Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
File:                     laK2pvOHvqbovS6VKiNpCTkrBxM.mft (raw, json)
Hash identifier:          fox68NuH2ln8sqEhI0RQBRN62y3cFBR64BdKkR4awx0=
Subject key identifier:   9A:A2:66:D3:5D:6E:59:8E:3B:BC:93:10:11:83:60:AB:4E:4A:59:57
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Certificate issuer:       /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial:       019EBF5B3C68B398CBC8E592A4AAF160AFEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
Manifest number:          017B
Signing time:             Sat 13 Jun 2026 05:01:27 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:27 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:27 +0000
Files and hashes:         1: QEdTUDegev0KaZfSCuf6zWuoigo.asa (hash: fGncvP1ZkzQxQhxOXkKKZ+OGZeCOlyGt6Cb/L36Th+s=)
                          2: laK2pvOHvqbovS6VKiNpCTkrBxM.crl (hash: YytHpcNrHmyb85DT7Zd7oT7hWDeu8h1GkTWvDM6ixYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:3c:68:b3:98:cb:c8:e5:92:a4:aa:f1:60:af:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
        Validity
            Not Before: Jun 13 05:01:27 2026 GMT
            Not After : Jun 14 05:01:27 2026 GMT
        Subject: CN=9aa266d35d6e598e3bbc9310118360ab4e4a5957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:83:49:6d:40:2b:27:33:5c:77:47:4f:e5:
                    5b:85:32:f2:e8:fd:12:ee:f6:9f:13:b2:a2:c7:a1:
                    db:b9:97:34:db:c3:31:2b:7b:72:e4:89:5c:07:be:
                    72:c8:76:08:ec:9e:01:6d:d9:7b:cd:13:31:3c:eb:
                    8e:fa:07:84:73:09:bb:ae:ca:c7:0a:43:41:84:2c:
                    00:07:ca:c5:f5:51:4f:1a:30:57:00:07:32:02:ea:
                    25:1f:6b:34:44:c7:f2:bd:dd:24:d0:c5:c9:ab:09:
                    7c:9f:9e:19:cd:b3:7e:aa:48:15:5b:00:89:53:bb:
                    3d:34:e8:83:cc:8c:04:e3:d5:01:11:5a:49:8b:14:
                    7e:0f:b8:2b:3b:d9:a5:5d:9a:ba:68:58:6a:f2:0e:
                    5b:fb:0e:81:65:c7:06:26:e3:52:ba:99:27:c9:da:
                    25:b0:39:da:83:8b:d0:cb:f8:c8:62:76:5b:de:de:
                    69:0a:21:13:ac:74:ed:cf:02:a1:8e:9b:2a:72:31:
                    59:7e:43:6e:42:20:40:84:5b:68:24:fd:1c:99:b3:
                    08:ae:45:f2:45:90:e7:89:66:1c:d7:13:7a:55:ba:
                    b7:bb:37:67:ff:58:0c:b7:fd:bf:00:7d:4b:90:20:
                    5c:42:84:cd:a5:d0:ce:7c:be:8b:41:2f:e4:aa:56:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A2:66:D3:5D:6E:59:8E:3B:BC:93:10:11:83:60:AB:4E:4A:59:57
            X509v3 Authority Key Identifier:
                keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:54:b2:e9:b2:50:16:94:ee:19:c8:72:3e:8b:91:94:0a:7d:
         95:a4:08:d8:d9:ac:ce:d2:bf:30:73:b0:a9:66:9b:28:8f:fb:
         4f:8e:d3:4f:bd:0d:8c:93:0b:0e:25:f5:39:e7:61:24:51:0f:
         23:e3:e0:aa:8c:38:79:43:88:10:e3:46:5d:2a:fa:1b:4b:51:
         87:0b:c2:35:e6:b7:d3:ed:39:c1:9a:e5:49:d9:9c:c5:42:c7:
         4e:22:8e:36:c8:a0:8f:2f:2e:46:bd:07:b8:e4:3b:29:9c:f0:
         82:6a:12:61:b4:b4:2e:42:d7:5a:8a:7c:05:c4:f0:f2:5c:c4:
         38:bd:a4:81:57:f2:27:83:87:e5:cc:16:af:22:bd:bf:85:ec:
         52:d4:1c:41:50:73:71:5e:93:76:20:7f:a0:1f:a3:12:15:9a:
         5f:1c:35:0e:39:d6:41:76:b1:63:37:6f:77:f5:65:82:50:40:
         dd:4e:ec:3f:2b:0a:02:e1:87:a2:0a:fb:e6:f0:c7:ea:7b:35:
         ce:1f:f9:39:5d:5a:83:ba:84:47:2c:8c:cd:1c:1f:6c:22:99:
         9f:fa:1c:8f:86:07:b0:77:ff:f7:ee:05:cb:c0:bc:e6:49:51:
         88:06:5e:ea:f5:a9:f1:19:37:3e:7f:9c:9f:a0:d4:77:b4:43:
         b6:f1:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:52 2026 by rpki-client