Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File:                     _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier:          N3LwlOmXWsZkC7ht7KLIOsOQIgACmGJPOI6GXTV1dts=
Subject key identifier:   4E:8C:80:57:1E:92:66:B3:2F:85:73:BF:D4:96:C6:68:F5:1D:61:B4
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer:       /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial:       019FADC00C4B2348D94C285FDE89C41058E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 12:01:12 +0000
Manifest this update:     Wed 29 Jul 2026 12:01:12 +0000
Manifest next update:     Thu 30 Jul 2026 12:01:12 +0000
Files and hashes:         1: Ut1UIZXtvGvA8jqfjKx-zoSsSmk.roa (hash: 6WpPy4Xn98zqM430NxCO708hZN1RtW/qmGYYPyMXR+U=)
                          2: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: PkSYbWzRT7S3lozvCrHEaNMLcTe0KZr2WP/ZQZpmLo8=)
                          3: mgP5YZ0JeZUMwTrpIOlo1p2fUnw.roa (hash: cQXWsVz483MH+u8vJNX4kMADAIEqmSIqmpJYaQ+Q26k=)
                          4: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (hash: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:c0:0c:4b:23:48:d9:4c:28:5f:de:89:c4:10:58:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
        Validity
            Not Before: Jul 29 12:01:12 2026 GMT
            Not After : Jul 30 12:01:12 2026 GMT
        Subject: CN=4e8c80571e9266b32f8573bfd496c668f51d61b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:57:34:53:af:77:a8:57:c9:5f:bb:32:12:
                    88:24:38:60:52:b1:c2:f8:b9:5d:6d:06:3a:96:5e:
                    56:ce:0f:7d:a7:73:0b:54:5a:34:46:f6:08:55:88:
                    2f:b1:16:0d:4e:29:9f:a0:91:e6:a8:e7:71:7b:e6:
                    c6:cb:0e:5d:cf:08:3c:90:6d:67:93:7d:9b:ff:c6:
                    72:1a:6f:89:e7:89:3a:e1:4c:cd:60:98:68:28:ba:
                    28:c7:a7:ff:33:2b:4f:bb:fd:b1:39:f5:7a:21:34:
                    87:71:ea:af:bd:3c:88:07:5f:1a:d6:7b:be:3d:b6:
                    ce:da:06:03:21:19:5e:6a:d1:a2:04:f9:f0:61:73:
                    97:4c:02:db:7c:a0:6e:11:f0:60:1c:1c:48:4d:1b:
                    58:ea:0c:50:61:9f:9c:f9:c0:e6:5b:be:6f:ec:78:
                    20:e9:5e:42:a9:f7:70:b2:b3:37:1c:d1:28:17:50:
                    b2:b9:1a:bd:7a:39:29:6b:9f:21:07:98:09:6a:4f:
                    4c:6a:70:49:56:08:25:a9:e0:51:7a:08:60:cc:fa:
                    5a:b5:bd:ec:30:e8:3d:5e:79:b6:ed:66:22:3b:bd:
                    58:ca:b2:b3:99:f8:4a:db:e9:cd:42:58:a3:c8:dc:
                    b4:15:4f:29:cf:3c:73:24:95:f8:dc:fd:28:3a:82:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8C:80:57:1E:92:66:B3:2F:85:73:BF:D4:96:C6:68:F5:1D:61:B4
            X509v3 Authority Key Identifier:
                keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ea:a7:d6:0e:d1:df:aa:7c:a2:90:8e:8e:03:53:7d:5a:ba:
         fe:0b:1d:95:f7:7b:15:67:b1:c2:9a:b6:47:81:4b:5c:01:2f:
         9b:18:55:46:14:cd:95:7a:e4:c4:a1:43:1a:51:ea:38:b0:6d:
         29:c5:7a:b2:4a:0b:e0:58:e4:31:0d:77:2e:16:56:f7:b3:00:
         49:a6:6b:46:ec:53:a8:c3:10:c2:57:c1:89:52:c4:6b:d4:38:
         d2:88:a7:80:84:87:62:ef:80:a8:70:33:cd:0d:14:a2:b2:c0:
         92:a9:3f:de:c2:ec:fa:c6:14:25:fc:09:2b:12:8e:db:40:a3:
         ff:c2:8c:94:db:fb:e3:23:bd:26:4a:42:cf:5d:ea:8a:c4:62:
         8f:31:3a:8e:3e:58:ae:90:63:1a:39:62:03:da:a3:bd:4a:cf:
         53:06:7c:51:b6:6f:73:42:1e:56:2d:d8:e3:60:43:6b:b7:b4:
         05:75:4a:77:26:ba:c6:c7:8e:17:ba:af:2f:5b:b7:9a:0d:2e:
         26:f3:b3:a0:65:89:0d:ae:e0:46:24:af:a9:15:b0:4d:8e:bc:
         10:ef:ec:31:dc:bf:03:a5:30:43:8d:eb:74:83:76:a6:14:54:
         43:af:da:40:68:09:0b:eb:77:2e:66:21:5a:f8:d0:88:48:f3:
         fa:53:2b:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+twAxLI0jZTChf3onEEFjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3
MDJmNGEwHhcNMjYwNzI5MTIwMTEyWhcNMjYwNzMwMTIwMTEyWjAzMTEwLwYDVQQD
Eyg0ZThjODA1NzFlOTI2NmIzMmY4NTczYmZkNDk2YzY2OGY1MWQ2MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucJXNFOvd6hXyV+7MhKIJDhgUrHC
+LldbQY6ll5Wzg99p3MLVFo0RvYIVYgvsRYNTimfoJHmqOdxe+bGyw5dzwg8kG1n
k32b/8ZyGm+J54k64UzNYJhoKLoox6f/MytPu/2xOfV6ITSHceqvvTyIB18a1nu+
PbbO2gYDIRleatGiBPnwYXOXTALbfKBuEfBgHBxITRtY6gxQYZ+c+cDmW75v7Hgg
6V5CqfdwsrM3HNEoF1CyuRq9ejkpa58hB5gJak9ManBJVgglqeBReghgzPpatb3s
MOg9Xnm27WYiO71YyrKzmfhK2+nNQlijyNy0FU8pzzxzJJX43P0oOoJC9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6MgFcekmazL4Vzv9SWxmj1HWG0MB8GA1UdIwQY
MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt
MmM0OGNiMjk4NjQ2LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2
LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeqn1g7R
36p8opCOjgNTfVq6/gsdlfd7FWexwpq2R4FLXAEvmxhVRhTNlXrkxKFDGlHqOLBt
KcV6skoL4FjkMQ13LhZW97MASaZrRuxTqMMQwlfBiVLEa9Q40oingISHYu+AqHAz
zQ0UorLAkqk/3sLs+sYUJfwJKxKO20Cj/8KMlNv74yO9JkpCz13qisRijzE6jj5Y
rpBjGjliA9qjvUrPUwZ8UbZvc0IeVi3Y42BDa7e0BXVKdya6xseOF7qvL1u3mg0u
JvOzoGWJDa7gRiSvqRWwTY68EO/sMdy/A6UwQ43rdIN2phRUQ6/aQGgJC+t3LmYh
WvjQiEjz+lMrvw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:17 2026 by rpki-client