Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File:                     LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier:          NPmW9ByTrpvl1Z6B4EtGKzjaoAOxkiIR9yfkjCrwwwM=
Subject key identifier:   EF:1D:5D:0C:3B:F1:E5:F4:40:D0:87:89:69:D4:43:2B:C4:26:08:DB
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer:       /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial:       019EC3A5CDBA1A963A9B8C1A03F584BB4B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number:          1960
Signing time:             Sun 14 Jun 2026 01:01:23 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:23 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:23 +0000
Files and hashes:         1: 8XJI8Ab5Kn4iGwXJ6PSkR-OvFH4.roa (hash: SgXQOVpKdakFip4Eu8vjLUkRXfKk3oyvAOpf3ZBZws8=)
                          2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: auMP09NKliJ4CLCl0wZHfZhoUtzH22DccN++BrAxJww=)
                          3: WaELHuLYA_1cefIoTQf80xGonys.roa (hash: rib5YkFr/K/aT3PKl0IuD1KkixxMJnJUccJ5z3LdA80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:cd:ba:1a:96:3a:9b:8c:1a:03:f5:84:bb:4b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
        Validity
            Not Before: Jun 14 01:01:23 2026 GMT
            Not After : Jun 15 01:01:23 2026 GMT
        Subject: CN=ef1d5d0c3bf1e5f440d0878969d4432bc42608db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:58:41:4e:ba:9f:d6:2f:36:11:48:fa:65:
                    fb:97:35:02:a4:f2:c7:a7:01:da:4d:92:de:35:3a:
                    ad:cf:fa:b2:6e:9d:4d:df:5c:b4:2d:93:68:23:24:
                    8f:dd:4b:2d:33:4b:07:4d:a0:01:c1:1a:fb:56:d1:
                    ab:d7:e6:6f:0d:83:35:cf:bd:8e:4a:a6:0c:27:0a:
                    9a:47:c9:69:e3:5f:74:85:34:29:31:13:62:ea:5c:
                    4a:10:4d:23:4d:c9:ea:3f:61:00:c0:a9:4b:19:21:
                    80:e2:ae:f5:1e:f6:a5:40:a8:21:ac:4c:db:f4:f0:
                    3d:7b:12:2a:87:7d:a5:af:f2:d2:a7:8c:52:6c:17:
                    6e:38:ff:cf:60:d8:4a:d4:3b:70:c3:df:be:67:c3:
                    b8:7d:9d:42:b4:b9:60:52:14:5d:ec:ce:e7:e7:f7:
                    ca:a0:c2:02:55:b4:95:e5:5b:b3:eb:2a:f8:fe:be:
                    2f:b4:28:4a:40:e7:eb:29:7c:33:5c:9c:31:09:3a:
                    25:9c:81:c6:92:0b:73:8b:4d:5f:53:b4:ee:50:20:
                    3c:70:75:02:ff:a7:c7:fd:c0:f2:19:96:08:a5:ab:
                    fc:47:b6:4b:fb:62:63:fc:f3:9d:5a:80:bc:9f:88:
                    67:87:d8:57:9b:3d:69:a1:5d:d3:6e:c7:f6:69:d6:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:5D:0C:3B:F1:E5:F4:40:D0:87:89:69:D4:43:2B:C4:26:08:DB
            X509v3 Authority Key Identifier:
                keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:62:05:04:0f:81:29:ac:e3:d0:64:0f:46:83:bf:15:0e:8b:
         87:8f:f8:ee:18:f8:43:12:57:c5:63:ae:5b:e4:67:f4:20:93:
         52:38:30:6a:44:98:8a:3d:14:75:11:b2:ae:09:be:64:8e:7e:
         11:d0:d4:27:b3:8d:95:46:41:fa:38:d9:cf:a3:4e:f6:27:6a:
         61:4d:57:76:c4:5b:68:b0:1c:39:d7:ef:36:5a:f7:6a:35:3d:
         3b:82:58:82:96:86:53:34:c8:4b:6f:2c:65:ca:c1:e3:a9:a2:
         9f:27:3a:a9:c9:c8:cb:8f:d6:02:8a:e7:02:95:ed:b2:d8:48:
         f6:00:42:54:ea:4d:11:03:91:a8:7f:7c:7a:bb:09:42:94:ee:
         f9:80:e4:60:4f:5e:ea:c5:99:c3:d7:a8:6a:8f:d8:b6:50:8e:
         8f:ce:25:9a:d4:40:aa:2f:9e:2e:46:c9:8e:b6:92:b4:83:56:
         66:eb:99:bc:f8:1f:65:dd:00:13:3f:34:be:19:30:c5:d6:5b:
         a2:55:49:80:39:80:83:55:78:6c:d7:12:d9:21:3f:90:f6:e1:
         8c:eb:7e:03:73:a2:ef:5f:8b:e2:4a:a5:ea:6e:72:83:af:81:
         1c:99:b3:52:f8:75:1a:a0:12:fb:ca:98:ee:7e:86:bb:d8:55:
         30:99:1f:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Dpc26GpY6m4waA/WEu0svMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTU2ZDRkN2IxZDFhMDZjZTg5Zjc0NmY3OWI2NTZjNzM0
OGM1MjUwHhcNMjYwNjE0MDEwMTIzWhcNMjYwNjE1MDEwMTIzWjAzMTEwLwYDVQQD
EyhlZjFkNWQwYzNiZjFlNWY0NDBkMDg3ODk2OWQ0NDMyYmM0MjYwOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYlYQU66n9YvNhFI+mX7lzUCpPLH
pwHaTZLeNTqtz/qybp1N31y0LZNoIySP3UstM0sHTaABwRr7VtGr1+ZvDYM1z72O
SqYMJwqaR8lp4190hTQpMRNi6lxKEE0jTcnqP2EAwKlLGSGA4q71HvalQKghrEzb
9PA9exIqh32lr/LSp4xSbBduOP/PYNhK1Dtww9++Z8O4fZ1CtLlgUhRd7M7n5/fK
oMICVbSV5Vuz6yr4/r4vtChKQOfrKXwzXJwxCTolnIHGkgtzi01fU7TuUCA8cHUC
/6fH/cDyGZYIpav8R7ZL+2Jj/POdWoC8n4hnh9hXmz1poV3Tbsf2adZX9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8dXQw78eX0QNCHiWnUQyvEJgjbMB8GA1UdIwQY
MBaAFC7lbU17HRoGzon3RvebZWxzSMUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMGI2N2UtMjY5MC00YTg4LTlkMTYt
MjJlOThkZTI2MTA2LzEvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lMGI2N2UtMjY5MC00YTg4LTlkMTYtMjJlOThkZTI2MTA2
LzEvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2IFBA+B
Kazj0GQPRoO/FQ6Lh4/47hj4QxJXxWOuW+Rn9CCTUjgwakSYij0UdRGyrgm+ZI5+
EdDUJ7ONlUZB+jjZz6NO9idqYU1XdsRbaLAcOdfvNlr3ajU9O4JYgpaGUzTIS28s
ZcrB46minyc6qcnIy4/WAornApXtsthI9gBCVOpNEQORqH98ersJQpTu+YDkYE9e
6sWZw9eoao/YtlCOj84lmtRAqi+eLkbJjraStINWZuuZvPgfZd0AEz80vhkwxdZb
olVJgDmAg1V4bNcS2SE/kPbhjOt+A3Oi71+L4kql6m5yg6+BHJmzUvh1GqAS+8qY
7n6Gu9hVMJkfng==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:16 2026 by rpki-client