Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File:                     L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier:          O6bjy03qLe4fYPaVdM4CEJHbvo7+dEKs8JL4GixvXUM=
Subject key identifier:   36:E0:36:72:80:A1:09:A5:AF:DD:F6:C3:8C:42:29:F4:CD:AD:25:4B
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer:       /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial:       019FAB9A75CAB4F447A00853D11CC81D81C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number:          081B
Signing time:             Wed 29 Jul 2026 02:00:54 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:54 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:54 +0000
Files and hashes:         1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: ZJ4FAzTvB0EyicUV0SaCzyXaqqDWizHZrlbDq9jP3ZU=)
                          2: TNzdy3BwDq7Ray6Z5SvDVSbtn6s.roa (hash: 8DAMy1BHBoqCmfTfrrToTqC0+T4MaMlEUb4i3KOyJik=)
                          3: qlmNQ-9zOW868sPccu5bMWQJyWY.roa (hash: Nfg2x28YmixXjEJKT+A2Qd2F+8mKojjMLL0tVjNR434=)
                          4: zAxyQBHOCPqeciZdGoRFMMg8ONA.roa (hash: Jz7C603l954pSk4Q5Rm3+v5AOQ/o1ceSCXmyNgeMw5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:75:ca:b4:f4:47:a0:08:53:d1:1c:c8:1d:81:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
        Validity
            Not Before: Jul 29 02:00:54 2026 GMT
            Not After : Jul 30 02:00:54 2026 GMT
        Subject: CN=36e0367280a109a5afddf6c38c4229f4cdad254b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e3:9c:ee:eb:06:04:f7:12:c5:d9:ca:37:f1:
                    a7:49:50:d8:68:84:d4:06:32:a9:c8:bb:92:3f:64:
                    d1:37:70:1c:99:39:31:bf:71:c3:0a:17:85:44:53:
                    79:ee:82:74:ab:90:21:d9:e6:7d:64:be:4c:3f:d5:
                    ea:fa:1a:e1:fd:85:8b:23:37:d2:3d:67:33:5f:88:
                    45:5b:02:ba:a1:0b:cc:3a:b0:f2:1e:0d:a0:15:a5:
                    ef:82:db:af:79:e1:b6:9b:23:d0:34:8b:b0:cd:5a:
                    e3:90:b7:2d:67:1c:0e:cc:f3:b9:7b:44:c8:56:7c:
                    c4:53:2c:bd:9b:e1:7c:e8:e4:c7:64:df:2e:a7:2c:
                    93:b5:ac:df:9d:e1:09:f6:d9:2d:39:15:1c:02:3d:
                    5d:00:e5:ad:f6:31:95:4e:b3:e1:3a:26:df:02:73:
                    61:e9:b6:06:5b:32:97:23:7f:c7:87:c1:dd:fd:2c:
                    b6:7c:7a:11:fb:12:63:20:8b:e1:c4:14:c8:86:7c:
                    03:6e:1b:30:f5:3a:e6:7e:10:9d:83:51:a3:10:c5:
                    40:0d:3f:b6:cb:9a:68:79:19:c3:32:14:f8:42:61:
                    e2:be:33:26:bb:b4:eb:a7:9b:89:6c:17:82:f6:fa:
                    69:f5:48:69:b7:e8:0b:91:a8:55:25:29:58:e3:61:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E0:36:72:80:A1:09:A5:AF:DD:F6:C3:8C:42:29:F4:CD:AD:25:4B
            X509v3 Authority Key Identifier:
                keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ad:11:6e:c0:68:04:e5:e2:5c:fb:95:26:91:8c:cd:b0:1f:
         c9:e1:c2:ab:2c:21:7f:eb:61:14:b2:c7:0b:24:1b:d8:ff:66:
         d7:9f:e6:70:79:38:4c:30:26:84:c7:bd:0c:86:29:54:0f:a5:
         70:e0:22:4f:ed:ed:b2:86:dd:dc:23:e7:64:7d:88:98:28:04:
         d3:19:bf:16:84:21:66:dd:34:fa:1b:dd:69:4f:ea:f1:1a:14:
         50:fe:96:99:9a:85:98:17:9a:be:39:c8:11:54:71:8e:25:97:
         00:b3:c4:cd:6f:ee:00:06:71:c7:7f:c8:b1:e1:37:03:df:45:
         60:39:61:fe:02:ae:da:01:c6:48:7b:14:34:db:81:7c:ad:34:
         9e:0d:b6:c7:75:c3:7e:2f:37:4a:14:d2:12:39:50:5d:6a:ff:
         12:83:f4:98:7e:39:77:7d:89:f3:ee:5c:3c:de:4e:da:01:88:
         c2:84:6e:bf:90:4e:aa:1e:c4:09:47:54:c8:76:63:92:46:a7:
         8e:fb:8b:ef:4f:f2:b2:e0:0d:de:1a:c9:a0:b9:2b:46:db:dc:
         7b:82:64:60:64:e4:b7:70:b3:93:ce:21:44:d6:83:92:77:9c:
         54:3a:72:03:2c:30:25:e3:f5:b1:4d:4b:e0:44:27:b4:c8:3b:
         57:77:bc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:51 2026 by rpki-client