Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
File:                     L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json)
Hash identifier:          gL0Wlp8K9c/9qYzdSmueEBq14gLdel7GlvMSO7Mbmmw=
Subject key identifier:   F1:84:2D:DD:21:DB:41:5C:E2:6F:DF:DF:23:93:A0:9E:50:07:3D:85
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Certificate issuer:       /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial:       019F916C8F734FEE85C6E63277602FA9FD64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 00:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:38 +0000
Files and hashes:         1: 3RBCVkBsQ6_V7wN6k9fIFJdSpp8.roa (hash: nfpey2pShwBixsacoxSoNyyC/Cgr+HILJV9+oDPT+a0=)
                          2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: eUzbepZcEjNzAHiJUj72CiGP0LbNG1D33/sr26hlwG8=)
                          3: Wx0tuGvy7Ik_CwijVq0hyyYCJNE.roa (hash: F7OSj77dk7wzXt/at0+fTmTHxHYJ8OWNXq9VDQhTOcs=)
                          4: xfyMUvyO8DDhcxSBKaxnnxjvYhc.roa (hash: W6rHIx7iAQO/hl2oAqLrj2UwizqFE2L+eavtuywb88I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:8f:73:4f:ee:85:c6:e6:32:77:60:2f:a9:fd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
        Validity
            Not Before: Jul 24 00:00:38 2026 GMT
            Not After : Jul 25 00:00:38 2026 GMT
        Subject: CN=f1842ddd21db415ce26fdfdf2393a09e50073d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:73:09:00:58:db:40:8f:4f:10:8d:31:29:
                    74:9d:a6:d8:7f:02:e6:63:25:60:86:05:68:20:c9:
                    4d:8c:40:a0:ed:e8:e2:67:d8:70:83:4a:76:0d:cd:
                    2a:dc:c7:e7:ff:26:e3:82:9b:fe:23:e1:93:ec:3f:
                    e3:ac:ce:12:75:da:bd:c8:07:ce:12:47:ce:1c:66:
                    60:23:1e:c0:da:22:00:c5:3f:6b:66:30:83:3b:70:
                    20:fc:0d:6e:5f:91:76:f1:5d:72:26:cb:f7:29:2a:
                    00:91:8f:6d:eb:2d:e6:54:f5:b2:73:34:b8:5c:66:
                    bc:2d:17:9b:84:88:b8:eb:ba:e1:be:ba:14:a0:6e:
                    1d:fd:6d:66:f8:fd:c5:ce:17:09:4d:ba:05:28:d8:
                    68:07:24:d2:f9:5a:25:50:8e:bb:84:25:8d:6e:c7:
                    1e:16:77:15:c2:ab:3c:5e:64:a2:1b:2e:12:b2:14:
                    7a:6a:39:b2:3d:64:c9:f0:87:5e:31:c8:f5:20:dd:
                    b9:84:c8:ae:ac:d7:45:07:12:a7:8c:54:2a:a5:e0:
                    69:28:85:97:53:74:cf:90:5c:49:52:e3:9e:55:02:
                    c3:5c:67:1d:43:08:a9:8b:11:a6:1d:0f:77:49:38:
                    72:a7:3c:25:42:15:da:8e:51:2e:3e:03:dd:ed:a8:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:84:2D:DD:21:DB:41:5C:E2:6F:DF:DF:23:93:A0:9E:50:07:3D:85
            X509v3 Authority Key Identifier:
                keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:28:d0:bb:8d:e3:d3:c9:f0:96:91:71:20:2e:68:3f:5a:2b:
         fd:07:cc:09:5c:a3:de:96:5f:54:c1:11:be:3d:23:45:30:99:
         9e:b0:79:45:9a:aa:00:4c:fe:2c:0c:40:03:0a:d5:c5:82:04:
         82:47:1d:ac:5a:dd:63:0a:15:7d:da:04:53:e3:23:8d:33:10:
         66:0c:ee:45:58:0a:0c:1c:82:1a:1a:6c:4b:b7:9f:0e:3f:18:
         c9:ce:e3:92:6a:9d:be:72:cb:85:42:69:79:55:2b:4a:53:51:
         8a:3f:75:aa:07:64:51:46:fd:1c:7a:09:3c:b5:12:71:62:5e:
         b9:d8:51:b8:50:a0:3e:55:7d:da:7b:cb:e7:09:2e:99:37:b4:
         ba:81:f4:49:b0:3d:f3:f0:74:39:04:e5:55:6c:a0:2d:63:65:
         6a:6f:57:ac:32:d7:6b:28:eb:5d:de:d6:75:e3:ba:63:0b:f9:
         30:f0:dd:61:f5:ea:ea:f7:da:4d:57:0b:7a:02:ae:9c:6b:87:
         c7:3f:c7:e8:92:af:4b:64:36:05:69:0e:3f:53:c7:0c:45:ff:
         50:c8:33:37:cc:5e:7f:69:58:d1:ae:6b:87:14:53:1f:b4:67:
         0e:c2:d1:78:f8:26:f8:9c:47:8b:47:75:7d:10:33:10:6b:dd:
         3d:9f:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:37 2026 by rpki-client