Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
File:                     LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json)
Hash identifier:          ydNEe2QF0ECeW/y4ZHsOTVQ4/dWxYDn6D/h+VsfqQXg=
Subject key identifier:   0D:47:83:0C:5C:15:24:EA:87:F8:CA:B2:43:93:17:43:CA:46:D8:05
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Certificate issuer:       /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial:       019FAB9A2262C9D8AA5786CCC89E558FC9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
Manifest number:          19E7
Signing time:             Wed 29 Jul 2026 02:00:33 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:33 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:33 +0000
Files and hashes:         1: 1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa (hash: 5WKu4LWonKHRxxs99iSw6h5aj4s3WEayXBY2TqBi9nA=)
                          2: 1Gik3uokQgHgJGrEqX2lFkzr0cY.roa (hash: Kk98fLYxI9U7uOT4mbQ7y0T5RVTRCELUDm+h4tCANjs=)
                          3: 2RbyrkRyfy89JjRg3To0T1X7M24.roa (hash: b2qdxjwNibknS7GfNAq+qHd1R5651Flic59AvsJpQf4=)
                          4: 6brxduzXhHDEdEdLPYo-IkEXumQ.roa (hash: BNtGnX+ZgfT95cD+u1NiIdsjMWlhX2+WUP0xdw5BCqw=)
                          5: CDi03via9tSrSWhEkc8SyFAzxU8.roa (hash: 4E5NjZdVovSPIPi8ZzMY1G+T+skgT6FVyGUEU7eeF4A=)
                          6: Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa (hash: 5IPdnacUry/jeLV3YhfaDu6Wg2YGyXm/oHlA8O6l+z8=)
                          7: DtOAaerGRysyOa_ptkbSzt83ans.asa (hash: FxAm4yjqU86Xn+0M/VpmlLrJ7swMzMqWyDSpp0y9U8U=)
                          8: F3gi0tGQH_1DKuI8rNzFuXZmRlk.roa (hash: 23DkMsSVoahaS49VnCTPljUSOUkll2ueapsYq9u+mmk=)
                          9: FHznUXLD8rFTI78uN7oxhc4DhSU.roa (hash: b+nymXPjgks3IFJ/o1An5mcttD+ZdDuxy6fPoMhsETE=)
                          10: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: huqowbxrLSLJ2Nc05cO/QzTfGI/0eLO/AyFGL9bRgSg=)
                          11: LumDKv8yJCaTy-63lwCESoCV9wg.roa (hash: sY6Zv0xvPu2a/4QF003FOap0XFsW2Wqm364DnIdq744=)
                          12: Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa (hash: HJ9iHQ4hdTkZ4JJds6Vw/2RFkXgvBx/DD5d+J3cy7Ts=)
                          13: R9KDbq4_KK0GlGPdLMfTos0CBjE.roa (hash: QHS2bULmvFoSCrqKfTl/c1ypYsSyCSgswpWvIKsISSU=)
                          14: Vt0us9OcLBIXjJfySaiTKs5W6wQ.roa (hash: nyuVpwcHfYR7p0Amdida/oXahMkize2c3OFf8NBV6os=)
                          15: cbVChPNP4-DIWiKkOfkWP8doixc.roa (hash: kIXewO7P0d1ssZnGCLQfIk8MUG+ijdkQqTo/a3x7pAg=)
                          16: lPjhCpLeDikKgymVS-eWXgwxAp8.roa (hash: MyuMAm1eed/9jmE8+GgWWmDVqy3fbOF+fkCjwKELi/0=)
                          17: n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa (hash: Mdos03oYdbkiZzG/wC3jhapVhZc0L3yy3J3lEF+MNPQ=)
                          18: rR1f83OQ9uRUE7_cr1u6YytDpBc.roa (hash: XM5rNdyvUe3EDxwwVIUj6GQWBqMm/WaWj2X3nUSC/Qg=)
                          19: rjJb7Ma4JA2QDwSLDvxE_nuqcm0.roa (hash: QxeA9lmoqDy9aA4mXJ53DXoy59LVGmnnOAFARnPU/Bk=)
                          20: t5uw45Hhtzxj2GLToAWcTHImtcg.roa (hash: fqD4dYIocF+gCJ4U31lpisnaUUMjXKt9o0wyGOryKek=)
                          21: uea9rgFUf1JA0CrNAzpNKJzb_aw.roa (hash: k8IR4W1p+ygIWocTeYwLCg/tltltxbnE44agYQdWhgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:22:62:c9:d8:aa:57:86:cc:c8:9e:55:8f:c9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
        Validity
            Not Before: Jul 29 02:00:33 2026 GMT
            Not After : Jul 30 02:00:33 2026 GMT
        Subject: CN=0d47830c5c1524ea87f8cab243931743ca46d805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:d3:92:9b:44:1d:1c:b6:ee:5b:91:8e:7f:
                    f1:ed:d4:3c:38:13:87:f3:cd:5c:35:5b:c0:ef:2c:
                    e3:58:63:0a:5a:2d:67:e4:ef:59:af:0d:62:f1:db:
                    3d:ae:5b:f0:4c:b7:1b:d4:f0:25:03:86:bf:28:49:
                    c9:f4:a2:1d:5b:ef:53:1b:f6:7c:5d:3d:c7:4b:f9:
                    28:39:e3:fe:ca:06:22:89:a2:f4:dc:d8:9f:c4:d8:
                    72:44:7f:ac:94:7b:5c:74:8a:71:5f:ad:71:24:94:
                    62:47:f6:11:39:f3:36:99:4d:ba:c0:17:1d:9f:56:
                    35:81:8e:f1:d4:c7:2f:0a:73:5c:fb:1f:27:50:f7:
                    70:e3:fa:37:55:cb:02:9c:15:0d:d9:85:0b:00:21:
                    06:36:bb:5a:95:d8:48:b2:a1:53:3c:8d:fa:4a:69:
                    9d:95:61:ea:cd:ff:c6:82:bc:6a:95:df:8a:98:fd:
                    14:71:c3:0f:d9:78:e8:0c:83:6f:79:11:be:83:92:
                    25:64:20:f9:32:36:fb:a9:c4:e2:5e:e9:d9:9d:72:
                    04:5e:06:70:d3:e3:62:78:2b:88:0d:14:67:0f:43:
                    0d:2f:20:3c:6c:f8:82:92:db:8d:5d:12:9c:b8:c3:
                    97:c1:91:49:b7:f9:4d:0a:24:dc:85:cd:5c:fc:a6:
                    ba:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:47:83:0C:5C:15:24:EA:87:F8:CA:B2:43:93:17:43:CA:46:D8:05
            X509v3 Authority Key Identifier:
                keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:42:24:b0:97:35:8d:bb:43:f6:2b:61:6a:b1:0e:06:c2:12:
         c5:f2:f0:3c:e0:06:0d:fd:d8:0e:18:f0:f8:7c:a8:33:a1:c0:
         5a:3e:bd:0d:1b:d3:fd:69:00:13:8b:3c:6f:5c:7b:44:a3:e4:
         47:d3:1b:76:58:d9:be:f1:4e:32:3d:bc:26:5b:61:e4:35:58:
         77:59:ea:fc:1a:4e:c9:cb:63:dd:10:2b:9a:aa:2d:e2:b7:cb:
         b6:f8:bc:d8:de:2d:35:ce:8c:d0:a6:37:d0:f7:d3:9d:9c:41:
         bd:8c:f8:89:a5:6d:5a:ca:f8:c5:b4:c9:e3:bd:4b:56:9a:2f:
         ec:b1:36:ea:5f:49:0d:b1:cf:bc:48:16:b9:1c:04:05:bb:ca:
         f3:fe:7e:5e:0a:4b:f9:84:8b:31:aa:b3:67:0e:13:4b:34:0c:
         0a:60:f9:48:80:10:10:ba:93:3a:e5:a6:0c:a1:2c:55:7d:f8:
         bd:aa:57:70:74:4b:fd:43:0d:5d:6e:20:bb:8f:80:3a:e2:e5:
         e0:92:f4:d3:81:97:db:65:2c:a7:c1:e4:60:f6:16:4b:02:57:
         6c:0b:bf:1a:3a:93:d4:32:92:b4:73:f3:f2:1f:26:0c:f1:5a:
         49:4d:08:4d:4b:ac:04:fd:d2:eb:af:71:01:32:ac:c0:18:94:
         a9:67:f0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:53 2026 by rpki-client