: CN=337dc541d250a26902f37d8e5008cd331ac1ff9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:3b:b4:91:9c:9f:a4:a3:7e:fc:65:8e:4a:
                    7b:57:be:1d:4e:e8:3d:7c:01:15:0a:d0:27:68:ae:
                    2b:d5:28:f4:88:d5:70:be:e8:10:cc:20:38:72:08:
                    4c:99:69:11:b4:5c:c9:ad:91:32:43:58:00:69:73:
                    56:6d:62:e7:93:0a:9d:30:37:11:e3:05:0c:85:96:
                    9a:8e:db:73:38:71:27:c5:1e:1d:ff:b8:88:c2:20:
                    a9:56:35:ab:a5:16:1a:b5:c7:7f:2b:c1:1f:26:6f:
                    f2:65:1d:57:bd:10:33:7f:bd:e4:33:4b:ac:62:b8:
                    0c:8a:31:32:29:83:63:cb:d6:52:27:c7:b7:a6:8e:
                    bd:9c:7c:4c:14:a9:b3:46:87:74:d5:86:29:b7:ad:
                    74:74:fe:82:62:81:fd:ac:42:8c:37:ff:3e:89:fe:
                    20:15:61:f2:63:97:76:ad:11:51:32:5f:d0:c4:0c:
                    97:da:15:68:8f:9c:f1:48:5c:57:6f:5f:58:21:18:
                    41:64:21:52:ca:05:ca:f1:d9:2a:40:96:68:20:7d:
                    19:c5:2f:e4:14:13:c8:c2:bd:1f:89:c0:10:cf:b5:
                    fa:be:1f:6d:74:21:ba:63:69:e7:78:94:9d:d4:bf:
                    e1:b6:78:a7:05:69:e7:e8:3a:22:e9:a8:91:7e:27:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7D:C5:41:D2:50:A2:69:02:F3:7D:8E:50:08:CD:33:1A:C1:FF:9F
            X509v3 Authority Key Identifier:
                keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3d:53:bf:69:7d:e7:4b:1c:9d:96:fd:6e:95:be:7d:69:46:
         a7:ee:a6:85:ae:7a:c9:58:e6:d4:bb:62:9f:0d:38:31:b6:ef:
         1b:c4:f0:60:eb:89:5e:6a:82:92:47:49:61:2b:f1:87:0e:7c:
         68:52:bd:e3:5c:bd:37:86:fd:36:30:59:33:b1:55:34:47:95:
         59:87:e0:0e:98:60:c2:d6:70:94:7a:ce:3c:17:8f:36:45:05:
         73:fc:9a:ae:a0:c0:9e:5a:58:0a:af:0e:0d:b1:c5:8a:56:44:
         56:f0:62:d7:13:2c:f4:c0:35:31:d8:ab:9e:bc:e0:b0:1c:46:
         36:0e:45:fe:82:24:d6:e9:1f:36:e5:d5:e8:97:6e:99:71:ef:
         28:1a:6e:a1:d5:4a:9b:02:38:ef:e5:1d:e7:e7:55:1b:6b:6c:
         16:79:c2:c4:c8:2f:bb:97:d6:88:46:f1:39:a9:01:3d:51:f8:
         aa:37:4b:fd:58:e5:d6:5d:15:2e:fe:60:c6:c1:f5:a5:3c:41:
         a4:4c:ec:f0:8c:26:a7:c6:78:37:d6:14:d5:e6:98:80:ef:6b:
         4e:6d:4e:e6:03:69:f2:07:82:df:05:69:a6:9a:52:3c:db:03:
         5c:13:4a:12:55:3b:d7:2c:aa:60:6d:bb:28:8a:17:d2:9c:25:
         70:36:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:47:48 2026 by rpki-client