Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
File:                     LRVM60zslBwgUHpma-ZNiFHEsIY.mft (raw, json)
Hash identifier:          Aj4ZkWIt8QM8oE2lRyTDdnl2i2HPKQ11mx0A0sQs3DY=
Subject key identifier:   EC:FA:DB:27:9F:0A:00:81:E2:52:B5:75:81:3E:8B:AF:1D:6F:55:99
Authority key identifier: 2D:15:4C:EB:4C:EC:94:1C:20:50:7A:66:6B:E6:4D:88:51:C4:B0:86
Certificate issuer:       /CN=2d154ceb4cec941c20507a666be64d8851c4b086
Certificate serial:       019FAE653242839FC17012DD5B9C731AB743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
Manifest number:          4F
Signing time:             Wed 29 Jul 2026 15:01:35 +0000
Manifest this update:     Wed 29 Jul 2026 15:01:35 +0000
Manifest next update:     Thu 30 Jul 2026 15:01:35 +0000
Files and hashes:         1: K5_GAK6BtBGzPBmgtgBbHt3Ot6c.roa (hash: MarGqFt+Uv23NQPK5A+4/z+6RD4mCPWX9m3BUAFWy0w=)
                          2: LRVM60zslBwgUHpma-ZNiFHEsIY.crl (hash: JGLEBHP6+RwQFnkYV29qN0IfwweQoYBt/DxHt4b9/LA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ae:65:32:42:83:9f:c1:70:12:dd:5b:9c:73:1a:b7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d154ceb4cec941c20507a666be64d8851c4b086
        Validity
            Not Before: Jul 29 15:01:35 2026 GMT
            Not After : Jul 30 15:01:35 2026 GMT
        Subject: CN=ecfadb279f0a0081e252b575813e8baf1d6f5599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c9:58:84:e2:b2:04:44:ab:0a:e0:a2:98:54:
                    67:fc:5d:0e:e2:ef:76:88:23:d0:b3:fe:ef:a3:a3:
                    50:96:e4:f2:be:a5:94:16:de:8c:66:db:45:5f:3f:
                    c9:c8:e4:e9:80:6d:73:ab:f4:4a:80:f5:79:e2:57:
                    c6:fe:25:7c:e7:ac:a4:d8:62:48:5b:4b:77:99:63:
                    dc:c2:8c:0a:43:95:ec:81:1b:8b:e0:c9:5c:01:92:
                    76:aa:59:cb:3a:d8:79:c0:56:ee:19:61:e8:ec:04:
                    91:c5:3b:f3:d2:1e:2a:51:c1:1c:b9:da:97:bc:44:
                    d4:9f:13:f6:a3:a6:de:fd:e8:d5:14:05:1f:f6:d4:
                    84:94:53:b6:c9:61:8b:79:cb:cf:99:e6:1e:51:ba:
                    c5:fc:20:cb:b9:b9:5a:b2:05:8d:ed:f1:a9:ca:ac:
                    01:d4:87:13:d6:be:f3:d8:be:a1:4b:e1:a2:1c:15:
                    2c:c3:9c:fc:0d:97:00:2d:f9:ba:04:f9:1a:bf:30:
                    54:15:ec:a0:3c:39:36:7a:35:1c:d1:33:a3:b7:6d:
                    34:9e:50:5e:fd:6f:89:9a:74:a0:d2:ba:3a:5e:54:
                    f6:63:cd:23:62:43:a8:1c:48:26:84:1f:27:9a:01:
                    ad:89:36:86:fb:9d:ab:18:03:35:9d:64:01:67:3d:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FA:DB:27:9F:0A:00:81:E2:52:B5:75:81:3E:8B:AF:1D:6F:55:99
            X509v3 Authority Key Identifier:
                keyid:2D:15:4C:EB:4C:EC:94:1C:20:50:7A:66:6B:E6:4D:88:51:C4:B0:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:3e:95:4e:ac:18:65:c8:a6:e1:e6:b7:6f:b3:31:95:0c:
         52:f2:2d:cb:0f:08:79:17:a6:fd:00:b4:19:7c:72:c1:a6:f7:
         a1:32:30:37:02:be:56:37:5c:9a:bf:95:2e:80:8e:9f:28:3a:
         00:b6:03:b1:e0:ea:ea:6c:c9:e4:50:2f:fd:97:89:8c:6b:12:
         80:f9:18:47:e3:73:94:6c:a8:b4:0f:18:b8:99:93:2b:b8:00:
         db:05:7b:e3:84:99:8e:e1:2a:90:19:d5:fa:74:35:d2:42:a4:
         1c:7b:96:04:23:89:dd:4e:25:d5:cb:71:12:a9:70:00:6a:6e:
         d7:0e:c7:ff:ba:c1:72:f6:cc:25:f1:3d:33:b8:c2:b3:2d:e8:
         79:53:f3:f5:bc:12:b0:3b:1e:2a:eb:1b:54:64:06:83:92:b9:
         e4:85:03:d5:20:bb:32:91:55:0b:dc:3e:7e:3b:b2:d9:41:e1:
         f1:fc:5e:59:0b:1b:ad:94:88:57:88:7a:54:e2:f7:af:66:f9:
         b6:7a:9d:47:c8:52:3d:9e:c3:35:22:70:9a:d4:4e:13:1b:b8:
         c5:32:40:32:d7:0c:57:71:80:4d:db:57:6e:92:07:e4:19:af:
         81:04:80:fe:55:da:f1:fa:d4:00:24:96:b8:47:e4:81:da:cd:
         2f:1a:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:58:31 2026 by rpki-client