Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File:                     LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier:          Qnh/shqMTyYEHCEKd1nBAiG5MBvR6U0bvU1BG/XO8Ug=
Subject key identifier:   4F:82:03:06:B3:50:9E:13:67:60:E4:04:A5:AD:94:DA:00:4E:45:CC
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       019EC06D455BFDD2AD9F915C77DB34402227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 10:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:47 +0000
Files and hashes:         1: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: Za7j5rhGN4muNNThi7u/64rOQJoyC8ztxWyPylyuSEU=)
                          2: PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa (hash: RoukLN17HEVFuKCJd4uqal1toMgfNC1RsX/IX0RX0fY=)
                          3: ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa (hash: /U4sk1hEfw6QielSTTSNVHXW385f6r5x3U3PzQsHic0=)
                          4: _lZzPK9uWMwoSBp8I6Oz0H5otFM.roa (hash: HhqN6YMYlZ3P1sgosME+uE6us2GmXOviN/kysVznFCI=)
                          5: qVl9UPtcOfv2GnXxXOewgnePOCY.roa (hash: Ls9yx6jQRN+6skTSMeFCiw+2fZmjJYWCP94aDC2pEzQ=)
                          6: rdJ8xXk5mnbp3JUsMack9bv5xiI.roa (hash: D2xipsYNPUahyWKXqjJrN51ikNliYwMKQLyig70LUbA=)
                          7: ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa (hash: qw3dBH90auYZSvCUgIiKsoKHtmICDEf0vkVYNxSJ9/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:45:5b:fd:d2:ad:9f:91:5c:77:db:34:40:22:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Jun 13 10:00:47 2026 GMT
            Not After : Jun 14 10:00:47 2026 GMT
        Subject: CN=4f820306b3509e136760e404a5ad94da004e45cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:67:5b:70:36:1c:f3:e6:3e:05:03:51:5b:
                    e6:fb:dd:b7:1c:7c:d9:22:0c:21:6c:d5:ba:ec:d9:
                    a6:2e:1b:a3:f6:1f:e1:a9:14:a9:24:b0:7b:12:13:
                    e5:8e:a6:c7:86:1e:89:b1:ca:b1:5a:14:2e:f2:e6:
                    df:02:f6:d1:40:a3:53:1a:ba:57:18:1d:91:cd:db:
                    b1:86:3f:0a:fa:c4:2f:81:30:69:17:04:59:ae:c4:
                    c0:6e:00:80:46:2d:19:b4:4a:21:d5:99:84:f8:8d:
                    ef:d6:55:0b:2d:b7:48:0e:3b:47:59:67:90:55:44:
                    a6:96:7e:fe:fb:04:af:8c:a7:02:25:9b:48:4f:af:
                    87:2d:51:ee:77:ef:f3:bb:b6:4a:d1:1f:92:28:49:
                    08:f2:be:c9:e4:38:10:74:a5:1b:38:b7:cd:8f:bb:
                    88:db:4c:26:5e:b2:99:b6:17:99:f2:4b:a6:b9:75:
                    b0:28:c6:08:8b:43:af:d6:68:b3:83:ef:6e:43:ea:
                    14:ee:70:7d:82:da:a2:ac:28:cc:b7:28:42:a3:ff:
                    04:ed:c4:72:15:54:1b:a0:30:5d:fd:40:92:5d:00:
                    3d:e4:3d:83:d3:1f:65:45:16:36:2c:d6:75:4a:c3:
                    d9:6d:9e:ae:4e:74:6d:54:b6:16:13:84:52:cf:af:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:82:03:06:B3:50:9E:13:67:60:E4:04:A5:AD:94:DA:00:4E:45:CC
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fd:8c:ad:10:bb:ee:ce:3b:7f:ff:24:03:15:52:90:45:b0:
         7c:66:4e:af:70:da:e1:e2:15:1a:8e:7a:9f:b6:c2:15:fd:9a:
         2a:de:32:b4:14:5f:ef:8e:1f:ff:32:40:52:ab:c4:86:90:47:
         ac:1e:dc:d7:5e:6b:64:43:db:86:e2:0e:1a:ba:a8:b4:43:9c:
         f3:66:02:5e:c3:22:a7:c6:5c:d3:46:02:62:5b:a7:d3:f3:8c:
         51:e5:d4:a7:51:b2:2c:76:ef:66:d8:d6:82:40:d2:5e:5b:fe:
         31:8f:11:2f:e3:d4:46:74:f1:6d:b3:c6:1d:b1:41:7d:01:a4:
         ae:f8:0f:ec:bc:1c:aa:f0:cd:f1:e7:63:ee:ed:45:3c:3f:fb:
         ec:21:1a:a0:ca:42:a6:de:c6:a9:85:37:e0:66:35:d2:d0:89:
         17:08:18:54:7b:9a:d6:7f:c0:63:53:45:58:ea:84:55:8d:18:
         24:93:c4:b3:cf:8c:bd:81:6a:56:2c:b2:da:c2:9e:21:b7:94:
         07:9b:8e:df:c2:28:b8:1e:ec:86:e5:e7:a2:4a:30:1e:bb:01:
         17:c3:a4:07:64:93:8c:bf:d9:b9:13:2e:23:0c:87:6c:25:5f:
         15:16:b4:6f:57:56:54:d6:0a:2f:ca:f8:a8:b0:b8:b9:95:cf:
         0f:1f:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:35:03 2026 by rpki-client