Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
File:                     lWCHIpBdg1KkDKpGoGES6mpEYA4.mft (raw, json)
Hash identifier:          eXNiZ/jTVous1xwVsp49vxT0KzN8OlIN3BV5Tqalnpo=
Subject key identifier:   EF:CA:C8:85:C2:08:34:ED:93:67:7F:B6:3B:2C:75:B0:C1:30:CF:25
Authority key identifier: 95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
Certificate issuer:       /CN=95608722905d8352a40caa46a06112ea6a44600e
Certificate serial:       019FA89A0942F54DB37505E1BA93DE9DB0C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:34 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:34 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:34 +0000
Files and hashes:         1: 6gfsbp70NcwcNxJT8XMgqV4g908.asa (hash: Di3Vjzbs6+arwrS0sNW5XttvE64t8QV4IW+z0/vEuPw=)
                          2: 7z7bFp40wPTbt5RvIZtTppWl7AM.roa (hash: lwNSwOHOkunLWIvv4A5ENj1DeD3yKEj+lVowF+Ei8vY=)
                          3: KDCDR5HMfski0xwt6UzkMSAG708.roa (hash: V7yjpYjttVxBzbdwJHm85I1dbdth+qcfBSlmVeGdWlY=)
                          4: KH370sNYu21avkL8lpe4CVDI6IQ.roa (hash: DzzaFBH+1mwllU7379SPzlQjcpZBkQqIzj2ch2xa5ec=)
                          5: OI5EhOJCNnbBRSuXNvgjvNEPq1Y.roa (hash: oD26JJOT6DwdR4GxVKpP9CnRulkt+gNmlzlwVyBAeto=)
                          6: lWCHIpBdg1KkDKpGoGES6mpEYA4.crl (hash: heHasPI7VeLYV3dgZIp4aZJuDPt5TYU9FUW/9MMJhvk=)
                          7: vcJsXSmebygkiO1u98sDd5yvTS4.roa (hash: E+7qJmCAiPJjSB0MZl/CtlkcxsQXp3zBWufxUli/XlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:09:42:f5:4d:b3:75:05:e1:ba:93:de:9d:b0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95608722905d8352a40caa46a06112ea6a44600e
        Validity
            Not Before: Jul 28 12:01:34 2026 GMT
            Not After : Jul 29 12:01:34 2026 GMT
        Subject: CN=efcac885c20834ed93677fb63b2c75b0c130cf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c0:61:8e:61:53:ed:5a:35:72:85:bc:ab:f2:
                    5e:0f:91:fd:43:b2:0d:b8:c8:ee:5e:88:62:b4:e7:
                    42:da:b2:e0:e6:f0:e8:cd:43:7e:ec:38:d6:33:67:
                    8b:64:bb:3b:23:98:53:e0:86:ed:7d:bd:08:34:0c:
                    4e:96:47:42:f6:9c:7d:61:d3:fa:3b:08:ca:ea:10:
                    d4:ca:41:f3:7b:5b:57:eb:93:c4:b3:da:cf:70:51:
                    e7:69:a7:3a:94:4c:f5:44:ec:2e:68:fa:59:f5:90:
                    fa:6d:63:41:cf:4f:d7:1c:44:ae:a6:aa:45:85:db:
                    11:b2:94:82:c0:f8:98:ff:08:af:14:94:5c:87:5e:
                    3b:c5:be:08:79:6c:88:d9:5f:bc:90:15:7a:02:b4:
                    41:fd:cf:d3:de:d7:bd:bc:ed:b5:ed:9b:43:18:77:
                    e6:6a:ea:14:88:c1:de:28:5b:e5:0d:7c:90:9e:b3:
                    0e:84:5f:75:c5:75:53:80:2a:9e:b1:8a:c4:ff:36:
                    a1:58:8f:c4:5f:c7:3a:80:02:1a:a5:ad:39:70:14:
                    6c:0f:32:4c:ea:db:7a:ad:81:ef:45:62:73:08:9e:
                    21:2b:0e:08:db:1b:46:7b:f6:1a:e3:8c:fd:48:ae:
                    c2:a1:c5:60:80:28:1b:65:ba:04:7a:b0:69:7f:74:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CA:C8:85:C2:08:34:ED:93:67:7F:B6:3B:2C:75:B0:C1:30:CF:25
            X509v3 Authority Key Identifier:
                keyid:95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:25:fc:6f:ae:3f:75:76:82:5f:f7:b9:e4:ff:4c:f0:14:8f:
         d1:66:e6:16:c4:70:fd:54:a1:ac:fe:9c:ef:ee:ef:d3:2e:b0:
         d1:60:61:48:c5:74:8f:4b:ee:58:6b:cb:52:3b:af:d0:4d:c2:
         77:5e:af:b5:74:ea:0a:dc:c4:dd:6d:3b:f0:7a:66:ee:bd:0b:
         a5:18:73:41:8c:27:00:1b:77:c6:22:5d:23:b0:6b:91:21:a9:
         0b:19:e8:d1:c4:42:0f:30:c8:8e:7f:00:0c:26:10:f1:c5:86:
         ac:6e:5e:f3:ff:d5:be:83:4e:aa:30:16:13:92:f4:c4:72:61:
         74:8c:59:40:eb:cd:d8:96:ab:0a:27:89:9d:b8:a4:ac:d1:5e:
         2b:4c:3e:55:41:23:4f:45:94:99:23:48:87:23:23:4c:4d:79:
         77:55:c0:e9:07:e6:8e:39:45:ca:c6:37:c3:b8:f4:e6:df:1e:
         dd:9b:3e:17:dd:20:e2:d9:f0:7c:f6:97:1f:59:ae:05:96:7c:
         2d:1d:b0:fd:f5:da:1b:44:0e:96:92:c5:c8:b4:26:2a:fe:11:
         b4:b5:65:3f:1e:b8:81:b5:bd:fa:06:b0:3a:ad:38:6a:da:c9:
         82:97:67:9c:b8:b5:90:61:99:ac:78:db:cc:99:eb:0c:6c:c1:
         82:9f:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:36 2026 by rpki-client