Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File:                     lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier:          3ZidAvZXSkqp5FFQg+bkMV/k8K/ypwaEXUdr89HJOKw=
Subject key identifier:   90:38:BC:37:FE:1F:78:88:83:02:B0:42:4F:12:BC:79:51:76:87:B1
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer:       /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial:       019FAB2C0E2F0793D31EA68ED9D346277A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number:          19E5
Signing time:             Wed 29 Jul 2026 00:00:18 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:18 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:18 +0000
Files and hashes:         1: 1-zEgOYWTHaiqMcDqGEot8D9hfIE.roa (hash: jVaMeN32gu4WLb8RXEU7QtT8NJ8As10+YaSSTQDJyMM=)
                          2: 77UuERyh3Z3AUcULCIiJEdc-fQo.roa (hash: DnHBthnf/STbIAi1O3tZFh2P5fMOYtzdif9FPjsRkXU=)
                          3: I74vLo5CklRsbzCPNYnKrvIvLj4.roa (hash: ylSWG2wfgpUMhcZpBHxBahFVE1pyuX6ebVuzOtGSKVo=)
                          4: Me8pqtMOGe2KjLGLGa_xjVwMxvc.roa (hash: zmliJfyp+DG/bJzbw7Ah5+KIwAmGQR1aLh9WjwxPzGg=)
                          5: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (hash: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo=)
                          6: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: /bTRQ/YiUatoLISzcf0rpCyNMQfUkAF6cATwnEFGImg=)
                          7: nS-qR-87gGJ6pBf2l7_HCJOIeHM.roa (hash: uHfPOVPyEDve9s1ba9V4RroyQ1/pD8S/mdaAMdEB9is=)
                          8: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (hash: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:0e:2f:07:93:d3:1e:a6:8e:d9:d3:46:27:7a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
        Validity
            Not Before: Jul 29 00:00:18 2026 GMT
            Not After : Jul 30 00:00:18 2026 GMT
        Subject: CN=9038bc37fe1f78888302b0424f12bc79517687b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5b:72:28:f5:09:b1:b2:2d:52:df:86:b7:d2:
                    f0:cc:3a:fa:65:45:52:61:fe:af:a5:8b:bd:30:72:
                    18:cd:14:82:82:aa:d1:05:ed:b0:76:ba:5d:53:06:
                    ad:49:8e:06:d3:fb:45:c2:65:43:4a:3c:f2:08:df:
                    59:06:4e:1c:c5:51:1d:3a:f6:69:88:67:30:7e:08:
                    d3:8c:7e:c9:9f:fc:64:fd:f7:26:27:01:54:a2:e8:
                    ff:a2:4b:a5:63:38:37:07:c6:b2:06:1d:c3:16:3f:
                    71:6e:d3:d4:9b:a8:a9:0a:12:f4:0d:64:f2:c7:5a:
                    6d:01:ba:41:63:af:9a:6f:13:e5:97:8b:1f:05:ad:
                    d6:96:c9:7b:7f:e3:91:64:bf:eb:34:75:25:45:f4:
                    61:06:f2:7d:af:23:15:9e:98:4a:be:4c:56:10:12:
                    61:a0:22:38:1a:9d:a4:df:15:92:17:3e:92:d0:0b:
                    6a:71:06:ba:c2:71:05:01:9b:14:ff:ef:72:96:b1:
                    f3:ca:54:02:3e:2d:b7:e4:57:12:c0:95:59:b1:d0:
                    0e:04:4a:07:0a:e4:0a:06:66:2a:7d:a9:9a:02:c6:
                    d5:6a:16:25:b8:e3:19:80:05:ab:1e:27:cc:d3:45:
                    ed:6c:fa:c4:12:f0:fc:cd:5a:04:75:24:f8:73:4a:
                    eb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:38:BC:37:FE:1F:78:88:83:02:B0:42:4F:12:BC:79:51:76:87:B1
            X509v3 Authority Key Identifier:
                keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:b3:8b:37:3f:00:8b:1b:c2:59:e6:54:fa:2c:ca:1c:29:e1:
         c0:cb:95:e8:d5:04:74:04:6e:08:7d:f3:b3:24:b3:cb:e9:b5:
         cf:1b:fb:b8:2a:b5:a1:96:b1:3f:85:46:7a:0f:e5:af:20:0d:
         50:7e:85:28:35:2f:7d:4b:8e:e3:9f:3e:d6:42:e6:16:d9:c3:
         b1:3c:c4:35:76:34:28:2f:2c:06:ba:2c:97:bd:91:bc:9f:cf:
         f9:98:c0:53:91:48:96:59:05:c0:b9:b9:95:7a:1f:80:18:d5:
         b7:e3:dd:51:75:04:e4:89:72:a1:f9:a6:4b:96:0d:a1:70:14:
         39:57:3e:73:c8:3d:ec:54:a8:47:b1:b6:3c:b6:48:9d:b2:b2:
         f0:1c:75:d3:e2:2c:1e:8d:98:13:52:6b:66:aa:5e:7b:1f:34:
         4e:56:92:19:b6:f0:93:16:d4:52:e7:93:31:cc:e9:da:af:28:
         5f:47:43:64:84:df:94:5e:30:a3:a9:eb:00:c1:5f:8b:cc:9c:
         df:81:57:b8:db:30:2e:68:1f:b4:6d:19:e2:e0:a4:58:c2:e8:
         fd:99:d3:a3:16:67:20:6d:14:de:8c:f7:07:c1:51:f9:e6:22:
         4f:dc:14:06:61:0b:02:68:db:95:53:04:9b:f6:1f:f1:30:0e:
         2a:dd:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:42 2026 by rpki-client