Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          hLb5pcuTBw2uFm97n9O9lF6HHf9XslBu0b3iW6M+NgU=
Subject key identifier:   3A:97:80:9C:2A:47:8E:22:85:2E:0C:55:55:FC:35:75:1D:B0:C8:71
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       019FAC084D8B977B468C6AFAC62833374460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          0C4C
Signing time:             Wed 29 Jul 2026 04:00:53 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:53 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:53 +0000
Files and hashes:         1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: JlNsPJsrUmlOF6W4fWS4oKA3vu7DfH5TRPDypClt/hU=)
                          2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:4d:8b:97:7b:46:8c:6a:fa:c6:28:33:37:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: Jul 29 04:00:53 2026 GMT
            Not After : Jul 30 04:00:53 2026 GMT
        Subject: CN=3a97809c2a478e22852e0c5555fc35751db0c871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:f4:69:84:a8:8e:8e:d6:1b:3d:db:e1:42:
                    d8:3e:bb:fd:3c:c8:1e:e4:6d:eb:5e:d0:ec:ca:96:
                    b8:ec:81:b8:46:de:73:f9:93:bd:c3:b0:50:b4:7d:
                    c0:4b:13:ae:05:de:8b:97:cd:e7:4d:32:36:0e:58:
                    dd:7d:3a:4e:ea:af:cf:34:5b:c1:18:56:22:d4:63:
                    fe:68:48:48:94:f9:be:26:0d:bd:99:fc:95:51:ac:
                    ef:c1:cf:6d:00:06:f3:74:32:2f:18:c2:95:b3:68:
                    bd:35:84:0a:aa:0d:aa:1e:2c:b0:ae:78:ff:df:fd:
                    e4:7e:5e:1f:ee:0c:a4:d7:35:78:92:19:ab:8c:84:
                    e2:22:df:32:e8:f3:9f:19:f3:88:7b:94:91:a3:de:
                    cc:78:dc:cb:9c:ad:84:d3:b5:39:1c:ff:f9:50:bc:
                    e8:1f:2d:78:8d:a9:34:2c:fe:56:08:84:08:e3:97:
                    15:3e:5e:d6:7d:73:c2:0a:08:dc:3b:b7:a7:96:b7:
                    be:95:11:e5:3b:59:37:98:c7:5e:96:08:da:81:54:
                    65:8c:96:9c:30:f1:99:18:39:cb:66:68:5e:1a:69:
                    22:c7:f1:ef:77:df:5c:99:51:ba:b5:0c:c5:8c:e6:
                    99:f4:5f:b7:36:bf:84:98:83:0b:42:76:b0:a2:80:
                    4c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:97:80:9C:2A:47:8E:22:85:2E:0C:55:55:FC:35:75:1D:B0:C8:71
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:2f:c2:0e:68:31:af:0b:89:6f:8c:0d:66:a2:71:34:8f:
         19:aa:dc:25:a2:25:be:a9:1b:74:87:cb:e5:67:14:f6:ab:7f:
         85:79:7e:6a:b7:2c:d4:c5:55:19:0b:fb:7e:22:08:58:b0:3d:
         d4:1f:98:93:7f:ed:47:8d:68:34:be:a2:f6:57:c5:78:d8:89:
         c0:c2:63:a2:1a:6a:21:ea:56:e9:28:64:77:48:df:26:46:6b:
         7c:37:b5:fa:1b:0d:bd:ab:08:54:5d:69:b3:09:a2:82:6e:8f:
         5d:32:18:fe:1f:41:12:db:77:51:8a:12:58:42:dc:27:b5:87:
         1f:e1:f8:5f:9c:67:0e:ce:21:1c:2b:d6:ea:53:08:3e:d5:0d:
         70:2f:5d:11:05:57:f6:94:04:03:80:23:e7:d0:19:3e:3a:24:
         2a:42:86:3a:99:ed:64:d9:6b:1b:a9:0d:2e:5e:00:5e:8c:e9:
         8a:9b:87:45:62:3c:14:73:76:9c:ad:71:b2:bc:70:a9:98:13:
         01:fa:de:ba:8b:d0:47:dc:cf:ca:b4:6b:82:da:5f:49:26:4d:
         fa:91:ca:b5:3b:44:5f:8b:a8:a9:65:d1:b7:72:ae:09:f1:80:
         96:d7:96:74:d0:3c:f1:bc:86:d5:af:11:8e:7d:5e:3b:50:06:
         00:ca:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:41 2026 by rpki-client