Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File:                     LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier:          z2keFAzF/KUZ3B4HdMy/P7OM8wyq6ez3/j7FNxNNwIs=
Subject key identifier:   0D:52:27:B0:FA:DB:FA:C0:8C:45:48:A7:9C:E5:D3:96:A5:AF:8E:FE
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer:       /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial:       019EC1B67BE064F3E1AC3948287BDD9417C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number:          0BE3
Signing time:             Sat 13 Jun 2026 16:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:22 +0000
Files and hashes:         1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: FWSXbrYX0SHawPm9E0YtlAyzvkRqVlDaz3LJ0a6wwak=)
                          2: Zg9CXZORRCkEDfIdrbdV2Z1djOE.roa (hash: ijvg+VbGDbhkZ0TpavVaie8pzYXStI3SVZx3OuXIsaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:7b:e0:64:f3:e1:ac:39:48:28:7b:dd:94:17:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
        Validity
            Not Before: Jun 13 16:00:22 2026 GMT
            Not After : Jun 14 16:00:22 2026 GMT
        Subject: CN=0d5227b0fadbfac08c4548a79ce5d396a5af8efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:c9:69:2f:5b:52:7d:8a:d3:f0:58:28:90:
                    8f:1d:47:9a:0d:6b:88:f8:76:53:f5:2f:45:d1:18:
                    ed:74:43:ff:28:f6:98:75:40:2d:92:37:21:6e:49:
                    f8:81:37:02:fe:80:d6:75:39:77:37:66:20:40:7a:
                    e3:15:a8:eb:c1:0e:a4:80:c5:47:36:e7:cc:8c:11:
                    1d:ad:1d:bb:4d:d0:9f:be:27:6c:5a:2a:bc:fc:75:
                    9d:bc:17:22:c4:6d:a4:c8:4b:6b:6d:cc:88:45:3e:
                    e5:64:a8:83:53:ec:40:82:a4:9d:5b:ca:2e:2c:f7:
                    87:30:5f:3c:42:83:a6:87:a3:51:30:4f:7e:bb:29:
                    fa:bd:e5:e0:11:c6:ac:bb:f8:72:23:62:54:f8:ec:
                    c2:ab:6e:21:c1:da:17:18:dc:a7:6d:2c:92:1b:d6:
                    55:43:ed:c7:04:ca:3f:3c:c0:2c:92:47:01:31:98:
                    b1:b0:26:3d:ee:c9:19:b6:01:63:2a:aa:05:0e:fd:
                    33:18:cf:7e:35:c6:53:01:5e:3a:eb:d9:a2:9f:c7:
                    2e:7a:bc:1d:ee:12:ee:80:09:45:20:0d:0c:d0:c9:
                    4d:6b:6e:97:72:96:2a:4a:42:59:b5:0c:6e:1d:ac:
                    ce:60:d7:b4:d7:40:88:df:0a:5a:03:72:6f:53:37:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:27:B0:FA:DB:FA:C0:8C:45:48:A7:9C:E5:D3:96:A5:AF:8E:FE
            X509v3 Authority Key Identifier:
                keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:44:10:dd:65:f1:60:68:d9:ab:bb:4a:a3:f6:8d:16:77:
         92:c5:4e:47:97:5f:3c:f4:76:18:4a:e7:05:07:6f:14:64:2b:
         e4:e8:9b:dd:fc:ef:aa:69:8e:2d:4d:7d:88:de:ac:9a:06:fc:
         d7:25:47:18:f9:5c:0f:17:61:88:93:0e:7b:fc:48:83:59:ba:
         35:de:d6:88:0b:84:2f:af:83:08:4e:64:03:fc:20:cb:49:5c:
         e8:dc:4c:d5:75:24:73:c5:51:d5:2f:69:89:e4:be:ad:c7:ff:
         10:29:d8:f6:c0:20:79:79:bb:2a:b3:ab:d6:08:8c:cc:f3:e2:
         39:ac:35:be:d6:74:79:a6:df:9f:e4:f5:4c:a5:d5:f5:b7:b9:
         7c:b3:02:79:02:fc:4a:a3:07:31:22:4f:db:cb:77:7b:13:ce:
         35:e5:82:61:e9:5f:79:7c:f1:21:71:a7:13:7a:61:d6:35:51:
         06:5c:d6:a0:b1:10:db:b3:fb:49:c2:47:38:77:be:64:ad:95:
         e2:01:ab:7b:90:d8:db:15:f8:b9:a1:55:04:2a:2b:c1:66:5d:
         7e:50:72:bd:14:b4:52:ab:d2:80:64:ba:12:e8:f0:0a:ba:53:
         5c:2d:96:5b:12:3a:37:9e:62:64:4f:82:ab:c7:16:8b:4b:43:
         c9:96:1f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:08 2026 by rpki-client