Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File:                     iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier:          fTsDd+6bAjiTHdHLnRAooTGwezYeAI8OML5Eb+LOwd4=
Subject key identifier:   EF:81:86:90:9D:49:1C:9E:01:FA:DF:EB:52:6B:5B:DB:5B:35:70:33
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer:       /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial:       019EC1B70BB9DE27E79FBAA85408C29C6D94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number:          0364
Signing time:             Sat 13 Jun 2026 16:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:59 +0000
Files and hashes:         1: brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa (hash: 6T4RihKvWONSDdVBKM1YXGOOdPCgYZcJRb5CsAL+U7Q=)
                          2: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: RAZCo9DxNqOBPDYJ1xh/P9XAsrZazXeCfqOPkoa1oss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:0b:b9:de:27:e7:9f:ba:a8:54:08:c2:9c:6d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
        Validity
            Not Before: Jun 13 16:00:59 2026 GMT
            Not After : Jun 14 16:00:59 2026 GMT
        Subject: CN=ef8186909d491c9e01fadfeb526b5bdb5b357033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:36:ec:fd:be:ed:c1:a2:8f:94:26:6f:aa:e5:
                    a6:1e:79:f9:e7:60:88:d5:b0:dd:6e:5c:35:bd:ca:
                    56:12:9d:6a:c7:41:88:4d:cb:a8:b3:e3:ea:0d:22:
                    83:df:d0:c6:be:fd:ee:d5:9b:35:51:29:05:3f:0c:
                    c2:8a:ea:01:a9:71:60:93:e0:91:cd:47:e5:9a:4b:
                    b1:3d:2f:38:5c:6b:a9:60:99:a3:d8:8f:ee:54:5d:
                    e3:68:bf:ff:b3:2b:c9:47:b6:1c:12:73:43:a8:fa:
                    1d:6d:5f:34:f0:0a:4d:9e:18:2f:b2:d4:11:d8:f7:
                    e5:b6:cd:6a:ac:00:82:d3:42:d4:07:99:85:e3:7c:
                    92:07:cf:c4:86:ba:4e:7f:07:dc:4a:45:56:7c:0d:
                    1c:21:fd:11:3a:50:a6:ac:ad:ab:ac:6b:02:2e:4c:
                    69:4d:e9:e1:4a:f1:37:2c:28:c5:72:fd:5d:71:fa:
                    89:62:ae:c8:71:7b:8d:ea:f0:6e:ca:53:fa:a3:b3:
                    b3:c6:03:f5:a6:1e:94:fb:ef:fc:15:f9:cc:55:16:
                    b8:5f:d4:67:ed:b6:67:05:0c:0f:52:09:9e:cb:b2:
                    22:f9:53:9f:1b:ea:ac:e1:b2:40:f3:2a:70:4f:0e:
                    54:90:da:10:f6:da:26:76:60:20:e7:02:a1:f6:65:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:81:86:90:9D:49:1C:9E:01:FA:DF:EB:52:6B:5B:DB:5B:35:70:33
            X509v3 Authority Key Identifier:
                keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d5:8b:83:d4:90:a1:90:0c:52:ff:48:25:96:01:5c:e8:04:
         ec:92:66:e1:20:f1:a0:d6:7b:fa:49:d5:b3:22:0d:60:a2:d0:
         ca:bc:2f:6e:60:7d:0c:57:72:f7:bb:55:7b:69:8d:6f:34:be:
         eb:9b:6a:30:53:0f:94:d6:12:c2:93:85:ac:93:1a:74:32:44:
         5f:f4:78:d0:83:26:e6:f4:b0:5b:36:05:63:de:8f:b8:6c:36:
         c3:3b:fd:70:1e:e6:97:ef:b9:c5:7e:1c:3e:b3:c1:e7:b4:be:
         60:03:21:10:ec:d7:f7:8b:83:8d:d7:08:1f:ac:25:e1:42:da:
         c9:ee:41:4a:2c:a1:92:09:e5:c9:54:ef:4e:46:27:b6:21:4f:
         b5:8e:b8:e9:07:5d:a1:d4:32:ec:42:bb:db:14:eb:b0:08:6a:
         01:88:a3:6e:59:53:9f:3f:60:1a:01:97:65:a4:01:ff:e2:23:
         82:3f:a8:52:c4:d7:c8:b2:26:2b:c4:29:82:9e:30:bf:a2:74:
         b2:94:b1:1b:9a:53:ca:25:d3:16:25:40:32:01:b4:52:01:84:
         43:16:53:a9:1b:35:bf:b9:eb:f6:7f:e4:2f:e9:f0:1b:5c:7b:
         74:25:93:89:8e:92:4d:ec:1e:4c:fe:ee:74:b0:de:ea:6b:cf:
         58:8c:74:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:36:15 2026 by rpki-client