Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
File:                     lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json)
Hash identifier:          OKwsw4TyIbL2/431EVtg7MHpjcIKLFcFPC4vgN85DYg=
Subject key identifier:   1E:A1:92:1C:0A:74:5F:DF:46:BB:DF:57:34:B8:6A:31:C0:0B:AD:F8
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Certificate issuer:       /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial:       019EBF5A8BAE719A65D4AFA2523B821A186F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
Manifest number:          09D1
Signing time:             Sat 13 Jun 2026 05:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:42 +0000
Files and hashes:         1: ICqVIuqnGDQ2U9fP3d1W-e4TDf8.roa (hash: 60NTvkE84gguHU2fFEBFq8qOMCvmzn8pCex8KwPB/e0=)
                          2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: p4z3x/jikdylnvVFVsjbjrTHUXnkqKucZEhFRTsU+DM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:8b:ae:71:9a:65:d4:af:a2:52:3b:82:1a:18:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
        Validity
            Not Before: Jun 13 05:00:42 2026 GMT
            Not After : Jun 14 05:00:42 2026 GMT
        Subject: CN=1ea1921c0a745fdf46bbdf5734b86a31c00badf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:71:9a:f9:86:f7:fa:e4:d5:b9:69:fb:d0:
                    f3:0a:65:18:87:d2:72:41:52:14:0c:c4:35:79:97:
                    5c:48:f3:16:7d:f1:3c:6d:c9:ef:fc:f0:28:c2:53:
                    46:3c:8d:f8:47:d0:52:54:43:0d:3f:fe:46:db:88:
                    d9:d6:ea:bd:1e:9d:76:ba:bb:b1:b3:96:92:27:37:
                    fc:c2:ab:e3:e9:ff:70:7a:84:97:3b:40:f1:de:da:
                    de:e6:4f:91:d6:e0:22:66:7c:d8:ea:29:e8:3e:6d:
                    56:4a:db:e3:58:1c:00:1a:b5:50:f3:5c:38:a6:e6:
                    eb:2d:63:0e:bb:16:e2:d4:b6:be:0c:6f:41:11:47:
                    bf:bc:3a:2a:da:fe:6f:c5:02:6c:2e:3d:4b:2a:4f:
                    c7:94:2f:1f:7f:70:98:0c:56:6c:5f:99:a8:d9:25:
                    3c:14:05:d0:9e:9d:34:30:16:f8:77:77:a7:db:aa:
                    0c:20:7f:27:ba:e0:ad:ad:81:63:2d:2d:08:ee:f0:
                    56:8c:d0:d0:75:ba:90:58:e6:0b:40:7b:ac:7f:ee:
                    7f:8d:43:b4:b7:d9:19:c9:cf:be:fc:5c:26:95:4f:
                    78:d5:e5:eb:45:8f:22:c7:4a:79:14:fc:94:52:55:
                    1d:05:04:4a:ad:ff:43:b8:9f:e4:13:ef:88:9c:e8:
                    2f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A1:92:1C:0A:74:5F:DF:46:BB:DF:57:34:B8:6A:31:C0:0B:AD:F8
            X509v3 Authority Key Identifier:
                keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cd:9e:04:92:ef:0d:fa:7e:9a:dc:70:32:ec:ea:7e:ba:c5:
         17:35:46:38:4e:fd:fa:5e:49:a1:fb:97:50:e4:45:b6:e9:04:
         6f:88:6d:83:db:f0:db:cc:86:9b:55:95:37:93:45:d2:53:a7:
         c6:f8:19:8c:43:d1:b1:db:9c:d5:81:df:0b:7c:78:d5:db:0f:
         49:6c:b3:c6:bc:4d:0c:df:0a:4a:82:c0:eb:45:89:01:cf:d9:
         bc:73:01:37:32:ce:59:54:00:1f:94:f6:cc:df:7b:59:53:15:
         be:24:f3:90:70:7a:1e:81:8e:27:d9:59:cb:f6:3d:45:db:66:
         ff:aa:3c:ba:f5:cd:a3:de:4c:50:3c:37:c0:28:46:8a:1b:7e:
         98:a3:92:a6:a4:8d:33:54:87:97:e8:b9:c4:54:79:f7:53:98:
         d0:98:18:e0:53:f2:00:4c:9f:16:3d:31:a8:58:ce:6f:50:60:
         da:6a:f5:45:0e:f0:2c:51:4c:8e:13:07:01:b9:5e:1b:81:46:
         10:00:ec:cc:b9:fe:66:5d:a9:51:be:b0:82:c4:5f:63:c1:02:
         fc:41:69:eb:64:6f:8d:92:a8:26:19:35:3b:73:b5:93:3c:fe:
         ba:88:9c:60:d8:49:9d:95:b3:e4:b3:62:c3:65:b1:91:cc:02:
         c9:8a:db:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WouucZpl1K+iUjuCGhhvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGIwNzFhMDNkYjVkMjMzZDA1YWIwMzk0NTQ4MDA3NzY3
ZjgzZTcwHhcNMjYwNjEzMDUwMDQyWhcNMjYwNjE0MDUwMDQyWjAzMTEwLwYDVQQD
EygxZWExOTIxYzBhNzQ1ZmRmNDZiYmRmNTczNGI4NmEzMWMwMGJhZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraVxmvmG9/rk1blp+9DzCmUYh9Jy
QVIUDMQ1eZdcSPMWffE8bcnv/PAowlNGPI34R9BSVEMNP/5G24jZ1uq9Hp12urux
s5aSJzf8wqvj6f9weoSXO0Dx3tre5k+R1uAiZnzY6inoPm1WStvjWBwAGrVQ81w4
pubrLWMOuxbi1La+DG9BEUe/vDoq2v5vxQJsLj1LKk/HlC8ff3CYDFZsX5mo2SU8
FAXQnp00MBb4d3en26oMIH8nuuCtrYFjLS0I7vBWjNDQdbqQWOYLQHusf+5/jUO0
t9kZyc++/FwmlU941eXrRY8ix0p5FPyUUlUdBQRKrf9DuJ/kE++InOgvaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6hkhwKdF/fRrvfVzS4ajHAC634MB8GA1UdIwQY
MBaAFJVLBxoD210jPQWrA5RUgAd2f4PnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1Njkt
MjY2YWMxMDRmN2I0LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1NjktMjY2YWMxMDRmN2I0
LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfM2eBJLv
Dfp+mtxwMuzqfrrFFzVGOE79+l5JofuXUORFtukEb4htg9vw28yGm1WVN5NF0lOn
xvgZjEPRsduc1YHfC3x41dsPSWyzxrxNDN8KSoLA60WJAc/ZvHMBNzLOWVQAH5T2
zN97WVMVviTzkHB6HoGOJ9lZy/Y9Rdtm/6o8uvXNo95MUDw3wChGiht+mKOSpqSN
M1SHl+i5xFR591OY0JgY4FPyAEyfFj0xqFjOb1Bg2mr1RQ7wLFFMjhMHAbleG4FG
EADszLn+Zl2pUb6wgsRfY8EC/EFp62RvjZKoJhk1O3O1kzz+uoicYNhJnZWz5LNi
w2WxkcwCyYrb7A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:42 2026 by rpki-client