Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File:                     Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier:          Kbc+JhEZypno+ek7MlZvnBHaA+Oj+4NCemyCUglJ2/I=
Subject key identifier:   C6:69:3A:A6:5F:30:C8:49:31:EF:D1:AA:74:18:83:18:91:81:3E:44
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer:       /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial:       019EC224B983D7A78CFD2E46298DD007922A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number:          1367
Signing time:             Sat 13 Jun 2026 18:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:47 +0000
Files and hashes:         1: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: u8Z+Mw0fPofDc2Dl2geL7aINx915nH0zWtpuO6s2sEs=)
                          2: cxkSmIpEvqEgX4ngmD4597AK9SA.roa (hash: DfRU/sR9mUrJtx0wMuwQ4hVIgyHyvsCZqXVQHIZbmPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:b9:83:d7:a7:8c:fd:2e:46:29:8d:d0:07:92:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
        Validity
            Not Before: Jun 13 18:00:47 2026 GMT
            Not After : Jun 14 18:00:47 2026 GMT
        Subject: CN=c6693aa65f30c84931efd1aa7418831891813e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0f:81:78:10:f0:73:96:43:30:33:08:c2:7c:
                    00:94:31:40:1f:a9:3f:34:81:e6:0a:be:80:28:78:
                    0b:c2:32:88:01:31:58:95:0c:36:b4:51:f1:6a:82:
                    a8:75:e1:58:7b:9f:c4:f0:12:4a:a9:e2:85:3f:ea:
                    08:bb:91:72:b4:fc:01:74:60:68:4b:2e:45:21:54:
                    11:dd:a5:b8:3f:96:d1:c2:02:c3:1f:07:6f:31:7d:
                    36:c2:62:3c:cd:73:9d:63:7a:2d:b3:f1:ad:d3:5a:
                    46:89:01:17:34:01:19:0e:72:a1:65:97:65:1b:01:
                    a6:10:77:ba:29:58:7c:54:ba:da:d3:5a:7f:9a:1b:
                    3c:30:de:62:db:a0:db:e1:ef:93:bd:41:ba:a4:e7:
                    55:a4:1d:21:e3:f6:c9:fa:b3:c6:c2:8e:9b:e7:07:
                    51:d2:e8:a8:87:77:83:0b:39:25:c5:6e:d0:75:38:
                    10:4e:d2:be:14:51:13:64:57:7a:f8:ac:41:a8:3b:
                    11:85:69:7a:ba:dd:e2:67:82:31:0b:b7:8d:2a:45:
                    e0:b3:fd:1f:78:5b:d8:c9:77:54:2b:52:97:0f:87:
                    c9:8d:67:dd:83:18:7c:7a:7f:3c:55:c8:d2:0e:47:
                    55:93:68:20:c0:bf:66:c2:ec:e0:cb:e2:59:ff:4c:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:69:3A:A6:5F:30:C8:49:31:EF:D1:AA:74:18:83:18:91:81:3E:44
            X509v3 Authority Key Identifier:
                keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4a:f4:bb:ce:9a:59:08:83:4a:1d:49:eb:f8:cd:c1:cf:f6:
         99:2b:ec:d6:11:bb:c4:14:1f:48:a0:d9:f5:4a:e5:1b:ea:64:
         48:e8:ed:cc:35:a8:d4:ff:ee:9a:e7:16:f6:99:18:9b:c7:a5:
         a1:c1:ab:cf:5e:ca:1b:b4:05:fb:5d:7a:3a:81:bc:b7:82:af:
         71:44:33:ee:39:c4:87:52:9e:d1:37:f5:0f:ee:37:a6:a8:e6:
         16:88:84:a1:e6:de:b4:1b:70:b1:30:59:06:53:ba:5b:c2:67:
         fb:b7:46:95:21:ef:9d:6c:a4:7d:0d:13:4b:7c:51:ad:49:9d:
         18:66:f5:3b:f3:82:4b:e0:7a:27:bb:62:a0:ab:a3:62:1a:72:
         f0:e3:27:a4:58:a5:76:ea:47:b6:3e:9e:fd:09:3c:79:3c:20:
         d3:12:f0:1b:b3:fd:ca:aa:d9:61:c4:05:99:09:2a:65:59:c4:
         e4:b3:64:6c:df:2a:63:63:44:aa:6a:76:61:48:06:d9:8e:f3:
         d4:de:68:95:3c:62:51:1d:5a:90:0c:68:b5:f5:93:40:b8:aa:
         5e:12:73:e1:d0:6d:f3:9b:e8:98:d4:fe:50:dd:ec:5d:bb:bf:
         a0:96:3f:76:ce:00:42:80:bd:9b:c9:9b:80:79:4d:90:35:f5:
         ce:29:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:00 2026 by rpki-client