Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File:                     ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier:          FScvBgwnx+MIuHW4Vq6Z2380XrCfx4dzxTjYfopUOKw=
Subject key identifier:   81:98:52:10:96:C6:AC:E3:0B:47:42:AB:FD:2C:BC:3B:12:8E:C9:AC
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer:       /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial:       019CAB33E7BA51E4A1CC5103E5301D0E53DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number:          0D82
Signing time:             Sun 01 Mar 2026 21:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:31 +0000
Files and hashes:         1: efh4js39DAepdcGf-XgcFtA9I2A.roa (hash: Wr//dqxMLdlf0wzZxtHqzTDoNgxS29rM1ry+hkHHkYc=)
                          2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: EkvsrGSQs+F/qg1wdbSD3TsgpL1KnopUjkvYAVxcZ0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:33:e7:ba:51:e4:a1:cc:51:03:e5:30:1d:0e:53:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
        Validity
            Not Before: Mar  1 21:00:31 2026 GMT
            Not After : Mar  2 21:00:31 2026 GMT
        Subject: CN=8198521096c6ace30b4742abfd2cbc3b128ec9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:ab:24:f2:b6:31:81:7e:9e:53:1b:ec:18:
                    22:03:b8:81:f8:8c:6a:79:24:cc:f5:08:2b:f0:22:
                    2b:8b:fb:ce:05:d8:4c:bb:f4:f6:92:37:90:53:db:
                    2a:66:6f:86:4c:67:e2:8e:76:6a:26:98:c7:42:b1:
                    38:86:b2:1c:f0:b3:d2:a7:61:b8:1c:70:77:df:3e:
                    9f:40:e8:14:4d:27:dd:7b:23:46:75:ba:98:5c:97:
                    d8:79:8e:14:f1:cd:36:5c:b5:6c:c2:58:e2:6f:70:
                    a0:a5:22:3d:07:a0:38:d3:5d:0b:3f:d0:40:36:3e:
                    69:25:46:4d:83:56:11:fa:f4:51:c0:dd:97:38:07:
                    80:bc:92:d3:43:86:7c:4c:62:92:1f:a1:d6:31:3e:
                    30:25:0e:1a:41:e6:96:c2:a7:62:e5:4d:4a:68:3a:
                    f1:34:b7:b0:54:5e:2d:7c:d3:b0:fc:bb:dc:45:fc:
                    b5:c4:dc:0e:03:d2:49:77:ea:81:17:05:03:65:6d:
                    f7:24:8f:f8:09:57:12:28:60:31:9b:94:74:44:88:
                    33:a9:ef:9a:38:a3:01:e9:6d:88:42:e0:76:32:2d:
                    e4:46:78:d2:f3:6d:7b:3c:9a:cb:7f:4e:b0:6d:07:
                    a2:5c:9b:ec:9e:1f:a2:4f:3f:b5:60:a4:ff:c6:88:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:98:52:10:96:C6:AC:E3:0B:47:42:AB:FD:2C:BC:3B:12:8E:C9:AC
            X509v3 Authority Key Identifier:
                keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:08:0b:cd:68:9e:b1:92:34:e2:ef:b1:8f:f5:b4:16:b2:79:
         7d:19:bf:96:8f:43:e3:cc:a3:8d:ba:bd:fe:58:4a:cc:d4:ba:
         47:98:70:ce:92:b9:9f:40:e9:d0:59:d8:7a:ff:e1:5b:35:e0:
         a2:99:ee:23:71:57:bc:a0:da:a7:0d:fa:0e:92:a0:f3:a3:0d:
         1c:d6:f4:ab:18:b9:ca:98:f0:12:9f:58:73:fb:35:16:10:8d:
         09:ec:aa:c9:38:6f:89:a3:46:1a:2d:f1:e1:0d:e2:f0:71:52:
         f6:e6:ca:ee:4c:68:e3:9b:c3:72:76:7e:29:8e:e3:16:3a:5f:
         05:02:81:bd:31:db:b2:f2:33:21:b3:e7:c9:4c:75:ca:aa:8a:
         de:f8:33:ae:b5:47:73:42:e0:29:5a:2b:87:42:42:e0:30:57:
         0f:5e:7f:52:5f:33:30:13:1a:5c:f6:dc:54:a7:e6:62:38:3e:
         07:e2:ee:c1:4e:10:35:dd:24:68:d8:bd:13:91:2f:b7:f0:31:
         6b:28:d2:c6:fd:5c:60:8c:9e:e9:b2:d2:44:cc:e6:4f:1e:4c:
         2a:f3:1a:1c:9f:e9:82:f0:39:30:8d:fc:29:2b:f7:33:b4:94:
         d5:40:09:91:12:7d:69:ca:ad:71:0b:9d:55:23:61:2b:8c:38:
         e3:87:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:39 2026 by rpki-client