Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
File:                     LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json)
Hash identifier:          Zwu3Hz6Vk3rEwcHlyEw8bLei84LuuVA0jnVPE/m7SGI=
Subject key identifier:   CA:C9:26:F8:D9:7B:DD:30:3F:B7:CC:38:57:F3:4D:33:97:13:9F:6C
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Certificate issuer:       /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial:       019FAB9A819C7444D6245F33C3151259F34B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 02:00:57 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:57 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:57 +0000
Files and hashes:         1: F8ssCXzm5DlQ97WN2xVb9wJjA_g.roa (hash: RedzK3Q4KVLEhYDQGEu2AFOE8F+deCMqCtqno/fcLrc=)
                          2: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: OAmhIfVeojMVn/Ii0HD2CKav7CpuK20NkiGlyxvQANg=)
                          3: Tx4rGOskR8UsbyOhXGF9kJnJ7vw.asa (hash: IR65pK4PSkniZY6Jc9WLdUsu5O9juE1eZaJzF2M4+RM=)
                          4: Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa (hash: DKeEzZKgIArxoLoLfWTEY4XadPn2TLkkEnTA5gJhx7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:81:9c:74:44:d6:24:5f:33:c3:15:12:59:f3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d5894923bb002a434128810607dfb526722004f
        Validity
            Not Before: Jul 29 02:00:57 2026 GMT
            Not After : Jul 30 02:00:57 2026 GMT
        Subject: CN=cac926f8d97bdd303fb7cc3857f34d3397139f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a6:df:95:27:9d:35:98:0e:c4:06:59:31:56:
                    07:21:96:26:88:53:af:08:f2:9c:cc:58:88:13:9d:
                    eb:0b:cf:4a:f8:65:fa:80:d0:12:7c:70:44:4e:51:
                    44:f8:a8:59:86:3c:0f:3b:dd:c0:02:85:70:e4:5d:
                    97:48:da:54:5e:cd:97:37:a9:27:b2:d5:e6:99:e5:
                    12:04:53:fd:af:8b:d7:a4:3d:ba:77:1c:2b:f9:ff:
                    2b:57:14:a0:1e:4f:fb:e1:8f:89:27:ac:6a:45:d5:
                    74:83:59:c1:fe:47:ba:57:b5:11:13:f5:bf:bc:7b:
                    e3:a6:4f:d2:a3:38:f2:f0:70:d0:e9:b5:03:66:79:
                    9b:dc:fb:c1:1f:4b:e1:02:57:b4:cd:34:8c:35:9a:
                    31:b0:6c:0d:d5:f8:cd:45:07:07:cb:b3:4e:85:ea:
                    fc:88:f0:32:3e:7b:fa:36:cd:c4:a2:11:da:4c:5d:
                    17:c8:e4:84:93:27:9c:ed:43:91:5c:12:8c:81:ec:
                    77:40:5a:a9:57:5c:c5:3a:72:9d:68:7a:3f:ab:96:
                    6e:70:0f:bc:33:aa:3d:2a:b1:a2:18:85:08:61:19:
                    75:e4:f0:1b:64:c2:96:17:91:0a:04:a3:02:9b:d7:
                    98:b4:36:c5:44:5b:da:19:2e:70:89:68:f9:18:98:
                    71:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C9:26:F8:D9:7B:DD:30:3F:B7:CC:38:57:F3:4D:33:97:13:9F:6C
            X509v3 Authority Key Identifier:
                keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:01:76:71:58:3f:84:72:41:93:ea:5c:11:74:7d:ee:cf:21:
         53:6d:6e:47:d7:94:71:70:3a:c1:7c:c2:ac:78:80:29:6e:cc:
         39:ab:b2:61:d1:c1:8a:c8:a3:d0:c5:b6:47:4b:e0:65:c4:e4:
         4c:e6:f5:6d:a7:1a:e9:60:fb:b8:4f:f5:31:81:df:e8:c7:7f:
         e8:78:34:5b:aa:42:d7:9d:f1:08:76:f3:e1:4b:1f:d2:f4:81:
         a6:fa:cb:03:3c:1f:cf:54:71:74:56:2a:4c:71:7e:0d:f7:07:
         bc:d0:09:7f:06:e2:ba:4b:22:11:85:29:e2:7b:30:aa:4f:1a:
         d1:fc:f2:c0:58:d2:6a:df:7b:26:06:ae:c2:0d:88:34:21:18:
         03:71:66:d4:af:26:0d:bc:69:fc:29:33:d3:c7:2d:97:a1:7f:
         93:10:57:ad:71:4e:bb:d3:99:a4:2c:87:31:6b:13:6e:64:6a:
         4e:a5:33:10:cb:5b:d1:8c:b9:fb:14:db:0e:20:b9:98:73:3f:
         03:34:f5:03:ce:9a:0c:8f:ee:d0:ee:dc:c6:ea:83:e3:62:9f:
         4c:ad:07:30:f1:cc:af:db:81:ae:ca:2b:aa:d0:2c:60:47:72:
         ca:09:88:07:02:b0:f7:fa:06:f7:42:f4:37:13:72:ba:31:cf:
         f2:b7:e4:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmoGcdETWJF8zwxUSWfNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTg5NDkyM2JiMDAyYTQzNDEyODgxMDYwN2RmYjUyNjcy
MjAwNGYwHhcNMjYwNzI5MDIwMDU3WhcNMjYwNzMwMDIwMDU3WjAzMTEwLwYDVQQD
EyhjYWM5MjZmOGQ5N2JkZDMwM2ZiN2NjMzg1N2YzNGQzMzk3MTM5ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKbflSedNZgOxAZZMVYHIZYmiFOv
CPKczFiIE53rC89K+GX6gNASfHBETlFE+KhZhjwPO93AAoVw5F2XSNpUXs2XN6kn
stXmmeUSBFP9r4vXpD26dxwr+f8rVxSgHk/74Y+JJ6xqRdV0g1nB/ke6V7URE/W/
vHvjpk/Sozjy8HDQ6bUDZnmb3PvBH0vhAle0zTSMNZoxsGwN1fjNRQcHy7NOher8
iPAyPnv6Ns3EohHaTF0XyOSEkyec7UORXBKMgex3QFqpV1zFOnKdaHo/q5ZucA+8
M6o9KrGiGIUIYRl15PAbZMKWF5EKBKMCm9eYtDbFRFvaGS5wiWj5GJhxCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrJJvjZe90wP7fMOFfzTTOXE59sMB8GA1UdIwQY
MBaAFC1YlJI7sAKkNBKIEGB9+1JnIgBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODIt
YWVlNTkyN2I0ZGQyLzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODItYWVlNTkyN2I0ZGQy
LzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogF2cVg/
hHJBk+pcEXR97s8hU21uR9eUcXA6wXzCrHiAKW7MOauyYdHBisij0MW2R0vgZcTk
TOb1baca6WD7uE/1MYHf6Md/6Hg0W6pC153xCHbz4Usf0vSBpvrLAzwfz1RxdFYq
THF+DfcHvNAJfwbiuksiEYUp4nswqk8a0fzywFjSat97Jgauwg2INCEYA3Fm1K8m
Dbxp/Ckz08ctl6F/kxBXrXFOu9OZpCyHMWsTbmRqTqUzEMtb0Yy5+xTbDiC5mHM/
AzT1A86aDI/u0O7cxuqD42KfTK0HMPHMr9uBrsorqtAsYEdyygmIBwKw9/oG90L0
NxNyujHP8rfkkw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:41 2026 by rpki-client