Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File:                     LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier:          IEpJU04jhRDN61RHZC5dVdq7tczLFGTX+T349Pqaozk=
Subject key identifier:   B4:39:09:E2:51:14:78:EC:AA:73:D1:78:33:06:D2:07:96:99:2C:5D
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       019FAA882FBBC11D1A4B22DA65B6E6B70802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number:          0A8B
Signing time:             Tue 28 Jul 2026 21:01:19 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:19 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:19 +0000
Files and hashes:         1: 99amBODsi9s5b9k8-QBJkKF-3q4.roa (hash: OHHvjBhCrGH4FeeziC6XYn1JSgPeAHm7eeCU0qJDW20=)
                          2: EPLdVGqgndROjM1h4IO_FWuwnaY.roa (hash: /YB21bOG3+IaQBnf7/CbNsMYZ3z/ogc3ZIoAgo5ItaU=)
                          3: KNn_2PtjJ9az9kgHYbQJzI1nyJ0.roa (hash: YhlgK2Gpf5+1ITN07EOB0hCxCRClr+jKp9E/HLwGsdE=)
                          4: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: lrcOb62i+bF7L/duXW8AdAhlii/Vd7Zjy+y6xC3Uq2w=)
                          5: fbal2Br98lSXtg0RnGPPTjowGa0.roa (hash: RIojxTuuDh3dUT1tXWggbfWitD+sBxAZGS6Rfs/+xC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:2f:bb:c1:1d:1a:4b:22:da:65:b6:e6:b7:08:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Jul 28 21:01:19 2026 GMT
            Not After : Jul 29 21:01:19 2026 GMT
        Subject: CN=b43909e2511478ecaa73d1783306d20796992c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:3c:f5:66:6e:88:e5:d7:d7:65:7f:bf:a1:
                    bb:2e:b3:87:fe:e2:c0:b8:0e:43:3c:59:68:b1:b4:
                    5c:2c:3a:85:d2:b0:e3:b8:02:a3:5f:5d:89:ee:37:
                    6e:59:d7:72:db:38:5d:92:46:1c:6c:7d:45:89:2d:
                    da:b4:6d:5a:21:a4:b6:de:1f:56:54:92:de:8f:15:
                    03:4d:9f:7f:6e:94:44:f7:c3:15:3f:ed:92:1e:82:
                    6e:c6:80:ed:25:b0:83:82:74:c2:71:ca:70:dd:12:
                    2d:b2:83:ab:83:00:12:de:ab:83:9a:cd:d5:a9:ee:
                    07:46:49:8a:88:00:18:1f:b2:ec:cb:db:88:9f:f7:
                    4f:99:63:87:12:b4:7c:e9:b2:d1:f7:f3:02:87:30:
                    ae:4d:75:99:df:75:41:ac:03:56:9a:77:35:52:10:
                    ee:d4:e3:46:2f:b5:68:cc:a8:2d:9c:16:8e:d5:78:
                    50:11:76:7d:5a:22:ea:a1:30:29:d9:c0:f9:55:9a:
                    6b:ed:9f:a6:72:30:1c:4c:56:69:4a:a5:07:bb:bd:
                    41:15:26:c2:6d:aa:44:7e:f2:b6:6a:f2:68:c9:9e:
                    56:da:da:0b:b4:94:ca:d5:d1:2a:f7:88:86:f8:ba:
                    bf:dd:d3:d4:28:11:6c:31:11:98:fc:97:29:43:39:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:39:09:E2:51:14:78:EC:AA:73:D1:78:33:06:D2:07:96:99:2C:5D
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b1:b5:11:21:cb:42:8f:8f:87:09:76:3a:fa:83:7d:62:41:
         17:b7:07:ae:b2:01:02:82:6f:d3:46:b9:84:4e:ce:46:13:bf:
         95:63:4d:5a:74:c8:db:6f:ee:b2:ab:a7:48:ff:b7:e1:73:3f:
         68:ed:a8:de:02:9b:87:e2:38:d5:df:6b:c7:1f:17:dd:05:52:
         87:99:4f:2e:1f:7c:71:aa:0a:da:2f:40:55:f6:97:34:7f:4e:
         e0:b5:38:49:aa:31:71:d3:96:0e:65:5a:f9:06:9d:31:fa:c5:
         3d:55:45:51:68:3e:e2:dc:ff:bd:30:8a:1d:90:fc:de:67:45:
         c3:b0:a6:bf:63:28:a5:68:09:e3:ef:04:c0:fd:95:15:20:c9:
         36:0a:c4:b9:1d:97:85:81:6e:68:35:61:78:9b:17:a8:bc:f4:
         a2:42:cb:f1:7c:b7:43:6c:7e:6a:23:52:52:c8:68:c2:22:b6:
         06:a9:12:30:de:15:03:00:99:6b:6d:8e:ce:4b:85:b9:9e:8d:
         73:18:e7:6d:e0:65:82:b0:d3:8f:9d:e1:1e:2e:fd:48:ea:2a:
         65:86:f9:88:82:01:f9:07:df:b1:97:1f:b5:dc:8d:e4:d8:06:
         c4:35:b8:8e:58:d1:48:fc:11:08:29:80:be:b7:85:3a:38:e3:
         68:49:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:28 2026 by rpki-client