Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File:                     LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier:          tjS+RXHYj4DOZgmJUHarI1eELEELwEt8aPL7N/xqlG8=
Subject key identifier:   32:BA:F1:96:96:FF:5D:2D:AD:15:DA:D8:F8:D2:92:E4:C9:64:80:2B
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       019FA9D853C8BEB13DF5D2391B615033A380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number:          198F
Signing time:             Tue 28 Jul 2026 17:49:14 +0000
Manifest this update:     Tue 28 Jul 2026 17:49:14 +0000
Manifest next update:     Wed 29 Jul 2026 17:49:14 +0000
Files and hashes:         1: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=)
                          2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=)
                          3: 2hZ530f2raEI-bxy4Ge1DWkjBYo.roa (hash: Bao5s0a1GnYLM+RTX8Ltx08DQ1ef+ti6Rlh4XL0TsXg=)
                          4: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=)
                          5: 55iMg0IqIvTTTaaD18TQWd53G8U.roa (hash: hkh5sXfYdaVp6m20oi5m27sE7i3ZzTQje8FmNlvZJcU=)
                          6: 6fueTwx89YJUS6Dpp5Y2h_u_XrU.roa (hash: lzYvahX3CMPBOibhapx+4QK+QwG3tziddPkBj6Q8iy8=)
                          7: BTaCybUURTBQi0VNgpk9RgieWQU.roa (hash: t/hsl4bRfHXT9QYyQUbp81UsQcklFdAa9CwiBUgRca4=)
                          8: Cy393HmMTcAn60r5mHO2k2Dg17k.roa (hash: r8l9XvoJeBvAXNolGJ2W46Taz9bFIMoIIMpX642FPsI=)
                          9: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=)
                          10: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: Xt0PXJrAxmbN/u7owxqhjwCF2E8GNgIRGGVYi01M7HY=)
                          11: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=)
                          12: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=)
                          13: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=)
                          14: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (hash: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=)
                          15: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=)
                          16: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=)
                          17: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=)
                          18: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=)
                          19: p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa (hash: Ott2sOPVA987hz4zVP2oRFvzjlidIeKw8Px9ILdJfjs=)
                          20: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=)
                          21: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=)
                          22: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (hash: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=)
                          23: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:d8:53:c8:be:b1:3d:f5:d2:39:1b:61:50:33:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Jul 28 17:49:14 2026 GMT
            Not After : Jul 29 17:49:14 2026 GMT
        Subject: CN=32baf19696ff5d2dad15dad8f8d292e4c964802b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:bd:42:73:82:2d:66:13:d3:c0:c3:72:48:
                    b2:66:e8:05:a5:42:a1:43:90:ad:0d:12:04:ad:e3:
                    f3:3e:16:8f:35:71:ab:d3:27:9c:62:6a:f2:c1:e3:
                    ad:ee:10:cc:11:f3:26:61:92:f7:63:cb:79:62:0f:
                    03:ec:4f:a3:e2:fa:b4:05:14:3d:1d:24:b8:15:e8:
                    72:21:1f:3e:af:db:f4:e1:c2:4a:bb:77:cd:42:8d:
                    ba:63:16:ce:67:e0:c6:29:e8:4b:85:7f:8a:27:ae:
                    bb:9e:ee:fd:1a:e0:00:c3:c9:f9:e1:9c:23:01:e8:
                    26:3f:dd:db:1a:8b:cc:6e:12:6e:13:7d:0f:6b:08:
                    5a:e4:1f:21:1a:51:1b:12:f3:1d:6e:4e:e0:a4:c7:
                    63:69:d9:5a:da:ad:80:e9:55:c0:b2:61:f4:fa:11:
                    35:5e:ad:16:39:0a:f6:76:ba:e6:fa:dc:19:4a:8d:
                    04:eb:71:7c:57:cf:29:b4:25:22:7a:41:97:bc:e1:
                    da:67:40:3b:7d:33:a4:9b:24:f3:f3:22:b9:9e:85:
                    ea:64:e1:89:a3:67:5a:e1:df:bf:99:b6:9e:4d:49:
                    77:b7:cf:10:af:c4:f9:95:58:3f:17:06:cd:5c:e3:
                    24:28:5e:93:be:28:80:1b:c9:be:12:ef:21:67:eb:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BA:F1:96:96:FF:5D:2D:AD:15:DA:D8:F8:D2:92:E4:C9:64:80:2B
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:39:5e:a9:d3:b6:66:f6:98:a4:20:92:3a:0b:af:28:ba:0a:
         58:ba:c9:70:ff:22:5f:cb:89:ca:f7:0b:62:05:cd:00:d3:71:
         3b:c4:42:73:59:7a:91:ea:42:3b:0b:93:b2:48:9b:2a:99:67:
         eb:fb:48:61:da:63:2d:52:01:67:e7:0b:ea:a2:39:39:60:d8:
         f5:40:6e:9c:f7:ae:da:9a:bd:2f:29:46:7d:bf:db:8b:5b:41:
         09:cd:18:1b:7c:54:66:49:7b:a6:e8:9b:81:2d:42:9a:29:03:
         95:ff:e9:2e:13:20:5e:e6:11:26:04:5c:c7:75:26:1a:65:3d:
         1f:28:c7:de:67:ff:cd:16:87:e9:0f:e6:10:e0:50:3d:ef:89:
         12:23:bb:5e:78:ce:00:f3:d4:5a:ab:a9:33:83:de:ab:08:92:
         b8:a6:43:9e:d9:70:9f:9d:72:73:f2:bc:fa:8c:d5:d5:70:a5:
         f5:8b:e2:77:10:da:25:1a:2c:80:f7:8d:ce:6f:c4:8a:82:65:
         e4:eb:38:b1:a2:fb:cd:45:7f:5b:7f:c7:7d:f8:d2:3b:4f:fc:
         70:e9:92:1b:c2:bd:c0:a9:b3:2b:1f:93:d1:94:51:7b:66:fd:
         40:31:0d:f8:e1:ca:82:3f:43:81:43:03:00:1c:bf:7e:50:c3:
         4c:66:cd:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p2FPIvrE99dI5G2FQM6OAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjYwNzI4MTc0OTE0WhcNMjYwNzI5MTc0OTE0WjAzMTEwLwYDVQQD
EygzMmJhZjE5Njk2ZmY1ZDJkYWQxNWRhZDhmOGQyOTJlNGM5NjQ4MDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl+9QnOCLWYT08DDckiyZugFpUKh
Q5CtDRIErePzPhaPNXGr0yecYmryweOt7hDMEfMmYZL3Y8t5Yg8D7E+j4vq0BRQ9
HSS4FehyIR8+r9v04cJKu3fNQo26YxbOZ+DGKehLhX+KJ667nu79GuAAw8n54Zwj
AegmP93bGovMbhJuE30Pawha5B8hGlEbEvMdbk7gpMdjadla2q2A6VXAsmH0+hE1
Xq0WOQr2drrm+twZSo0E63F8V88ptCUiekGXvOHaZ0A7fTOkmyTz8yK5noXqZOGJ
o2da4d+/mbaeTUl3t88Qr8T5lVg/FwbNXOMkKF6TviiAG8m+Eu8hZ+s7pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK68ZaW/10trRXa2PjSkuTJZIArMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzleqdO2
ZvaYpCCSOguvKLoKWLrJcP8iX8uJyvcLYgXNANNxO8RCc1l6kepCOwuTskibKpln
6/tIYdpjLVIBZ+cL6qI5OWDY9UBunPeu2pq9LylGfb/bi1tBCc0YG3xUZkl7puib
gS1CmikDlf/pLhMgXuYRJgRcx3UmGmU9HyjH3mf/zRaH6Q/mEOBQPe+JEiO7XnjO
APPUWqupM4PeqwiSuKZDntlwn51yc/K8+ozV1XCl9YvidxDaJRosgPeNzm/EioJl
5Os4saL7zUV/W3/HffjSO0/8cOmSG8K9wKmzKx+T0ZRRe2b9QDEN+OHKgj9DgUMD
ABy/flDDTGbN3w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:44 2026 by rpki-client