Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
File:                     L-KdbJy8NTcKAaomhNP3cxr5TJw.mft (raw, json)
Hash identifier:          3S1JsCtuvNC8MIoPmYVWwqsCT0vVOdLDP0sjoxSBUKw=
Subject key identifier:   54:89:3E:F6:7B:64:12:B4:85:26:A2:FA:23:4C:F4:9B:AB:93:07:31
Authority key identifier: 2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C
Certificate issuer:       /CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
Certificate serial:       019FAA887F0D695A6BBC239D87960E7F16CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:39 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:39 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:39 +0000
Files and hashes:         1: L-KdbJy8NTcKAaomhNP3cxr5TJw.crl (hash: pyWFaJ11yIGX9NHohkHOX4dV8+e+zq3Oz7nv7yOVxmE=)
                          2: ftKjys4SL9XyBKoRHiV1H8O6q-4.roa (hash: goOri5FlwgHp48z3jZwt3R81i0ZWwE5V3bBzvpwMo7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:7f:0d:69:5a:6b:bc:23:9d:87:96:0e:7f:16:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe29d6c9cbc35370a01aa2684d3f7731af94c9c
        Validity
            Not Before: Jul 28 21:01:39 2026 GMT
            Not After : Jul 29 21:01:39 2026 GMT
        Subject: CN=54893ef67b6412b48526a2fa234cf49bab930731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:e5:2c:bb:c7:e4:9f:fb:fb:11:01:51:68:
                    5d:7d:30:e4:e0:25:7a:13:bf:6b:c1:c6:de:3c:fd:
                    61:ff:c1:a6:f7:a6:76:7b:f7:a8:74:2d:8c:8d:76:
                    ea:8c:9f:6e:f0:e4:b9:1f:44:1b:67:3b:e8:4c:77:
                    ff:10:ae:ac:d6:27:57:b7:4f:31:80:49:b2:ed:47:
                    5c:73:53:e1:8b:1f:fb:7a:3c:8a:93:ae:13:b7:2e:
                    f3:b1:4d:12:c8:ec:f5:d3:09:23:78:f8:d2:91:e1:
                    8b:28:c7:98:d3:b4:0d:83:3a:8c:33:3f:9d:81:f4:
                    52:f2:28:41:06:76:c8:ec:61:10:df:ea:41:a3:b8:
                    b9:63:52:04:c4:8c:a5:8e:dc:a4:0e:0a:88:df:88:
                    29:10:1d:24:77:0a:0b:24:56:c4:6d:57:fd:54:2f:
                    21:f3:dd:da:8a:ae:34:dd:28:36:4f:40:c6:cf:67:
                    d8:b0:34:9a:f5:43:5d:b7:89:fa:09:25:d3:ac:ad:
                    49:59:c6:62:5c:fd:c7:bf:6e:32:b6:24:7a:c0:12:
                    cf:3a:d9:c3:ab:77:73:ff:0e:8b:7f:c3:a9:75:1b:
                    a6:e6:d3:3d:73:91:cc:38:35:9d:5b:0c:a1:75:73:
                    4c:53:b3:f1:c0:99:52:5b:74:26:03:ba:53:e8:0b:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:89:3E:F6:7B:64:12:B4:85:26:A2:FA:23:4C:F4:9B:AB:93:07:31
            X509v3 Authority Key Identifier:
                keyid:2F:E2:9D:6C:9C:BC:35:37:0A:01:AA:26:84:D3:F7:73:1A:F9:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-KdbJy8NTcKAaomhNP3cxr5TJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/L-KdbJy8NTcKAaomhNP3cxr5TJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:d3:e0:ef:69:e7:92:62:3d:aa:d8:8a:c6:5a:6b:27:0c:
         3e:8f:d6:3f:de:dd:07:d5:01:20:5f:39:b2:0f:b9:9b:7b:b3:
         48:19:05:52:9f:53:18:b6:dc:9a:8d:da:75:73:22:8b:eb:45:
         69:52:dc:ed:5d:aa:7a:77:72:4e:c7:6d:b7:a9:bd:4b:e7:4a:
         2b:64:17:1b:12:9c:9a:60:dc:f7:4d:5b:ff:b9:2f:13:93:81:
         70:3a:46:ff:2c:1e:ab:ee:fa:14:9d:19:c5:7d:7d:11:62:56:
         ed:23:a0:5d:a6:ab:fd:1a:54:ff:76:9d:47:0b:73:be:9e:c4:
         ea:81:bb:d4:93:50:7a:31:3d:ce:20:41:ed:c8:c0:98:53:3d:
         00:94:30:88:f5:3c:8a:1a:28:c7:9c:95:54:78:25:5e:6d:d4:
         a8:0a:84:77:74:b3:68:e6:20:7f:e4:55:2b:21:3e:25:1a:f9:
         30:bd:49:23:c7:21:7a:6b:87:b5:6e:f7:74:24:1f:6f:2e:00:
         3b:b6:8b:39:88:a3:fb:35:5b:16:84:0e:9d:a9:17:c4:d6:c3:
         fb:90:50:11:b4:9d:f1:b8:7e:23:bd:66:6e:09:65:64:e2:bc:
         49:83:8f:84:2a:7e:13:0c:16:71:33:b5:4b:ef:39:19:cd:40:
         fe:30:c3:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiH8NaVprvCOdh5YOfxbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZTI5ZDZjOWNiYzM1MzcwYTAxYWEyNjg0ZDNmNzczMWFm
OTRjOWMwHhcNMjYwNzI4MjEwMTM5WhcNMjYwNzI5MjEwMTM5WjAzMTEwLwYDVQQD
Eyg1NDg5M2VmNjdiNjQxMmI0ODUyNmEyZmEyMzRjZjQ5YmFiOTMwNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyPlLLvH5J/7+xEBUWhdfTDk4CV6
E79rwcbePP1h/8Gm96Z2e/eodC2MjXbqjJ9u8OS5H0QbZzvoTHf/EK6s1idXt08x
gEmy7Udcc1Phix/7ejyKk64Tty7zsU0SyOz10wkjePjSkeGLKMeY07QNgzqMMz+d
gfRS8ihBBnbI7GEQ3+pBo7i5Y1IExIyljtykDgqI34gpEB0kdwoLJFbEbVf9VC8h
893aiq403Sg2T0DGz2fYsDSa9UNdt4n6CSXTrK1JWcZiXP3Hv24ytiR6wBLPOtnD
q3dz/w6Lf8OpdRum5tM9c5HMODWdWwyhdXNMU7PxwJlSW3QmA7pT6AuSpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSJPvZ7ZBK0hSai+iNM9JurkwcxMB8GA1UdIwQY
MBaAFC/inWycvDU3CgGqJoTT93Ma+UycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC1LZGJKeThOVGNLQWFvbWhOUDNjeHI1VEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xMmYxM2MtZjUxOC00MjJlLWJmNjEt
ODE2Yzg2MGMyYThmLzEvTC1LZGJKeThOVGNLQWFvbWhOUDNjeHI1VEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xMmYxM2MtZjUxOC00MjJlLWJmNjEtODE2Yzg2MGMyYThm
LzEvTC1LZGJKeThOVGNLQWFvbWhOUDNjeHI1VEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwTT4O9p
55JiParYisZaaycMPo/WP97dB9UBIF85sg+5m3uzSBkFUp9TGLbcmo3adXMii+tF
aVLc7V2qendyTsdtt6m9S+dKK2QXGxKcmmDc901b/7kvE5OBcDpG/yweq+76FJ0Z
xX19EWJW7SOgXaar/RpU/3adRwtzvp7E6oG71JNQejE9ziBB7cjAmFM9AJQwiPU8
ihoox5yVVHglXm3UqAqEd3SzaOYgf+RVKyE+JRr5ML1JI8chemuHtW73dCQfby4A
O7aLOYij+zVbFoQOnakXxNbD+5BQEbSd8bh+I71mbgllZOK8SYOPhCp+EwwWcTO1
S+85Gc1A/jDDuA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:24:29 2026 by rpki-client