Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File:                     LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier:          gCPE6ECHnbhNi99N/rvF5BN49cGkUteJd/tTOHp2G+Q=
Subject key identifier:   2B:B8:BA:83:E9:21:C6:CA:24:4E:6E:A1:9E:E9:F4:82:F9:B5:AE:02
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer:       /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial:       019EBEB649CEFB381389AE98B90CF2F08C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number:          1304
Signing time:             Sat 13 Jun 2026 02:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:17 +0000
Files and hashes:         1: It7uM3Rh24ZsaT0gP_5DTgns11A.roa (hash: ygKGw/KKIh+Ljlm07a0ZbILTTd125kn6NartFxH8sag=)
                          2: K4tPBn3mDHxWQQ0mC5UfSt8RbNI.roa (hash: EPXhFOqzbmGAC3xjCqN6fTup4RvNIb3pcFL4UJPyUsU=)
                          3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: ImHxrdyC+ybOGIw++Ayh56dHIpbQ+kTc6hyNCpV4Nso=)
                          4: k_oJvHDBdkcghP_1JMBPzqmqbTk.roa (hash: TNK8uQBOEOR3wyZ9LMW27yN2zoLPzBis8BAPSJ0G5tg=)
                          5: rFArsoFoYLfY2C4kISkWl1SGheo.roa (hash: eYlc685oKXF5uazF6hY6BaH41ateFLDviGpvTWxuxyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:49:ce:fb:38:13:89:ae:98:b9:0c:f2:f0:8c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
        Validity
            Not Before: Jun 13 02:01:17 2026 GMT
            Not After : Jun 14 02:01:17 2026 GMT
        Subject: CN=2bb8ba83e921c6ca244e6ea19ee9f482f9b5ae02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:12:7a:5c:4a:09:d6:b0:39:6a:b0:c7:5a:
                    51:4b:71:fd:01:68:2d:7f:f2:74:f3:04:9b:35:af:
                    b8:06:65:89:11:97:86:4f:04:c9:87:b6:96:4c:6e:
                    c2:88:04:16:5c:0d:e3:1c:5b:a4:3e:bf:9b:51:1a:
                    3f:bb:af:69:06:ec:e7:2d:ac:06:c5:3d:2a:38:17:
                    5e:e3:3d:e0:30:28:50:14:38:68:8b:f0:76:b3:99:
                    a0:2b:b5:04:f8:18:95:24:42:e9:23:86:df:13:98:
                    65:8d:8d:cf:4f:8d:0d:5b:47:58:73:f6:9a:65:d5:
                    fe:4a:8e:a8:31:95:4d:e1:f1:ad:13:83:18:85:e7:
                    e9:2e:4b:53:bb:f4:ad:62:41:f2:1a:43:87:59:a6:
                    0a:8b:1f:e2:3f:bf:16:39:05:b4:cf:d8:a1:5b:32:
                    64:8f:4b:a8:fa:ea:fc:99:cd:f0:bd:85:c9:9e:f3:
                    20:4e:ad:e5:74:a7:a2:78:ac:a9:30:7c:d2:09:43:
                    4e:3a:5d:08:62:39:cc:c7:8e:88:b0:43:94:7f:4a:
                    a8:cc:71:32:eb:91:15:44:76:33:9d:7e:ff:cf:0d:
                    e3:22:25:b1:7d:ca:e0:a3:07:28:b1:55:59:85:b5:
                    6b:e0:df:49:b5:c3:e5:a6:a5:7e:d7:45:e1:7c:1f:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:BA:83:E9:21:C6:CA:24:4E:6E:A1:9E:E9:F4:82:F9:B5:AE:02
            X509v3 Authority Key Identifier:
                keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:4b:c2:ad:e7:c0:60:0c:46:38:e5:0e:5b:ca:7e:c2:53:
         b6:d5:b5:26:b2:3b:8e:ba:31:a4:13:ec:5b:1f:fe:e4:8b:26:
         9b:6d:80:87:c4:ef:f2:d5:e5:fe:09:4b:16:b0:cd:fb:be:d1:
         44:78:ab:77:1f:43:72:9a:7b:cc:fc:c3:49:f6:40:7a:09:66:
         f2:9a:a3:f7:04:99:79:c7:08:63:0c:60:ac:d2:62:cb:ee:34:
         1c:98:97:38:65:4a:db:e3:6c:7b:50:6a:17:29:b3:b4:80:96:
         63:ac:57:ee:fb:1d:d4:76:4c:be:19:74:0c:66:55:21:50:5e:
         16:87:e6:bf:7e:8b:19:d0:a9:19:28:8e:95:e6:80:38:5a:20:
         c3:3b:68:46:85:37:e9:33:a8:ba:c9:e0:cc:a5:80:12:cd:6d:
         07:c0:02:f4:37:e0:62:42:80:f5:2b:7a:bd:ac:65:b3:04:3c:
         1c:03:b6:61:ee:8a:5c:f6:d2:05:5e:40:76:34:6b:39:37:bb:
         2b:2a:f3:6d:62:e7:3c:a8:a7:8d:6c:48:af:99:79:1c:03:ea:
         84:9e:b2:d1:63:01:15:bd:92:53:3b:5b:6e:8f:fb:73:79:e6:
         5d:40:af:36:07:30:1f:87:97:7a:c5:a1:98:d3:89:7f:b9:78:
         ff:0c:13:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tknO+zgTia6YuQzy8IwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjc2YTYxZGNmNGQyMjJiYTY2Y2RhMTk0MzBmNjFlNjEx
ZDhhYWUwHhcNMjYwNjEzMDIwMTE3WhcNMjYwNjE0MDIwMTE3WjAzMTEwLwYDVQQD
EygyYmI4YmE4M2U5MjFjNmNhMjQ0ZTZlYTE5ZWU5ZjQ4MmY5YjVhZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubQSelxKCdawOWqwx1pRS3H9AWgt
f/J08wSbNa+4BmWJEZeGTwTJh7aWTG7CiAQWXA3jHFukPr+bURo/u69pBuznLawG
xT0qOBde4z3gMChQFDhoi/B2s5mgK7UE+BiVJELpI4bfE5hljY3PT40NW0dYc/aa
ZdX+So6oMZVN4fGtE4MYhefpLktTu/StYkHyGkOHWaYKix/iP78WOQW0z9ihWzJk
j0uo+ur8mc3wvYXJnvMgTq3ldKeieKypMHzSCUNOOl0IYjnMx46IsEOUf0qozHEy
65EVRHYznX7/zw3jIiWxfcrgowcosVVZhbVr4N9JtcPlpqV+10XhfB8bNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu4uoPpIcbKJE5uoZ7p9IL5ta4CMB8GA1UdIwQY
MBaAFC1namHc9NIiumbNoZQw9h5hHYquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEt
YTg2YTI0NjU1ODcwLzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEtYTg2YTI0NjU1ODcw
LzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+BLwq3n
wGAMRjjlDlvKfsJTttW1JrI7jroxpBPsWx/+5Ismm22Ah8Tv8tXl/glLFrDN+77R
RHirdx9Dcpp7zPzDSfZAeglm8pqj9wSZeccIYwxgrNJiy+40HJiXOGVK2+Nse1Bq
FymztICWY6xX7vsd1HZMvhl0DGZVIVBeFofmv36LGdCpGSiOleaAOFogwztoRoU3
6TOousngzKWAEs1tB8AC9DfgYkKA9St6vaxlswQ8HAO2Ye6KXPbSBV5AdjRrOTe7
KyrzbWLnPKinjWxIr5l5HAPqhJ6y0WMBFb2SUztbbo/7c3nmXUCvNgcwH4eXesWh
mNOJf7l4/wwTNA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:26 2026 by rpki-client