Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
File:                     iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json)
Hash identifier:          yx978Uc6c+KZyE+fMznJKH0Sv5DUV5ZRRrG7lGaCG9k=
Subject key identifier:   41:81:84:17:C8:F5:43:A1:78:CD:A6:16:BF:8B:2C:D8:45:B5:DE:50
Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Certificate issuer:       /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Certificate serial:       019EBFC8B3926EDCB7E96C7FD74AA0161142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
Manifest number:          0363
Signing time:             Sat 13 Jun 2026 07:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:01 +0000
Files and hashes:         1: brQWtJ_5TT7HC2FH24mA5Bw_fZw.roa (hash: 6T4RihKvWONSDdVBKM1YXGOOdPCgYZcJRb5CsAL+U7Q=)
                          2: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: VkTJXLhtY3x2styA4Uf7BwOD/kvpKL2YNfK/vO5ULUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:b3:92:6e:dc:b7:e9:6c:7f:d7:4a:a0:16:11:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
        Validity
            Not Before: Jun 13 07:01:01 2026 GMT
            Not After : Jun 14 07:01:01 2026 GMT
        Subject: CN=41818417c8f543a178cda616bf8b2cd845b5de50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:55:69:76:5a:de:3c:e2:ea:a1:f8:35:72:
                    62:7b:df:63:95:af:cf:57:0e:bb:85:d3:59:38:f4:
                    e8:02:1d:c1:ae:b4:b0:9d:a6:69:87:84:4f:6c:19:
                    08:64:82:85:1c:a5:ca:3b:bf:44:2e:68:a6:8a:b0:
                    7c:d9:f6:7c:c0:f8:60:e4:88:15:0f:7a:f6:d0:c4:
                    1a:8c:ad:2d:11:8f:a8:dc:b8:09:30:06:22:ca:85:
                    07:47:c7:cb:8e:d3:8a:1f:9f:fb:55:8b:e8:f4:73:
                    18:d4:38:af:29:a5:95:d0:f2:13:5b:2e:b1:18:13:
                    7e:1e:b1:88:fd:55:d9:af:69:cf:da:5a:59:aa:aa:
                    47:ae:a3:bd:52:bc:82:89:19:24:23:0d:16:23:18:
                    b3:43:b8:28:94:0f:b2:01:9e:a1:34:05:ab:74:3f:
                    69:9a:3e:a5:8f:3b:e8:88:b4:75:2e:f0:1a:a2:6b:
                    3f:93:35:7c:ba:7c:3d:a2:c9:fc:83:97:a4:c3:5b:
                    a8:d2:68:94:e3:e5:5b:6c:19:ed:48:dd:a7:f1:5e:
                    f9:a6:cf:ed:2b:d8:40:d7:94:e5:9a:d2:ff:2d:42:
                    17:9d:82:63:25:c5:e1:eb:60:55:fe:df:7f:59:8b:
                    32:0c:5a:95:78:cf:7f:8f:86:91:02:b2:97:4e:f1:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:81:84:17:C8:F5:43:A1:78:CD:A6:16:BF:8B:2C:D8:45:B5:DE:50
            X509v3 Authority Key Identifier:
                keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:78:b2:e4:3c:b2:db:84:3a:af:f7:66:bc:42:0d:f9:de:23:
         0e:59:b6:8c:9c:09:46:14:9e:0c:d4:17:1c:87:8c:be:ee:32:
         bd:31:8b:b4:89:1f:a7:48:38:ea:88:14:90:db:c3:90:1c:91:
         ae:a7:00:f6:2a:36:75:e1:4a:d0:9d:6b:c7:cf:19:ba:80:8d:
         a0:a7:d7:b9:f3:45:60:4f:5c:12:f8:8c:cd:ce:ff:5c:8f:57:
         3a:96:38:78:85:38:91:84:3f:a2:fa:ec:a4:c9:10:4f:e5:a2:
         fb:64:23:ee:a5:22:0f:01:31:3a:0c:c7:9d:7c:16:c9:6f:b0:
         1d:84:02:95:52:88:a3:02:3e:94:cc:a7:f9:63:f2:e0:da:83:
         da:4a:c3:9e:4b:59:25:8a:b3:b8:91:0a:46:2c:ed:41:b6:9c:
         f5:ef:e5:f8:7b:fe:79:bd:ba:63:f9:ca:27:dd:93:d0:c1:c8:
         c7:2a:4b:26:65:a8:07:93:f9:d5:60:be:22:99:c2:3d:0b:18:
         b4:05:3e:01:d5:6b:e2:3a:31:1a:01:e6:47:47:8e:c0:90:9e:
         4a:96:ba:11:83:4d:7f:ce:38:88:03:fb:7f:6f:a8:da:93:7c:
         d1:3f:eb:84:5c:f4:af:04:73:13:80:04:dc:dd:c4:50:77:01:
         b0:2d:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:21:29 2026 by rpki-client