Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File:                     lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier:          /9zdysSfaJAOnhnwH57/qRe0V9vzKL3pSI8WiI+JRLo=
Subject key identifier:   5B:70:62:4A:05:21:DD:7B:9A:0A:0E:BE:F4:77:49:49:59:9A:1D:D3
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer:       /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial:       019FAABEEBEA98FE2BDED4F9F010F1792DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number:          107E
Signing time:             Tue 28 Jul 2026 22:01:06 +0000
Manifest this update:     Tue 28 Jul 2026 22:01:06 +0000
Manifest next update:     Wed 29 Jul 2026 22:01:06 +0000
Files and hashes:         1: C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa (hash: 1x0Uuntsxdx1mq0mpp7kC3SseRJDTb+Eb50/cVmhJPA=)
                          2: C463m9ZyZEk3eM2l-6N_RbriHU4.roa (hash: 7UxqANlJ4UF+XXfc6ygm/hisOtlOicfBVxWeVwS1Pqk=)
                          3: cfmv_tc0fZVJXvMbEzxp3huvJQA.roa (hash: 5exQ8N+3HVkALP9EFbCrgal+azdpyvlnwuRFMo6QR2M=)
                          4: itRgULwAbwVfFqgG9Kx01p2QKgY.roa (hash: GVdHMBdMKKywqVWD+wbqJLZMEEEZjb1V4iiL5vClFfE=)
                          5: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: QZpcgxQcyAplMuDbyvp/mWbgdGaF/MHZE5c8FBqSdd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:eb:ea:98:fe:2b:de:d4:f9:f0:10:f1:79:2d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
        Validity
            Not Before: Jul 28 22:01:06 2026 GMT
            Not After : Jul 29 22:01:06 2026 GMT
        Subject: CN=5b70624a0521dd7b9a0a0ebef4774949599a1dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:d0:95:73:46:bc:37:30:72:f9:5b:d0:06:
                    c3:b3:e7:5a:15:32:a4:a9:f3:84:6c:1e:72:27:2d:
                    ef:79:be:b0:89:e3:74:f1:72:3e:37:cd:2c:e1:1f:
                    aa:54:43:56:e2:be:ed:50:b4:3c:35:a8:0a:f8:ae:
                    0f:e1:e7:4c:56:2a:f1:39:ea:21:6a:be:57:b7:32:
                    49:1a:22:3b:79:b5:00:26:1e:f7:da:8e:4c:07:d3:
                    02:36:dc:e1:64:d3:c2:4a:76:4c:8e:37:98:15:8e:
                    80:05:01:5f:7d:5d:3a:5d:52:f4:cf:b4:65:b6:01:
                    1a:aa:60:b9:be:0c:77:f4:61:a6:1a:3f:c1:56:ce:
                    09:aa:bb:a7:9e:67:b0:63:6c:85:47:8f:09:c0:71:
                    4d:e4:52:d0:a9:fb:bb:e9:04:ee:99:79:ec:e4:2d:
                    97:ba:6b:db:a6:ac:3e:97:ad:ac:8b:6f:87:b0:e2:
                    fd:f3:f7:56:3c:f1:3f:24:11:eb:a4:42:14:de:01:
                    19:ff:bf:4a:cf:29:bd:51:56:63:45:4e:53:32:53:
                    1b:ed:2b:9f:be:97:bf:35:f2:1f:44:ae:0c:3f:f3:
                    83:bf:45:c9:ea:02:57:bd:b2:7c:ec:21:d7:74:34:
                    45:aa:4b:3e:25:66:78:72:23:cb:ac:fa:18:96:bb:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:70:62:4A:05:21:DD:7B:9A:0A:0E:BE:F4:77:49:49:59:9A:1D:D3
            X509v3 Authority Key Identifier:
                keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e3:e7:a1:8d:5a:46:5f:5e:eb:5e:6c:b9:7d:ff:ba:b3:95:
         8b:df:b0:7b:87:32:c2:6d:7b:c5:bd:81:43:d1:9b:4c:d1:19:
         15:5e:e7:76:58:79:4d:4e:c9:b2:9f:95:e3:ad:93:73:dc:3f:
         8d:5c:4f:dc:24:a1:b3:09:2d:c0:97:5c:c3:63:a8:0a:cc:73:
         0c:ce:83:b2:9b:a2:5b:11:96:b4:7f:cf:c3:65:57:14:83:b6:
         fe:d5:b0:78:f7:b9:3a:73:f2:a0:d0:3c:b3:1b:f3:05:db:9f:
         15:00:4b:1f:39:fb:81:3d:be:89:c5:2e:ec:43:a4:94:31:c4:
         0b:61:7b:65:02:66:0a:3e:f1:4f:df:8f:3d:0d:8d:33:65:2e:
         2b:44:19:ee:91:76:12:d3:8a:22:f9:7e:9d:95:90:68:5f:35:
         14:91:cb:3b:d8:c2:96:54:39:1c:59:2b:e6:ef:29:71:0c:bb:
         4c:ee:f1:02:9a:10:9d:54:51:40:c8:e0:e4:60:d4:a4:5b:c9:
         72:fd:a2:d0:35:86:1b:1c:56:f6:51:fb:4d:c9:51:a1:e1:d7:
         ba:45:e9:de:ad:30:46:18:f0:84:5a:65:cd:c4:af:44:6f:52:
         49:34:76:7c:46:42:d0:de:27:eb:27:71:61:e7:b9:24:2c:ab:
         db:45:6b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvuvqmP4r3tT58BDxeS2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz
NGFiNGMwHhcNMjYwNzI4MjIwMTA2WhcNMjYwNzI5MjIwMTA2WjAzMTEwLwYDVQQD
Eyg1YjcwNjI0YTA1MjFkZDdiOWEwYTBlYmVmNDc3NDk0OTU5OWExZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9HQlXNGvDcwcvlb0AbDs+daFTKk
qfOEbB5yJy3veb6wieN08XI+N80s4R+qVENW4r7tULQ8NagK+K4P4edMVirxOeoh
ar5XtzJJGiI7ebUAJh732o5MB9MCNtzhZNPCSnZMjjeYFY6ABQFffV06XVL0z7Rl
tgEaqmC5vgx39GGmGj/BVs4JqrunnmewY2yFR48JwHFN5FLQqfu76QTumXns5C2X
umvbpqw+l62si2+HsOL98/dWPPE/JBHrpEIU3gEZ/79Kzym9UVZjRU5TMlMb7Suf
vpe/NfIfRK4MP/ODv0XJ6gJXvbJ87CHXdDRFqks+JWZ4ciPLrPoYlrvbNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtwYkoFId17mgoOvvR3SUlZmh3TMB8GA1UdIwQY
MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt
YzQyZjlhYmYxNDc3LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3
LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOPnoY1a
Rl9e615suX3/urOVi9+we4cywm17xb2BQ9GbTNEZFV7ndlh5TU7Jsp+V462Tc9w/
jVxP3CShswktwJdcw2OoCsxzDM6DspuiWxGWtH/Pw2VXFIO2/tWwePe5OnPyoNA8
sxvzBdufFQBLHzn7gT2+icUu7EOklDHEC2F7ZQJmCj7xT9+PPQ2NM2UuK0QZ7pF2
EtOKIvl+nZWQaF81FJHLO9jCllQ5HFkr5u8pcQy7TO7xApoQnVRRQMjg5GDUpFvJ
cv2i0DWGGxxW9lH7TclRoeHXukXp3q0wRhjwhFplzcSvRG9SSTR2fEZC0N4n6ydx
Yee5JCyr20Vr4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:16:16 2026 by rpki-client