Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File:                     LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier:          NLA/8QKd3daBNdNA9PraassKOcgXLa1pYNo/b1dmiBA=
Subject key identifier:   48:7D:D5:D3:A7:54:18:6C:8F:8D:1C:4C:75:43:1A:61:7C:AD:C5:26
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer:       /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial:       019EC3DC93304966ADD06713F4B7FA050046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number:          195E
Signing time:             Sun 14 Jun 2026 02:01:13 +0000
Manifest this update:     Sun 14 Jun 2026 02:01:13 +0000
Manifest next update:     Mon 15 Jun 2026 02:01:13 +0000
Files and hashes:         1: 3wuiCij5qtORMNXWWGeF1LYERZs.roa (hash: 524skBJUgutH4M3bafS4opDM/U9Zv4uQ0hTvbNYnIpA=)
                          2: 5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa (hash: YqWnSp/2B+fp6RrZ2Pclvw+NGcH0NOeomRkzMXJfv2U=)
                          3: 6oUVf4YojdnKJI23FjW6Uxu5qpo.roa (hash: 6Y30jRs+1MOBeMJ5NwM5lbTcqPYPzsKJHmKP4y+KYMA=)
                          4: BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa (hash: 5wX5ABs7jXHAcsj1rTpIdy5eRi1XpbpjW+Bwyv+iY8g=)
                          5: Igw79Hirn6BerFTScZqANVebbcw.roa (hash: s/c4WsTRw0gB++CU7Zxa2TA6Q87TbWunDFReO1/vB+w=)
                          6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: eG2LjeonbsyOIoBLovplkcaP7qm8RFAsnqSWvnqUp7Q=)
                          7: n1EKDChFOuZuWL84rj73IB-jcv8.roa (hash: Sr227BztaPfHnzMCsINngmZlpDLFQ27p1oMjIVATl88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:93:30:49:66:ad:d0:67:13:f4:b7:fa:05:00:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
        Validity
            Not Before: Jun 14 02:01:13 2026 GMT
            Not After : Jun 15 02:01:13 2026 GMT
        Subject: CN=487dd5d3a754186c8f8d1c4c75431a617cadc526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:29:9e:0b:1f:42:59:8c:86:a3:aa:3a:01:
                    41:09:e7:fe:0e:35:a9:78:34:34:bc:c5:c9:79:18:
                    0d:f5:a1:8d:10:6f:be:08:9e:a7:54:a6:e6:29:19:
                    ea:db:2f:aa:09:5f:37:f8:d4:78:06:64:19:24:e0:
                    f3:b5:9f:b3:01:e8:15:09:54:2f:45:63:fb:49:bb:
                    03:bb:a1:c8:b4:05:3f:1b:52:7d:2d:a4:bb:4b:12:
                    0a:39:31:ce:49:d3:5d:d6:36:a9:a0:b5:0f:b4:8e:
                    a1:6d:ef:f3:a4:c9:c9:48:10:33:e4:fa:c3:67:94:
                    2f:ab:fe:e9:13:ce:55:49:8d:8a:29:76:f0:d5:6f:
                    ac:ea:3e:69:ef:77:d1:51:f5:98:c8:9a:bf:14:0d:
                    cb:f2:ed:65:23:f0:7b:c1:65:ba:eb:8b:d9:3c:2d:
                    0e:dc:a0:7a:40:72:61:8b:2e:38:98:75:8b:40:34:
                    11:b5:44:97:f4:97:24:7e:64:4d:3b:24:ca:82:7a:
                    dd:d3:9e:01:46:c5:49:91:99:4d:70:e5:2d:aa:a9:
                    20:52:62:3f:15:1e:e0:f0:b3:9c:ec:1c:b3:b4:48:
                    88:a0:52:26:87:ce:91:8a:71:d7:9a:86:e5:30:f2:
                    93:cb:96:eb:cb:a0:07:c4:b8:81:4b:f0:32:10:73:
                    da:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7D:D5:D3:A7:54:18:6C:8F:8D:1C:4C:75:43:1A:61:7C:AD:C5:26
            X509v3 Authority Key Identifier:
                keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:42:c5:c9:67:c9:45:e4:d3:13:d3:b8:8f:36:68:dd:a9:23:
         4f:b6:8d:5c:b3:12:2e:ec:8b:0e:9e:29:31:10:fa:44:a0:38:
         9b:d4:45:f3:63:30:0a:f4:24:91:02:7a:cb:ad:b1:39:a7:8c:
         09:d1:7f:d6:c9:c5:22:24:99:7b:29:4b:98:d6:60:ea:ae:b2:
         a2:d1:3e:70:18:69:49:26:16:56:99:b7:15:2d:50:55:89:3f:
         b3:8a:a0:93:c0:a7:11:5e:f9:a1:f9:78:8e:fb:4c:40:ff:9f:
         34:eb:64:2d:ba:64:6d:b6:f5:8f:78:7c:3c:4c:ae:81:55:88:
         bc:16:b3:7c:a7:b6:f7:c9:2e:c0:b1:ab:b2:f1:66:32:c5:ae:
         8f:b7:cb:9c:b4:0f:5b:89:61:4b:2a:38:a0:f8:6e:f5:65:53:
         40:a0:2d:d5:92:73:04:bb:51:75:03:3d:ef:12:ae:1e:4d:7f:
         85:1d:c4:b0:41:6d:77:9a:d0:71:31:f3:22:72:ab:2f:cb:a2:
         f5:aa:f0:bb:cc:01:d8:0c:1d:63:76:8d:55:61:c4:95:65:3f:
         23:14:6c:46:5f:1f:4c:70:22:29:39:a1:f2:a8:b9:5f:5a:a7:
         7d:01:89:6d:58:8c:e7:2f:ca:47:a5:12:bc:fb:08:f8:f5:b2:
         e9:36:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:10 2026 by rpki-client