Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft
File:                     LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft (raw, json)
Hash identifier:          MKhEneWvEFj0h0yB21Fm5yo855LSgcqyYARTNafN44g=
Subject key identifier:   BD:F3:3C:13:96:9E:35:CD:ED:EA:7E:EB:B6:28:9B:D3:73:CE:09:DC
Authority key identifier: 2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37
Certificate issuer:       /CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
Certificate serial:       019FA899A65FF72C8FAEAE7AB6C808D1DA95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:09 +0000
Files and hashes:         1: 3URcR2VAq9YwUG_RdREcOw-9ln4.roa (hash: S5nWhW1lsV8LUmD4DKpYZGcwm/m354NfNJ30ZDEaIUk=)
                          2: LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl (hash: ZoRNQNbdKqr9t11xVFQZIesjjMlCj+msr3+KzugZkqo=)
                          3: d7lqAUzGr5Jc883I2HWBv_nEhIM.roa (hash: BNKZdUryXFyz1omY36pPU2N0lM3FeOgjtMztkteKae8=)
                          4: lHJI6jEPkBn01XkO68qpjaIbBp4.roa (hash: Wr8iSQaD7B+SmF7n+aUj/i7OLCYDdgcmxhreHklOPnw=)
                          5: pFTHW4-Bucx-lpPTlrtl5Wfgp1I.roa (hash: D/fcF4IEFWMJQvt8UmINawGoN8hFrDrMCVBxLhfIb1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:a6:5f:f7:2c:8f:ae:ae:7a:b6:c8:08:d1:da:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
        Validity
            Not Before: Jul 28 12:01:09 2026 GMT
            Not After : Jul 29 12:01:09 2026 GMT
        Subject: CN=bdf33c13969e35cdedea7eebb6289bd373ce09dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:31:7a:e1:3b:71:7f:a7:04:1b:a1:aa:0c:
                    d8:e5:1d:ac:c5:3d:99:f8:79:ab:c8:14:dd:e6:f8:
                    23:64:f1:4b:45:b1:62:4e:5f:ed:47:29:44:97:f7:
                    96:4f:95:1a:21:7d:46:82:07:e0:c3:22:7d:4d:3f:
                    1e:33:3d:9b:8a:d3:f8:24:47:1b:a8:7b:55:6b:53:
                    d5:df:45:92:8c:6d:2e:2a:30:4c:1d:02:84:d6:dc:
                    48:8e:05:c4:73:f5:06:48:3f:11:57:ba:25:08:d0:
                    ee:af:85:d5:54:a9:5b:ea:2b:b3:e1:79:db:6f:62:
                    47:96:0c:10:30:f6:19:0a:86:ca:35:0e:39:c3:f4:
                    6e:32:74:d5:3f:a7:b6:b8:35:0e:1d:89:2b:db:9d:
                    48:34:69:69:1d:49:21:f2:b1:16:01:2c:9a:dd:f9:
                    06:50:72:ef:98:49:11:26:51:4d:3b:54:9c:77:ca:
                    24:c3:70:58:50:8e:f3:c2:e4:65:de:2c:46:2f:88:
                    19:de:0c:a4:bd:5a:8b:74:f3:57:f1:06:30:68:da:
                    f8:68:1b:7a:e1:72:24:fa:c8:97:9d:f9:92:36:db:
                    6a:46:e7:4a:01:80:50:b7:59:13:37:58:fb:7c:d4:
                    02:50:fe:81:17:c7:0e:bd:db:93:ff:49:a5:05:8b:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F3:3C:13:96:9E:35:CD:ED:EA:7E:EB:B6:28:9B:D3:73:CE:09:DC
            X509v3 Authority Key Identifier:
                keyid:2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:77:c1:6d:46:d9:cc:67:f7:54:c0:5f:27:9e:01:ee:2c:df:
         12:83:07:0e:f2:40:d3:60:fd:64:7e:85:60:83:bd:75:74:42:
         79:71:9a:7c:96:63:42:b2:a5:0a:3b:2b:e1:07:a0:b3:91:85:
         b9:88:20:e8:ef:4d:f1:ba:67:1d:72:b1:87:31:ec:19:33:98:
         3d:7a:ad:e0:b1:12:4f:aa:d1:14:e8:64:ed:5d:38:1c:a2:83:
         25:3e:77:00:1f:af:8d:24:36:78:04:01:3e:52:83:2c:81:4c:
         84:0d:2e:2c:60:9f:28:6c:4c:74:25:de:91:8f:5a:8d:db:f5:
         5c:c3:15:98:e2:58:24:8b:24:a3:e2:7c:3a:a3:f6:63:db:98:
         ad:6c:ed:15:f9:e4:fe:2b:aa:a0:27:03:8e:70:7a:61:31:72:
         9b:3b:06:8c:ff:15:c2:05:cc:1d:b0:90:6d:1c:52:a2:a6:57:
         b8:37:d1:a7:20:40:ef:79:aa:e0:07:ef:c0:05:e3:59:b6:3b:
         78:cd:2d:04:20:0d:ec:c1:c4:db:e1:a7:90:3c:9e:c5:cf:3f:
         e0:51:52:1b:ad:a1:91:d1:7b:98:59:01:7c:1e:90:05:97:2b:
         a5:6f:be:31:53:27:33:8b:f5:d0:5f:6c:34:d8:57:7d:ac:d4:
         0d:f1:cf:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omaZf9yyPrq56tsgI0dqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlN2E5OWU5ZDJkOTVkMzJiN2ZhNWMyNTZhNjJjNGFmZjYw
YjFmMzcwHhcNMjYwNzI4MTIwMTA5WhcNMjYwNzI5MTIwMTA5WjAzMTEwLwYDVQQD
EyhiZGYzM2MxMzk2OWUzNWNkZWRlYTdlZWJiNjI4OWJkMzczY2UwOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt14xeuE7cX+nBBuhqgzY5R2sxT2Z
+HmryBTd5vgjZPFLRbFiTl/tRylEl/eWT5UaIX1GggfgwyJ9TT8eMz2bitP4JEcb
qHtVa1PV30WSjG0uKjBMHQKE1txIjgXEc/UGSD8RV7olCNDur4XVVKlb6iuz4Xnb
b2JHlgwQMPYZCobKNQ45w/RuMnTVP6e2uDUOHYkr251INGlpHUkh8rEWASya3fkG
UHLvmEkRJlFNO1Scd8okw3BYUI7zwuRl3ixGL4gZ3gykvVqLdPNX8QYwaNr4aBt6
4XIk+siXnfmSNttqRudKAYBQt1kTN1j7fNQCUP6BF8cOvduT/0mlBYtzqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3zPBOWnjXN7ep+67Yom9NzzgncMB8GA1UdIwQY
MBaAFC56menS2V0yt/pcJWpixK/2Cx83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5xWjZkTFpYVEszLWx3bGFtTEVyX1lMSHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTct
MDg0Y2NhMWM4NjIzLzEvTG5xWjZkTFpYVEszLWx3bGFtTEVyX1lMSHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTctMDg0Y2NhMWM4NjIz
LzEvTG5xWjZkTFpYVEszLWx3bGFtTEVyX1lMSHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnfBbUbZ
zGf3VMBfJ54B7izfEoMHDvJA02D9ZH6FYIO9dXRCeXGafJZjQrKlCjsr4Qegs5GF
uYgg6O9N8bpnHXKxhzHsGTOYPXqt4LEST6rRFOhk7V04HKKDJT53AB+vjSQ2eAQB
PlKDLIFMhA0uLGCfKGxMdCXekY9ajdv1XMMVmOJYJIsko+J8OqP2Y9uYrWztFfnk
/iuqoCcDjnB6YTFymzsGjP8VwgXMHbCQbRxSoqZXuDfRpyBA73mq4AfvwAXjWbY7
eM0tBCAN7MHE2+GnkDyexc8/4FFSG62hkdF7mFkBfB6QBZcrpW++MVMnM4v10F9s
NNhXfazUDfHPng==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:46 2026 by rpki-client