Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File:                     lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier:          Q4nKn+deOYMOY0X/o6QkrKPXIT89aN+SvE7ai1IImt8=
Subject key identifier:   B1:BE:5E:CD:90:A5:93:66:38:E7:31:94:30:1C:2E:72:33:BD:DF:B1
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer:       /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial:       019FA89A2405E382A179E063A3550E433D4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number:          181B
Signing time:             Tue 28 Jul 2026 12:01:41 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:41 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:41 +0000
Files and hashes:         1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
                          2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: gTM22xrHbOjrTZJlOZqS9nP1z4xJge9KPDytkRTUCG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:24:05:e3:82:a1:79:e0:63:a3:55:0e:43:3d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
        Validity
            Not Before: Jul 28 12:01:41 2026 GMT
            Not After : Jul 29 12:01:41 2026 GMT
        Subject: CN=b1be5ecd90a5936638e73194301c2e7233bddfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:b3:f6:27:39:d6:60:ce:3b:32:1f:46:7b:
                    6c:f3:4d:76:f0:de:1c:19:02:ea:1e:3c:2f:b5:2d:
                    f4:98:27:b9:41:49:6a:d5:8e:1d:b6:ff:ac:5d:20:
                    b2:45:89:b9:0d:c6:4e:24:f7:47:aa:23:4c:ab:48:
                    ff:4b:d6:ec:d9:08:15:0c:7f:90:d7:3b:7a:19:f0:
                    3c:38:96:99:a1:1d:8d:1d:4f:20:df:ab:48:82:a5:
                    92:f3:cb:d8:60:6c:90:73:3f:4d:58:8c:7a:c6:dd:
                    2b:9b:3b:03:4c:d4:ca:59:48:f2:ee:47:20:87:64:
                    96:82:c1:1d:68:93:49:81:36:c6:70:f2:c6:d1:c6:
                    0c:9c:6b:2f:39:44:8a:bc:27:ff:59:ad:88:bf:ea:
                    68:8a:fa:65:6a:db:0f:b0:20:7d:74:7d:ea:86:20:
                    34:7a:49:16:df:13:22:bd:2c:6a:93:0a:33:91:dc:
                    f6:c0:ae:5c:73:98:e3:0f:bf:0f:cc:e0:4e:6c:2c:
                    17:5d:8a:af:07:44:cb:c4:9e:95:26:32:83:b4:53:
                    82:42:dd:d6:99:8a:b7:e1:66:82:6b:76:4c:b1:7c:
                    b4:05:d4:46:3f:16:9b:a0:67:5c:61:e3:6e:fa:dd:
                    b3:10:cb:3b:3d:a6:df:c9:45:dd:2f:97:c5:14:b8:
                    30:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BE:5E:CD:90:A5:93:66:38:E7:31:94:30:1C:2E:72:33:BD:DF:B1
            X509v3 Authority Key Identifier:
                keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:5f:f9:eb:58:e6:f6:16:3f:3e:27:15:b1:78:b6:d7:ef:16:
         f3:bc:3d:a6:fd:27:ca:cb:16:4c:ee:5e:73:ef:bb:93:a2:d0:
         6f:dc:df:46:32:0f:9f:58:24:0f:12:3a:e2:a1:1e:f0:be:e7:
         80:9b:4f:a2:32:3d:c9:0d:f8:83:48:9c:03:23:3a:fb:df:b8:
         03:91:f0:90:aa:24:a8:9c:47:d7:78:83:62:44:96:7e:42:4b:
         15:79:a2:e8:14:da:a9:12:35:94:d1:c6:fc:e7:06:34:2f:d8:
         aa:8b:d7:9b:03:20:90:4c:a9:19:af:7c:25:c6:67:b7:6a:86:
         56:8b:da:d7:10:59:e9:b2:10:b9:72:e6:52:2e:05:90:1f:30:
         84:1a:0e:a5:52:03:ce:4e:b9:59:ce:93:4a:1d:4e:b8:3d:3c:
         82:fe:97:4c:b2:1c:d5:38:6e:64:80:a7:09:f6:a6:fe:0e:5a:
         2d:43:21:58:01:2f:15:e8:1b:97:21:da:55:8e:cf:e4:82:87:
         b9:88:0e:1e:7b:91:e1:9b:f3:cc:75:ad:98:f4:ce:52:7d:01:
         df:db:1e:f9:60:22:21:d9:c0:54:6a:a8:3c:40:34:96:d0:6f:
         f3:07:78:0a:c3:18:8f:fb:11:25:13:5b:fe:12:60:4d:fd:a8:
         7e:f7:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:37 2026 by rpki-client