Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
File:                     LRwW9-pxCvReKzoR5iijjOZ7x6U.mft (raw, json)
Hash identifier:          dFr5xiQRgmyp0SuPL/4SDoXNwgW9No/cSSfaenARbWc=
Subject key identifier:   C7:D1:51:F6:30:35:9D:44:D1:A8:F4:60:6C:05:B2:73:87:73:CF:9B
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Certificate issuer:       /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial:       019FA94318EE2BF4E26A981EA019386F56A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
Manifest number:          01DC
Signing time:             Tue 28 Jul 2026 15:06:14 +0000
Manifest this update:     Tue 28 Jul 2026 15:06:14 +0000
Manifest next update:     Wed 29 Jul 2026 15:06:14 +0000
Files and hashes:         1: 56HUMnOVLizp5vl6aXgPcPNn_fk.roa (hash: YF1jFG43jTgnM9BgnhfbPCFUiix1RI6CfclqbM/48Wg=)
                          2: GKLH9FqR5ufpCylhCN6FbfGgLDY.roa (hash: 1rknG1DoHjPJltge0cSGVjsDeu8yylMyucM/PEibazg=)
                          3: LRwW9-pxCvReKzoR5iijjOZ7x6U.crl (hash: IvdjBkK8Dj0Eobqxv2zDC84QHyviUzIB0ClsxVcnxk4=)
                          4: PIgUPxi7GaHoTA2H6HevNvDWy3o.roa (hash: M5GWr7SAUmVX904a5g1oxNLpt0yF4PMPyRfvanFYdSs=)
                          5: RRuTgob8nWF_H0-2A1kaE1z7gDM.roa (hash: 1JL+wPq9FDdgxrK5s7w8LuDxomHYJw19S/iTZj0V9/A=)
                          6: Vs_xa6cwKVufppdLIkNMoiWE-Oc.roa (hash: 4dx96UVewWHpN9fF/ZUn/TmPzRJPzaWTUFtvFkigF3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:43:18:ee:2b:f4:e2:6a:98:1e:a0:19:38:6f:56:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
        Validity
            Not Before: Jul 28 15:06:14 2026 GMT
            Not After : Jul 29 15:06:14 2026 GMT
        Subject: CN=c7d151f630359d44d1a8f4606c05b2738773cf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:f9:7e:84:20:4a:8e:8f:47:92:bc:1d:87:
                    e4:c8:0b:0a:b8:7f:f0:fc:49:3f:d7:26:18:cf:c4:
                    2f:8f:a2:15:ef:f3:90:ea:3a:f2:d8:2e:df:da:e8:
                    b2:ba:ce:37:b2:20:b5:4b:09:9e:6d:44:9d:d1:b8:
                    8c:ac:31:93:ab:72:d5:f9:fb:35:92:e0:ef:be:97:
                    27:a9:2b:d3:b3:b6:40:7c:2d:5a:93:ec:c7:75:2f:
                    aa:ef:ed:4d:80:e5:82:dd:e0:85:a4:ad:a8:f0:86:
                    75:64:10:6a:86:4a:30:9d:f4:ee:83:36:b5:33:5a:
                    a7:3e:c2:b7:df:96:8d:0b:42:93:f1:22:f4:4e:96:
                    ef:54:ef:31:7a:ea:b5:48:84:8d:d9:09:81:cb:90:
                    03:4c:37:4e:89:4d:af:3d:98:42:69:a7:30:db:e5:
                    d5:5c:ee:e8:e2:09:a8:ae:ba:aa:16:2f:44:ad:b8:
                    22:a2:06:10:10:ab:da:a7:29:f3:2c:53:29:9e:46:
                    52:cc:0f:c5:c0:10:d0:7c:32:ed:da:8d:da:55:9f:
                    16:cd:a5:6e:22:88:b6:34:27:39:eb:3c:e0:7c:23:
                    c2:06:5b:e1:c2:f9:eb:e0:77:ab:9e:5f:48:b9:d9:
                    81:ac:ae:15:b6:d8:73:01:e5:33:84:86:96:bd:74:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D1:51:F6:30:35:9D:44:D1:A8:F4:60:6C:05:B2:73:87:73:CF:9B
            X509v3 Authority Key Identifier:
                keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9d:89:db:0e:dd:fd:48:91:ec:1b:79:38:47:12:68:30:1e:
         a6:e4:3a:7d:06:aa:11:45:69:ac:ec:28:15:d9:00:98:3a:11:
         b2:6f:b1:a8:18:32:5c:3b:8f:07:b3:12:56:46:5d:b7:d3:b3:
         41:a0:19:7a:ec:60:a0:6f:ad:36:d0:26:17:67:02:d5:fc:80:
         7d:0b:c0:93:03:f6:ad:41:a2:62:90:b5:01:1b:a0:27:90:75:
         50:17:51:b1:f1:86:47:b3:11:eb:18:d2:13:96:ad:8e:e0:ae:
         c0:81:71:23:37:f7:35:af:13:88:79:3b:a5:11:52:ad:5f:35:
         58:0a:4f:88:fe:21:4a:34:2c:a5:46:0a:67:65:7e:41:21:a7:
         d1:ad:7b:43:67:9b:96:54:95:bc:c4:5a:44:e9:1d:be:1b:79:
         b2:cb:93:17:e0:7c:fe:3d:0d:2f:bd:56:93:61:ea:c2:4b:9e:
         f6:2f:04:1a:87:1b:db:06:e9:68:37:04:e6:f1:7f:97:97:d8:
         f9:f4:64:db:ca:f3:54:3f:f3:b8:75:65:4f:b7:92:2f:82:1e:
         fe:d5:b2:87:ee:1b:11:e6:9d:d9:2c:3d:05:f8:ac:b9:71:ec:
         50:e8:5e:1d:49:37:a3:c9:ef:f1:b5:95:d1:49:50:39:14:0b:
         54:4d:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:14:49 2026 by rpki-client