Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File:                     L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier:          lwYAtaEiQmBCh+vs9/0R+hFxA7/ZJ8F9unW1Jo2q80w=
Subject key identifier:   AE:CF:B0:51:D3:49:9B:A8:32:DE:1A:97:4A:26:09:50:CA:E5:70:C4
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       019FAA8872D597E85FD5BFF6C481E6228C60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number:          1A12
Signing time:             Tue 28 Jul 2026 21:01:36 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:36 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:36 +0000
Files and hashes:         1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
                          2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: XvoFbKk/VjvRhEVYtMHhDekegSDauv/rQ/G6nPkdgAY=)
                          3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
                          4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
                          5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:72:d5:97:e8:5f:d5:bf:f6:c4:81:e6:22:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: Jul 28 21:01:36 2026 GMT
            Not After : Jul 29 21:01:36 2026 GMT
        Subject: CN=aecfb051d3499ba832de1a974a260950cae570c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:3b:82:18:30:0c:4d:b4:8d:a6:00:ef:d8:
                    d7:2c:b3:36:05:ab:3a:25:5e:26:30:c7:83:d8:ab:
                    99:74:c2:7d:a8:0d:3f:23:42:29:1f:e6:7b:7a:65:
                    3e:82:fb:50:4b:fa:08:47:a4:e6:72:e9:8b:aa:34:
                    e3:04:06:c7:d1:35:14:a7:f6:c2:b1:c7:eb:11:f3:
                    33:2d:a1:2a:b3:ac:e2:61:83:65:52:6d:b6:9a:57:
                    04:4b:fb:03:b6:d6:fd:23:a2:4d:ea:ff:10:0b:9d:
                    dd:65:f6:91:25:84:a7:6a:43:cd:bd:bf:52:79:50:
                    fb:d5:20:91:9b:81:c1:ed:36:85:d1:73:fc:fe:8f:
                    5d:25:a6:80:1d:a7:8d:56:00:99:17:5b:bd:0d:2d:
                    97:54:3b:48:e5:63:ac:94:ce:08:aa:a9:8a:c9:61:
                    1a:60:19:13:e4:d9:71:53:0c:22:4b:ce:24:f4:62:
                    26:85:db:f5:52:70:38:16:a8:c5:f9:ee:34:15:34:
                    f0:fa:37:47:b3:df:f2:74:07:31:e1:27:5b:32:cf:
                    4f:83:69:ca:aa:e3:0c:b8:7c:4d:1b:c1:df:ab:7c:
                    15:1a:66:08:a2:33:39:b5:5a:f3:57:8e:aa:e6:60:
                    c7:e2:ce:7d:3e:80:a4:8a:dc:ac:9c:e2:e2:f0:23:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CF:B0:51:D3:49:9B:A8:32:DE:1A:97:4A:26:09:50:CA:E5:70:C4
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:31:43:b7:51:96:11:37:15:04:2f:ac:33:93:65:bb:74:48:
         81:8b:34:78:6e:17:e1:45:2d:39:19:13:10:36:66:f8:12:5c:
         97:e7:c5:b3:04:55:5f:44:98:84:30:bb:46:19:3f:0e:92:92:
         a1:fd:b2:9a:f0:49:e0:cd:52:18:e3:80:8d:33:64:24:62:da:
         c3:48:81:e4:3c:34:2b:3e:62:ab:4d:d9:54:da:42:2e:c1:f3:
         94:e7:c6:0c:70:19:14:04:db:51:07:91:8c:90:67:2e:0d:89:
         c4:be:e2:9c:ce:f4:c9:d8:bd:ab:2d:7e:d5:df:5e:81:e2:fa:
         77:cd:5f:33:2c:f0:e6:2d:9b:87:05:f1:df:c6:5c:aa:56:23:
         12:b0:63:a5:09:de:b3:30:1f:68:bc:15:2b:2d:d3:81:5f:fc:
         43:4d:36:43:82:61:12:4c:f6:e1:a1:7c:4e:55:d3:2f:dd:01:
         e1:e8:23:9f:16:fa:55:8f:78:7c:c2:83:5e:0f:7b:4a:4c:09:
         e3:44:ae:cc:e0:ff:67:1c:e9:b1:4f:3b:5f:04:4e:d4:05:14:
         1e:26:77:b0:8f:24:0e:82:bf:2d:73:ab:e8:ad:bc:af:ae:9d:
         e3:b2:ab:2a:e5:0b:64:c3:10:e4:b0:13:3a:46:06:40:87:1a:
         c5:6a:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:31 2026 by rpki-client