Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File:                     LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier:          x9URX02azxCn+viT6ZrxIp/Vle5tE5D3ymRSpBGAJW4=
Subject key identifier:   BA:C2:79:38:2D:DA:6B:F4:B8:E0:CE:74:16:0B:74:ED:A7:23:1B:79
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer:       /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial:       019FAB2C6E16C3F99BF9C0EBD33D958D5DA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number:          18E7
Signing time:             Wed 29 Jul 2026 00:00:43 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:43 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:43 +0000
Files and hashes:         1: 9JptdLDcntQOv_LPrBMUCpvGPBk.roa (hash: 73iAqO8mI3K+RtQqfMbur8DNuJybJKZQrci5eZb7C2c=)
                          2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: VHIhUU4Cbtx7JKwNj/j2o89e8/ZAfHM11Tg/BSB/blw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:6e:16:c3:f9:9b:f9:c0:eb:d3:3d:95:8d:5d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
        Validity
            Not Before: Jul 29 00:00:43 2026 GMT
            Not After : Jul 30 00:00:43 2026 GMT
        Subject: CN=bac279382dda6bf4b8e0ce74160b74eda7231b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:08:fd:a7:c5:2b:90:c1:78:6c:eb:f8:35:
                    dc:eb:9a:33:67:ca:5a:2f:fe:f7:c5:1c:95:72:3a:
                    3e:bb:7e:ed:26:9f:b1:0b:ee:13:18:63:43:bc:dc:
                    61:34:8e:9d:d8:63:f0:0d:80:fc:e5:ac:9a:2c:40:
                    d4:ed:2c:96:9f:eb:dd:fa:dc:7a:d0:ea:1f:4e:96:
                    a3:04:57:58:c9:c4:93:ad:4a:ff:c9:68:ee:c0:46:
                    12:8b:b9:ab:4b:f4:29:85:8d:e4:25:08:a8:a5:fc:
                    a8:76:c3:8d:a0:97:4b:8e:4c:b3:76:2c:56:68:a4:
                    57:2d:0d:1e:da:f8:cc:6d:3e:56:c1:bf:80:35:75:
                    3d:52:3c:7e:d6:0a:c4:12:19:a9:7e:95:f4:36:3e:
                    0e:ed:0b:71:de:e9:2c:0c:5d:9f:a7:a1:03:ff:a2:
                    82:ca:6c:e1:9c:3d:61:8c:9e:bd:30:c9:2a:e1:cc:
                    28:37:18:7f:09:7f:d8:89:bb:f0:fc:48:74:7c:ac:
                    12:c0:aa:4a:34:1e:e0:2b:5a:4e:1f:e4:4e:8d:59:
                    98:34:37:fd:24:09:55:3a:8c:ef:74:99:68:9e:42:
                    8c:ff:6a:b9:b2:3e:ee:48:86:a5:b0:89:5b:1b:61:
                    a6:f1:32:b5:44:f7:ca:af:e5:fc:0b:2f:e3:cb:e2:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C2:79:38:2D:DA:6B:F4:B8:E0:CE:74:16:0B:74:ED:A7:23:1B:79
            X509v3 Authority Key Identifier:
                keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d3:18:2c:48:68:51:e3:3d:8b:a2:33:62:d5:a7:f2:c4:bf:
         e9:a6:48:23:64:cf:2c:59:0f:e1:ce:5d:4e:37:5f:f7:bd:bc:
         89:5d:2c:bf:c4:0c:ec:5e:b0:17:83:0a:37:01:3b:e2:57:8d:
         01:d5:6a:0d:f5:25:92:5c:7e:c3:1e:83:a5:b1:a5:fe:70:19:
         b8:e0:41:55:56:38:09:4e:55:38:69:55:03:30:9e:1f:78:0b:
         aa:d7:77:8f:9c:82:13:72:ec:ca:d8:82:b1:9f:99:4b:7d:03:
         15:da:5e:5e:b9:68:44:9a:b6:6d:ad:3a:b5:ee:21:66:2b:c4:
         7d:a5:49:e1:e1:33:f7:ea:a2:71:f5:6f:43:e6:7a:a7:43:02:
         f6:5a:9b:a0:fd:8e:b6:77:4b:a1:50:f9:f4:7e:7f:b3:6a:bb:
         fe:59:cd:bf:99:2b:f8:1c:40:bc:39:0a:59:a8:37:6d:9b:a6:
         71:e0:d7:5a:72:c0:41:12:9e:cd:84:c0:14:01:ec:3b:0f:4f:
         64:50:ea:5a:74:f9:e5:d0:cf:4f:d3:4a:93:f2:4c:d6:1d:d1:
         e7:85:db:52:ac:98:34:00:c6:57:10:6f:8a:48:f5:b6:6c:97:
         16:4e:e8:42:ec:b5:ac:42:7c:45:5f:1f:a4:03:ce:e6:43:ad:
         15:7a:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:42 2026 by rpki-client