Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File:                     LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier:          ijwomnmpiHOrizFWPaTlFcLoa/9Xlkn96ZlVy8gX5Lw=
Subject key identifier:   12:58:6B:81:CA:97:AF:5C:EF:B6:DE:73:97:B3:5A:50:8F:2A:C0:F3
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer:       /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial:       019EBF91684B666490759DFC9ADDD3C09D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number:          186D
Signing time:             Sat 13 Jun 2026 06:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:38 +0000
Files and hashes:         1: 9JptdLDcntQOv_LPrBMUCpvGPBk.roa (hash: 73iAqO8mI3K+RtQqfMbur8DNuJybJKZQrci5eZb7C2c=)
                          2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: q55OxZS5ku+TpUV4Kwgb4Urra2omd1IcdHS+C8Nlj9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:68:4b:66:64:90:75:9d:fc:9a:dd:d3:c0:9d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
        Validity
            Not Before: Jun 13 06:00:38 2026 GMT
            Not After : Jun 14 06:00:38 2026 GMT
        Subject: CN=12586b81ca97af5cefb6de7397b35a508f2ac0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:9f:ae:36:03:bb:b4:2e:ee:77:72:ac:5e:
                    86:b2:78:5f:d7:56:29:17:33:b2:18:65:ef:ae:9c:
                    a2:96:18:fb:d2:c8:63:be:5f:7b:98:c1:e3:86:d3:
                    64:16:4b:f2:07:47:52:48:77:ab:56:8d:6f:4d:7f:
                    b0:ae:33:20:6e:d3:11:31:a0:38:b4:d2:1c:2a:fb:
                    de:ed:c0:d2:38:99:38:a7:1e:eb:02:f4:fb:60:1b:
                    66:44:c0:53:39:e3:4b:1a:46:92:c9:62:1e:c0:fa:
                    3e:b6:76:d8:d6:f0:0f:3f:24:c2:36:51:49:5e:73:
                    51:ff:fd:2b:d1:82:47:a1:14:e9:0c:eb:55:08:86:
                    fe:96:12:e4:49:f3:b1:c2:58:00:ad:ab:cc:60:6d:
                    a4:51:13:90:64:ba:01:3d:9a:5b:77:2f:12:32:3c:
                    ea:9e:95:44:dc:96:0f:dd:75:76:0e:55:a8:00:a7:
                    a9:af:ad:3c:e0:1f:4c:e0:7a:58:4d:11:dd:56:1f:
                    89:d4:04:8a:b2:dc:3c:7f:93:96:fe:60:14:0a:43:
                    3e:de:f5:f7:32:6b:83:5f:2e:f6:0d:64:96:76:b3:
                    7c:3a:94:0c:a2:47:99:7b:a9:be:8d:c4:5c:11:c5:
                    8b:c6:ed:27:45:12:9d:67:85:fb:43:4d:1c:68:b3:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:58:6B:81:CA:97:AF:5C:EF:B6:DE:73:97:B3:5A:50:8F:2A:C0:F3
            X509v3 Authority Key Identifier:
                keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d3:6b:93:15:b9:39:30:c4:7c:a0:7a:50:d2:5a:ad:e7:7e:
         61:00:84:e2:05:4f:88:74:e1:fd:dd:c3:c5:1a:96:76:7d:2d:
         fb:af:bc:8a:11:f8:c4:29:26:d9:9c:30:ee:36:d4:9a:2b:92:
         6a:6e:49:6c:1a:1b:42:c5:cb:16:fb:c7:59:55:db:fc:27:f5:
         48:42:ac:1e:69:db:7d:1e:01:19:6d:31:bc:7e:a0:0f:38:eb:
         5d:f5:47:d3:e2:8d:a5:20:0a:bc:59:d3:27:d0:0d:03:33:db:
         4c:9e:0b:ce:fd:0d:c7:b5:9f:29:93:c9:e2:7e:4c:82:54:5c:
         a6:52:0d:bd:d8:79:3d:6a:8c:27:9d:7c:d7:7a:c5:4d:9e:64:
         cd:bb:ec:c5:b1:71:3f:f6:69:ba:ae:37:85:bc:93:62:72:bd:
         f5:83:34:d3:f5:fb:da:d6:e0:69:9e:3c:a4:25:5e:6c:f4:aa:
         68:aa:fa:2f:e6:f9:c8:f6:53:f2:ff:6b:10:ba:c2:25:3a:1e:
         44:45:3e:2d:e0:28:59:ba:fc:73:06:85:3d:98:91:51:97:74:
         0c:d1:40:10:51:43:97:a0:b8:7a:0d:38:b4:52:2c:af:0d:01:
         09:95:ba:07:2c:a8:b7:a9:f0:04:60:f9:77:a2:ba:8e:e2:98:
         a3:ba:d5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:08 2026 by rpki-client