Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File:                     lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier:          zrizzVIG2cbTul762Chk/qEEwb+sWAC4Fmm+y5osBNY=
Subject key identifier:   5F:4F:B1:BB:AC:10:17:04:5E:AC:22:AC:9D:1D:C9:F3:E5:15:1A:14
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer:       /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial:       019FACAD357102ADC5DC4349B20973955F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number:          1966
Signing time:             Wed 29 Jul 2026 07:01:00 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:00 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:00 +0000
Files and hashes:         1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
                          2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: TQkCzZRCQgFkyZ1HCTfPMyqeWmZtyjiSKvCmaBWSlkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:35:71:02:ad:c5:dc:43:49:b2:09:73:95:5f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
        Validity
            Not Before: Jul 29 07:01:00 2026 GMT
            Not After : Jul 30 07:01:00 2026 GMT
        Subject: CN=5f4fb1bbac1017045eac22ac9d1dc9f3e5151a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f2:a7:32:e5:66:ac:43:28:86:e8:1f:85:70:
                    8c:8c:ae:b0:19:91:d6:1d:d5:65:67:de:f9:bf:92:
                    b0:75:66:fc:57:51:73:26:2c:3f:77:b1:aa:40:46:
                    9e:8f:0e:17:d3:f5:f9:60:56:99:e3:d9:56:5d:f7:
                    e1:66:05:5f:7e:16:82:f4:02:f9:8c:33:1d:36:0f:
                    e9:0b:2a:50:10:c2:58:b4:ec:7e:d5:0c:8a:8e:5b:
                    a2:06:1b:4f:30:55:b2:e4:8d:95:fb:18:6f:af:62:
                    73:9e:b1:8e:20:b1:9d:29:1c:61:c5:f8:e0:18:a1:
                    6a:62:b0:0c:65:36:b2:89:12:a1:d9:95:19:5d:a2:
                    1a:39:43:ac:ff:ec:d9:e6:be:37:d8:a2:5b:58:95:
                    7d:96:85:d2:18:b5:d3:40:3b:85:75:66:3c:86:2c:
                    38:25:83:c1:11:03:f0:c0:53:a8:ad:2d:26:62:77:
                    44:96:51:82:a5:ae:25:95:48:c8:25:af:a8:e1:72:
                    55:32:f8:3a:4c:a9:95:b1:61:18:a2:db:0b:b5:dd:
                    da:74:79:16:bb:44:e7:b3:0e:ee:d9:6b:b1:05:df:
                    60:e3:80:7d:e1:31:bb:65:13:59:a1:67:fa:79:0d:
                    f9:49:7a:30:d5:e9:0f:7e:f7:db:aa:f3:55:08:45:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4F:B1:BB:AC:10:17:04:5E:AC:22:AC:9D:1D:C9:F3:E5:15:1A:14
            X509v3 Authority Key Identifier:
                keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:44:01:73:4b:62:65:25:88:10:66:2d:cc:6f:46:2c:cc:
         03:c9:78:32:5c:d2:b2:db:25:8b:07:26:7a:46:9e:49:46:47:
         ca:d8:39:21:85:c8:10:f1:06:38:3f:6a:29:66:07:d6:87:2d:
         e5:27:3a:3a:ed:1a:ff:88:90:e1:b5:ab:27:1c:24:52:a8:9e:
         f1:66:fc:00:bc:b6:1f:84:1f:cf:6d:14:26:88:67:2b:b7:e1:
         13:98:ad:5f:06:8b:cb:46:81:b3:3e:ff:65:94:6d:39:fa:90:
         e5:fe:5d:9b:c0:0f:1c:cf:ef:be:c6:23:ab:07:b1:c6:fe:14:
         6b:05:38:4c:08:f0:90:46:f2:20:d8:15:7d:1d:28:79:83:1f:
         a8:5f:e6:40:7d:a5:1f:42:76:6a:35:04:ba:df:4c:77:52:a3:
         4b:20:8c:b5:bd:00:cb:37:73:72:96:ca:61:fd:7b:93:ca:22:
         0a:72:7c:17:ba:2c:00:d0:20:a8:43:7d:41:58:51:00:96:cc:
         b7:88:00:57:9a:55:dc:1b:fe:5e:30:f9:33:7a:d5:d3:77:55:
         5a:d1:b7:f3:fb:b0:8b:32:87:00:66:bf:1b:c4:60:8e:3c:93:
         22:56:9d:a6:6d:8b:60:c6:0a:27:b7:d4:49:04:ec:67:42:52:
         1d:35:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:28:18 2026 by rpki-client