Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File:                     LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier:          psou9Lo5LCOrlHng/Qtu66RweKrAj+ul1i8rVnU+QN8=
Subject key identifier:   0E:E4:A6:9F:41:C4:9D:14:40:12:D4:E8:CE:28:B3:F3:84:E8:35:7C
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer:       /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial:       019EC0365FD18E3221026A7FBE2D039D25F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number:          152B
Signing time:             Sat 13 Jun 2026 09:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:49 +0000
Files and hashes:         1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: 7VlNnNlbMp9zSp0tOldcpGC5QXsNcRqsxUdr9vn9m+8=)
                          2: PdB7yHgtRY5AbRPzGQ7Kal7stk0.roa (hash: ZfhLG4tdAsP3dDzk6eFVvwC/Pe3dDXcwaTLLVzg2Rko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:5f:d1:8e:32:21:02:6a:7f:be:2d:03:9d:25:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
        Validity
            Not Before: Jun 13 09:00:49 2026 GMT
            Not After : Jun 14 09:00:49 2026 GMT
        Subject: CN=0ee4a69f41c49d144012d4e8ce28b3f384e8357c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:ca:54:3e:84:ac:31:46:52:19:73:fb:2c:
                    e4:c3:a2:d6:0b:0e:49:31:f8:e0:b9:72:ea:90:25:
                    69:71:8c:6b:a1:fb:98:ce:e7:c7:29:f5:d3:e0:6a:
                    e2:25:2c:fc:f2:38:70:cc:5d:ad:81:88:89:6c:40:
                    df:74:7f:2e:31:82:1d:ca:66:e6:46:c4:00:c1:ee:
                    0a:8c:71:3e:10:63:26:b3:c6:24:b7:f6:c8:60:e9:
                    c2:a7:f1:8c:47:b3:9f:b0:27:9f:87:2a:44:3e:8c:
                    ed:67:c8:e4:ce:95:2a:7a:a0:86:e1:97:94:1b:38:
                    de:62:55:65:c6:04:a6:be:b4:67:7a:f8:d5:c8:54:
                    55:ca:ad:04:46:11:d5:a5:a4:cc:77:e8:e4:8c:b8:
                    59:e1:90:51:cb:0a:d4:7a:6d:ba:e7:e6:ee:cb:49:
                    b1:2e:e0:90:00:63:22:b3:8d:a4:1f:fb:0a:81:a9:
                    96:7e:7d:fb:d3:84:24:12:ae:a1:92:25:3b:1a:f0:
                    34:b0:57:e2:d6:48:cc:87:1c:70:30:24:44:82:e9:
                    1d:7f:90:cf:81:de:17:80:b6:d7:50:b1:d4:54:02:
                    5c:33:5c:b4:54:02:42:76:ec:d5:cd:92:1c:e4:5e:
                    57:ba:54:e7:41:bc:19:bc:ff:bb:9c:15:e6:fc:ed:
                    a5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E4:A6:9F:41:C4:9D:14:40:12:D4:E8:CE:28:B3:F3:84:E8:35:7C
            X509v3 Authority Key Identifier:
                keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:aa:6d:22:0c:43:08:77:60:6b:9f:e0:e0:2d:ba:dc:b2:
         06:e5:01:ae:54:12:6e:49:b8:a7:58:cc:a7:3a:2e:8c:65:79:
         3a:24:fb:9e:ba:57:71:64:57:71:53:60:0f:5d:20:ab:a5:53:
         be:8e:d3:15:72:b0:24:3b:95:66:18:84:7e:70:7f:e8:3e:b6:
         e9:20:59:3b:de:e2:31:4f:ad:1a:cb:d2:ae:37:9e:bf:a2:69:
         c6:2b:3a:ab:3d:c4:fb:0c:0e:aa:06:5a:da:a1:d3:36:3a:56:
         dd:2b:bc:c6:70:dc:ba:36:2c:db:55:75:28:2c:9f:22:b6:eb:
         83:8e:c0:5a:e9:c9:55:cf:e1:21:c7:e1:42:ee:22:37:98:37:
         9c:f9:ea:8f:15:a8:c4:c6:3e:70:06:61:1e:71:a4:ac:f5:0a:
         a0:a6:c5:f5:fa:1d:70:c5:aa:1f:1e:f9:21:ea:0c:39:17:66:
         1e:af:69:8c:2c:c3:01:ff:31:91:3d:79:99:94:8e:54:23:c7:
         da:82:53:cd:c3:86:7a:c6:9b:7f:c9:33:55:dd:f0:75:a6:00:
         d6:5b:74:8a:28:63:d1:84:a0:9c:42:8e:3a:a7:34:1e:cd:a1:
         95:e8:b8:d5:d4:ec:a8:4c:f6:53:50:0f:83:67:12:3a:7d:8b:
         6b:6a:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:59:23 2026 by rpki-client