Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          j1Euc2VTPT2OjTfrYC/nvdhkf0x8Hrou8p56gdcqg7M=
Subject key identifier:   DB:04:57:AD:17:99:B7:C7:EA:31:B4:02:CA:46:41:99:93:34:51:07
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       019EC25BD59946C637353262BCD1DB2083D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          0BD3
Signing time:             Sat 13 Jun 2026 19:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:58 +0000
Files and hashes:         1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: ZDM86WSaIX4wL/ZPPu/H8jCi8ukwbR/vvM87jiqLMRw=)
                          2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:d5:99:46:c6:37:35:32:62:bc:d1:db:20:83:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: Jun 13 19:00:58 2026 GMT
            Not After : Jun 14 19:00:58 2026 GMT
        Subject: CN=db0457ad1799b7c7ea31b402ca46419993345107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:1a:32:6e:72:b5:00:75:40:d6:f2:04:ff:
                    9a:02:c1:96:b2:ac:c9:69:2c:c3:c7:a7:03:a0:5c:
                    5f:95:b0:b8:97:bd:78:4c:86:7a:25:fe:d8:f3:67:
                    bc:30:42:44:a7:d5:d0:22:bf:0f:92:17:86:ce:19:
                    26:bf:52:42:f0:00:a3:83:e3:88:91:64:64:76:e0:
                    4a:83:95:b4:cc:7d:d3:24:70:af:8c:ab:86:f6:ec:
                    23:a2:e2:b8:14:33:f0:5c:88:7b:33:78:dd:6c:15:
                    d4:fb:f8:28:03:41:ee:d5:a6:40:4b:c3:cf:9f:f8:
                    b6:8c:7b:ca:fe:70:b1:e2:b9:1c:a5:d5:d7:aa:9b:
                    66:db:fe:f7:81:03:09:05:40:85:8c:a1:81:f7:ed:
                    4e:ab:99:aa:50:e8:b1:fc:94:21:18:46:db:8f:1d:
                    b8:96:9a:fc:4d:d6:b7:77:f7:cc:bd:e2:2f:84:f7:
                    20:e2:78:8d:be:39:d5:c7:a9:6d:c4:d9:3d:0c:8a:
                    33:f9:e1:f4:a0:1d:51:4a:c1:03:c8:64:af:d5:16:
                    db:68:88:8f:fd:72:03:ab:5d:2f:4f:5a:13:ca:8f:
                    79:63:57:92:01:a2:d7:e6:e5:e9:dc:54:e0:f0:3f:
                    0b:4a:70:50:04:03:f6:5d:8a:2a:c0:8e:7a:25:22:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:04:57:AD:17:99:B7:C7:EA:31:B4:02:CA:46:41:99:93:34:51:07
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:93:dd:6e:48:81:05:e6:a1:ca:d9:c6:9c:29:69:fd:2e:78:
         0f:48:c2:3e:c4:bf:80:bd:47:29:fd:57:7b:f0:2b:2c:79:39:
         6c:ee:af:2d:91:7b:15:f1:e2:ce:e4:c3:9e:e9:0e:8b:ba:ab:
         55:00:1f:4c:95:f1:06:fe:00:0e:9d:fa:3f:3d:04:3b:2c:38:
         9a:69:17:15:7b:c7:92:0b:a8:a5:bd:cb:02:2e:c9:7e:aa:b2:
         0f:3d:65:86:d6:98:cc:17:22:6c:c1:67:d9:3e:56:10:51:ab:
         4a:88:fa:f4:65:ea:f2:89:b0:0c:71:f9:3f:c4:64:0e:1b:90:
         f9:4e:c1:e2:11:ec:b3:c2:98:77:9a:32:95:f8:30:8f:78:bc:
         f9:34:07:f0:d4:80:00:cd:01:fb:f8:e0:3c:2c:2a:2f:fe:e1:
         87:12:87:a2:ff:eb:b3:06:8e:e7:b9:da:84:b0:e4:cf:a4:2e:
         ea:b8:b6:b7:aa:a2:1e:69:e7:18:09:cb:6d:78:79:04:40:6d:
         f4:56:e5:cc:e0:0d:68:16:8b:d0:98:c9:00:6e:cc:f3:0a:67:
         59:9f:34:b7:22:99:86:65:e6:c3:02:85:ca:22:6c:37:ed:ee:
         ee:53:5c:2a:48:e7:21:cc:86:c8:a1:9a:e3:d5:18:cc:15:22:
         35:e1:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:54 2026 by rpki-client