Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
File:                     LyoPogODMyo_QU8FR1OgtgsluhA.mft (raw, json)
Hash identifier:          UArJXR+8g7ynHQAaon7dA7Wz/7pTo6D5oLg907otFiw=
Subject key identifier:   4A:B8:F5:2A:EF:C9:AD:82:D9:8A:E1:47:A3:D3:1E:28:8C:37:D8:7F
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019FA8D06FB8088AE6823BD88B33DC7EBA71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
Manifest number:          0842
Signing time:             Tue 28 Jul 2026 13:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:00 +0000
Files and hashes:         1: 6QujOxzf4C6K0r-hHQOFn_yfCUI.roa (hash: VpztrU2iFQ8Ah/D8jT+xPTLG0sW08bpvg3e6MmJ6Zdg=)
                          2: A5lQjMuyEwnxIDxaUmDnFfxaoks.roa (hash: P6Mc4NENcql9pqKO6/1f2kVi6ScGBPjag1XyyEN7xRE=)
                          3: CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa (hash: yl/TzXvizjcQkXaqTrcqSMtt/sGUH2HO4v5PSOx89k0=)
                          4: DlvqEbHES6ltEIxiAXhjM2CW4ec.roa (hash: Mj5DDW92tIkxs3VmT9Gs5UYbHsVDvGDo2+Bxg89LMQg=)
                          5: DwB6hCkbMaFBKRZqWfmt03tZkaQ.roa (hash: lu5eBLytjQ0/qRj8GGmMDiIsTss70m+efSZgH9kQHuY=)
                          6: E9M1Pbo6cojKNq6aCzRN9lYK2TI.roa (hash: 6xlPlwiU6/vgt77UfvKPKbZAHPmxOxzp9UBEFyHwp2U=)
                          7: IBVzEPC10N6US5KaErFSedKeI1Q.roa (hash: RU5umX0s3T/s0oLhPcgLEFjXt2aMHfj/aPPYStVkbnI=)
                          8: LyoPogODMyo_QU8FR1OgtgsluhA.crl (hash: WkdxNgrjNxySo14447G2xVo+VFVPG6ZjjOZJegclUdc=)
                          9: SX294m--1vDxMY6Pvv6-ci7dNJ4.roa (hash: bzsnnZDkBTJaiqPd5qwvFscE5qs3E0+zYHYP17Yj7CA=)
                          10: j24Xn1OVDzmRc0YHejjOlzAmgRk.roa (hash: /5EdM1LEZ2tK4zjsCtxS9n3mfLKzazy5AKKxuUfX/Lk=)
                          11: lNFX6JR33oagWwHcQSBTeat9zBY.roa (hash: peF00m3zIs2m9F1un51juc2YE8LDkrNqnwtvZ/TuqS4=)
                          12: nrx14wL0fPx4-9DshtLYIG-SPw0.asa (hash: tasi695yJoGT9axaG3Jwyukwoa6MAJVOedvjLTRox4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:6f:b8:08:8a:e6:82:3b:d8:8b:33:dc:7e:ba:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Jul 28 13:01:00 2026 GMT
            Not After : Jul 29 13:01:00 2026 GMT
        Subject: CN=4ab8f52aefc9ad82d98ae147a3d31e288c37d87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:c1:f8:81:85:02:40:bb:0c:78:28:6a:76:
                    c5:00:27:6a:95:b4:69:a7:68:2f:b4:22:d5:b0:a5:
                    7b:07:a9:35:87:5e:f6:e8:6b:9d:ee:7b:87:70:0d:
                    58:8c:8e:8d:8b:5b:60:a6:46:99:75:e5:d9:31:12:
                    bd:b5:c4:ba:03:9e:05:0d:42:81:2e:77:6b:9a:1e:
                    db:dd:7f:fc:c2:4e:31:58:00:27:1e:3e:2b:27:02:
                    54:e3:57:e8:2f:2e:7c:d8:49:59:20:7f:d2:74:ee:
                    49:42:85:c7:0e:d6:84:5a:5d:e0:33:6e:0a:e5:2c:
                    49:ff:21:9a:09:45:01:04:4f:f8:ed:69:92:aa:8f:
                    7e:ee:31:a5:19:d9:04:ae:90:ee:29:ac:5b:45:a1:
                    6c:fc:6c:2d:21:a5:8d:d3:fe:23:4c:2f:e3:0d:96:
                    e7:6f:f7:30:ab:4e:ab:7f:4e:40:2f:0a:0e:8d:4b:
                    15:b2:7d:ee:3a:76:cc:f2:d5:35:50:f7:6b:40:c2:
                    40:93:0c:e0:84:5d:af:43:6e:d1:90:54:cd:2c:09:
                    da:6d:0f:aa:f5:62:7f:19:7e:39:da:f2:bd:42:85:
                    28:91:31:96:72:2d:e8:5a:6b:2e:b5:f2:3c:37:49:
                    44:cc:2f:06:94:9c:6c:c6:14:05:54:94:6b:af:fa:
                    33:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B8:F5:2A:EF:C9:AD:82:D9:8A:E1:47:A3:D3:1E:28:8C:37:D8:7F
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c2:f4:85:ba:58:49:67:bd:09:22:f2:d4:81:1c:92:27:49:
         53:c7:a7:03:ba:f9:64:cb:89:86:42:91:c5:cf:76:6c:66:4b:
         17:98:23:22:10:f7:6d:15:e9:7a:d8:d9:f1:69:c6:bf:51:71:
         a9:2d:f2:ad:85:8f:0d:b7:e6:43:c3:9b:6d:8e:16:db:6a:07:
         59:af:cf:b1:44:40:74:18:f5:e7:b1:5d:6f:3f:2a:72:f9:08:
         05:30:35:ce:22:b7:4f:b3:22:1d:9e:54:3d:00:5e:c0:f8:d9:
         c0:a6:29:bb:c5:88:a8:c2:9c:33:29:8d:07:18:fc:ac:7e:ab:
         86:14:5e:f3:1f:64:c4:30:c3:0c:56:cf:27:bd:d4:bc:18:00:
         10:90:a7:a1:d1:46:9b:6d:5c:5b:5c:ac:ae:c0:b1:a2:2d:40:
         47:43:01:49:ea:d1:12:b3:78:75:6e:15:8a:7b:61:7a:2d:b3:
         fe:23:f7:86:f4:bf:d5:4e:22:d4:b6:28:7f:d8:96:f2:ab:e3:
         e7:d4:72:5f:51:63:68:79:20:75:00:20:32:f2:18:49:cb:32:
         54:57:c0:5e:c2:63:a0:d6:3c:2e:c1:18:40:9e:dc:c3:b4:f1:
         d7:cb:21:44:57:ca:1c:26:df:69:b5:b4:6e:f1:6f:b6:a7:79:
         d2:5f:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:34 2026 by rpki-client