Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File:                     lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier:          k0Z9afG4sK3oNCk7l4EnrSLECXwS+AOIAxJZoDYUX+E=
Subject key identifier:   1D:77:AA:FB:1B:43:18:B7:14:50:FE:4F:61:C3:67:F3:71:00:15:99
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer:       /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial:       019FA93DB0A4ADFA134DE7D705F160BE2BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number:          1A07
Signing time:             Tue 28 Jul 2026 15:00:19 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:19 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:19 +0000
Files and hashes:         1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
                          2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=)
                          3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=)
                          4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
                          5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
                          6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=)
                          7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=)
                          8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=)
                          9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=)
                          10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=)
                          11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
                          12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
                          13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=)
                          14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=)
                          15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: jD5V+1nWtZ3zpWe7NK1Nq+haOw++vjP6plB16W1TU9g=)
                          16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
                          17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=)
                          18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=)
                          19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=)
                          20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:b0:a4:ad:fa:13:4d:e7:d7:05:f1:60:be:2b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
        Validity
            Not Before: Jul 28 15:00:19 2026 GMT
            Not After : Jul 29 15:00:19 2026 GMT
        Subject: CN=1d77aafb1b4318b71450fe4f61c367f371001599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:91:fe:61:2d:40:9c:aa:69:eb:7c:e0:96:
                    12:d4:89:ff:24:c6:9e:4f:3b:60:96:60:18:77:ac:
                    b2:fa:f6:c5:b4:bd:d3:2c:a8:4a:32:18:18:65:99:
                    09:c2:9a:c5:7b:da:3f:fc:14:6f:50:aa:4b:ff:96:
                    c3:e6:d9:71:90:d7:64:be:2a:32:d6:21:42:21:80:
                    b3:99:e3:05:e3:26:cb:0f:8b:2e:1a:c6:d4:32:64:
                    c3:95:67:dc:14:e3:52:70:37:27:6d:e2:5c:ac:d9:
                    93:5d:b6:56:a3:55:26:2d:41:69:c6:4b:a0:a1:9e:
                    db:94:6b:c5:66:32:30:8a:73:c3:fa:f0:40:6f:c3:
                    a9:d5:cd:50:4d:12:09:54:76:46:92:53:4a:f0:17:
                    60:e1:b9:e5:ed:2f:35:32:43:8f:20:4a:fc:89:0b:
                    51:dd:f8:79:b2:12:e7:c9:8f:f9:ac:72:40:52:0a:
                    37:5c:23:c5:cd:25:4e:99:b2:40:a6:c6:ac:e6:c5:
                    8d:32:d6:f5:b0:44:a0:2a:c5:9e:a0:9c:b8:c9:c3:
                    1a:23:09:fd:fd:3f:df:1e:a8:eb:d6:80:92:2f:09:
                    24:17:2a:0e:06:94:75:af:eb:4d:f7:26:18:69:b7:
                    6a:db:07:d4:1f:3e:92:3c:85:a3:d0:fa:fe:3b:28:
                    b0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:77:AA:FB:1B:43:18:B7:14:50:FE:4F:61:C3:67:F3:71:00:15:99
            X509v3 Authority Key Identifier:
                keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:71:64:01:ed:d6:35:1f:70:b9:74:10:82:68:02:c4:69:0c:
         fa:4e:b3:18:00:4f:b3:b2:89:01:83:90:6d:96:a8:c2:36:ce:
         22:5d:33:68:77:f5:a1:ab:13:a6:ab:a3:43:b5:bd:93:33:e3:
         0e:20:5b:b9:1a:b9:d5:d0:c3:bb:7a:48:16:f6:ba:2a:69:84:
         31:22:ca:65:5c:2c:8d:49:91:8a:87:84:ce:e9:c7:f0:86:a6:
         b7:17:67:5c:ea:a8:45:0e:db:e5:59:ed:51:df:e2:d5:bd:9f:
         e9:23:e1:79:84:38:57:c0:aa:ae:65:07:b6:98:1f:97:9d:38:
         7a:f4:8b:be:df:70:be:f3:f8:39:d3:3b:20:ea:8b:8a:e1:59:
         2e:89:16:37:92:44:3a:e6:70:97:d5:fc:2b:6f:ce:18:2a:f6:
         32:5c:d6:18:93:ae:8a:2e:4c:a3:2b:94:bb:3d:6b:1e:ea:b0:
         79:a1:aa:ef:0b:22:46:6a:b3:07:4d:e8:7d:f8:2d:85:15:f6:
         8c:20:8b:f7:6f:c9:be:51:fa:b5:4d:81:bb:d7:cc:ca:e6:37:
         9e:00:02:ba:0c:d4:cf:62:00:3c:27:9d:60:08:cd:52:de:76:
         5b:9f:e7:a1:b7:96:56:fa:95:39:b8:5c:a2:e0:0f:7c:65:99:
         69:80:a6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:00 2026 by rpki-client