Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File:                     cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier:          X0YRFQx7jbTElZfvhdaRfM3gGHjXVax4QicO9LQ00yY=
Subject key identifier:   F1:58:2E:40:AE:9D:90:D6:AE:DC:62:5A:8E:C3:BA:F2:FC:7F:EC:21
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer:       /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial:       019EBF9139A3CB256F18F701A5E6AA8CF15B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number:          15A4
Signing time:             Sat 13 Jun 2026 06:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:26 +0000
Files and hashes:         1: ZRj2hX60XuM05a4vfNo-Pv7YmB0.roa (hash: InsWciE0zUkS0m+rNOT/nz98wQ4hGtre1IAaZoW7D1g=)
                          2: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: QgC5WbmL17VRzD8QvBgEvE0btlNYHv9MFGoARbkYrrI=)
                          3: lbi2EEOv7Zrhga3le8zAYXKzasA.roa (hash: cxSzMHs1P7K5DFoalN/ZGFsw0iciyI3MRqOB+G9rhGs=)
                          4: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (hash: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE=)
                          5: ugJS22ubb1YAQxxSrPhzSyT4d4g.roa (hash: SMm0KdkJcDZcOqPotbm0PXIQqsivUC/ILvOz2gqm9+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:39:a3:cb:25:6f:18:f7:01:a5:e6:aa:8c:f1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
        Validity
            Not Before: Jun 13 06:00:26 2026 GMT
            Not After : Jun 14 06:00:26 2026 GMT
        Subject: CN=f1582e40ae9d90d6aedc625a8ec3baf2fc7fec21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:85:96:82:f6:2c:4c:7c:98:83:4e:e0:00:
                    67:5b:ab:94:84:66:23:9a:97:91:8c:21:86:b0:30:
                    50:e0:3d:0e:e2:6d:43:d9:66:32:06:20:15:a6:0d:
                    78:b0:38:96:0b:f3:fd:42:fa:5b:1d:1e:a4:2b:ed:
                    2f:a2:cb:fa:96:fd:cd:74:95:6a:55:0b:d4:4f:33:
                    c9:7e:13:f4:39:c7:ce:c8:93:50:12:d4:0c:4e:b5:
                    98:18:8c:6b:54:7e:82:95:38:99:78:c2:d2:be:2f:
                    97:57:13:95:22:1e:e2:1e:2a:81:19:43:de:e3:17:
                    94:98:7a:7a:aa:9e:ff:4c:09:02:ee:a6:d0:4b:c3:
                    6e:76:16:7a:c0:6e:b7:a2:52:57:70:08:9d:9c:31:
                    76:3f:4e:3d:22:0b:df:19:0d:96:7f:79:ff:fe:b4:
                    f3:4b:e1:90:d5:76:76:7d:de:a7:e5:ff:12:ad:92:
                    03:b3:37:f9:d9:71:31:1f:f5:41:b5:ac:01:d2:74:
                    29:55:dd:a1:98:cf:3c:cb:c5:a6:cf:22:8c:01:4f:
                    ff:51:8c:c0:24:33:0f:c1:b9:e8:34:1c:16:38:74:
                    86:3e:0c:e4:0e:7c:d1:85:e2:2b:51:f6:da:73:80:
                    50:65:d8:76:07:70:e0:27:53:87:76:e3:cd:b1:93:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:58:2E:40:AE:9D:90:D6:AE:DC:62:5A:8E:C3:BA:F2:FC:7F:EC:21
            X509v3 Authority Key Identifier:
                keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:c7:4c:05:e9:7a:fe:ef:76:c1:99:75:48:6f:3b:21:6f:
         44:a4:b9:37:06:d4:ae:3e:31:f4:20:22:d4:79:7e:e4:64:f3:
         8d:9c:b6:cf:68:7d:39:89:65:b2:cf:85:2d:2e:b3:ff:e8:5a:
         60:99:cc:82:93:61:5c:bc:c6:78:bd:ec:cc:e1:3c:8f:41:ef:
         d4:79:bf:d3:87:34:40:10:4b:6d:56:b2:fe:6c:07:c2:e4:d3:
         d9:ba:e5:15:10:1e:18:72:71:20:b0:a8:97:1d:f5:db:38:63:
         5b:36:47:38:49:dd:31:85:cb:f8:45:4b:fa:7f:73:f3:48:4c:
         eb:9b:9d:29:c4:c4:76:89:80:2d:0e:f0:9e:34:db:10:4a:fc:
         27:6c:bd:11:04:d0:28:94:58:84:63:da:c7:47:27:1c:48:5e:
         58:fe:94:16:a0:bb:af:17:ff:da:c9:b4:9b:2e:22:9b:ed:29:
         6a:59:d7:ab:c9:fc:ef:b0:41:6d:45:25:56:d4:16:fc:49:96:
         9f:e6:80:61:70:7e:11:58:a8:a1:97:1f:9f:f5:0e:6c:2f:3f:
         f1:d0:19:7c:a7:64:5c:52:74:47:95:ea:34:39:df:c8:01:f0:
         11:ad:8c:5e:7a:82:51:86:db:42:f1:0d:52:fc:02:3b:ec:52:
         c7:62:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:22:48 2026 by rpki-client