Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File:                     lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier:          LMlFUqz6RzKJmb/JPWCU7pBODJzmYa323Ax7K9Ppscs=
Subject key identifier:   92:F3:86:3C:F2:E5:DA:97:AC:E1:40:D6:00:31:05:6F:0E:20:05:BC
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer:       /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial:       019FA9AC6B6D98A4EBD0BC9CA190D67BB276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number:          01C5
Signing time:             Tue 28 Jul 2026 17:01:16 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:16 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:16 +0000
Files and hashes:         1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
                          2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: 9uUWBqPXyrh33ZYWpqXqlKYR81QqRN/lVWBaalCY9J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:6b:6d:98:a4:eb:d0:bc:9c:a1:90:d6:7b:b2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
        Validity
            Not Before: Jul 28 17:01:16 2026 GMT
            Not After : Jul 29 17:01:16 2026 GMT
        Subject: CN=92f3863cf2e5da97ace140d60031056f0e2005bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d4:44:7b:e9:5d:9b:33:fd:5a:aa:a3:cd:36:
                    64:51:bc:46:66:ba:d0:7e:97:38:63:93:a0:f3:bd:
                    69:f0:e2:6d:61:10:1d:8d:d9:b4:6b:b4:6a:c8:ff:
                    2c:23:18:51:8c:29:3e:aa:ce:5e:bc:14:0f:e0:76:
                    f6:ae:17:78:54:41:8b:3e:86:ee:e0:16:61:00:cb:
                    b2:76:d2:26:67:0c:0f:24:57:66:ed:6a:00:d8:42:
                    5c:74:28:d7:fe:ec:9c:ea:8d:e4:70:65:0e:a7:5a:
                    6b:1e:fb:7e:ff:e4:6f:95:d9:cd:7b:37:de:63:1d:
                    da:57:b8:17:a7:cb:92:8f:b7:5c:2e:c7:d2:dc:e0:
                    47:3c:f7:db:75:14:9c:b9:52:17:5f:7d:22:46:10:
                    41:be:f9:ba:90:47:44:54:5d:42:ce:dd:c0:31:d1:
                    5a:aa:78:c6:81:77:b9:e0:a2:35:28:4b:30:cc:69:
                    ff:76:40:11:4d:c5:60:55:3f:4f:2c:79:ec:41:d2:
                    99:72:25:aa:08:94:67:c7:48:d3:ce:3a:f6:0e:9d:
                    92:21:53:4e:f4:ef:55:25:48:40:0d:55:92:cc:56:
                    57:f0:2a:ff:59:da:a3:65:26:aa:34:12:cb:14:77:
                    3d:47:a8:b5:61:b5:66:ae:17:a0:71:0a:20:5d:ce:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F3:86:3C:F2:E5:DA:97:AC:E1:40:D6:00:31:05:6F:0E:20:05:BC
            X509v3 Authority Key Identifier:
                keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:22:54:94:07:8f:f2:0b:9d:52:99:96:76:89:eb:58:98:6d:
         82:64:7b:e6:3f:b3:ca:89:e7:46:66:f3:07:40:f9:b7:59:75:
         a7:46:71:d7:a7:74:03:ed:a3:85:b3:2c:87:2f:15:fc:e4:29:
         5e:73:55:49:7c:24:47:85:31:bb:e0:d2:bd:b2:c8:07:7d:46:
         81:78:1a:bf:78:3e:8f:4c:e0:d6:a0:75:34:69:02:67:09:df:
         f4:46:b9:70:19:df:56:f0:00:a3:5f:ef:d3:b6:4d:ba:23:dd:
         0c:e5:25:16:da:12:6e:d0:bf:a2:a2:7a:16:1a:22:b4:a7:8b:
         9b:dc:cf:d8:6c:7a:6e:e0:7b:b2:19:80:83:3d:22:5f:46:16:
         5f:e6:6f:ca:15:cc:08:be:2d:e9:52:4b:6d:55:1f:72:fd:78:
         a0:5c:ff:fd:28:9d:b5:7f:33:f3:3b:4c:b5:fa:13:36:0e:e6:
         74:59:31:7a:a1:1c:1e:fb:7b:3a:72:d4:d5:52:7e:b1:f1:2f:
         c1:b4:23:42:14:78:b2:59:fd:ac:9d:95:72:6d:64:1c:13:f4:
         d5:41:7b:42:db:04:2f:c7:0d:7b:6a:ad:b9:0d:19:a7:d4:47:
         cb:79:4f:df:85:b3:93:d2:31:b9:46:3c:78:0d:68:6b:5c:5f:
         62:3f:4e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:49:07 2026 by rpki-client