Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File:                     lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier:          TdPm5KfEGG+5Km8WxdCCqkokT2IXZDH+FQhAg49izLU=
Subject key identifier:   8B:47:6F:77:46:42:63:9F:1F:EA:04:1A:57:B3:5D:2A:89:0A:27:B4
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer:       /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial:       01A0BE4259B4AFC5D0FC7E5636BEA42F9D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number:          027F
Signing time:             Sun 20 Sep 2026 10:00:14 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:14 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:14 +0000
Files and hashes:         1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
                          2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: u+XOFLZf6njRNjQYd7iJ/DR6Q/vEChcH9vSwE+7sSXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:59:b4:af:c5:d0:fc:7e:56:36:be:a4:2f:9d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
        Validity
            Not Before: Sep 20 10:00:14 2026 GMT
            Not After : Sep 21 10:00:14 2026 GMT
        Subject: CN=8b476f774642639f1fea041a57b35d2a890a27b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:5a:a5:5f:0c:94:54:4f:d8:ef:76:f1:85:
                    63:25:cc:96:b9:57:6c:71:37:d8:1e:7b:f8:c6:40:
                    15:79:63:5b:1e:b1:59:c5:54:61:aa:ba:f7:ed:f7:
                    e7:78:1c:78:0f:73:55:00:d0:ad:68:fc:f8:e2:89:
                    60:76:d8:6a:09:61:96:92:6a:95:83:ad:21:99:3b:
                    a7:99:db:2b:0e:7c:ad:d6:90:74:cf:55:48:b5:88:
                    93:8c:60:ce:e7:e7:de:31:7e:05:b4:93:2f:22:7a:
                    dc:f6:ee:0b:77:04:68:a3:aa:42:43:4e:b8:d1:24:
                    2a:1b:dc:ce:82:45:d1:27:ec:a7:a6:3f:63:7d:fd:
                    33:6f:73:c4:62:a8:ad:d2:31:0e:3e:c0:be:fd:03:
                    a5:6e:b9:04:81:58:34:b9:82:90:74:7e:36:e6:98:
                    b3:51:2b:fe:13:06:49:cf:3b:64:f5:ad:53:85:8d:
                    f7:7a:8f:ee:14:80:2d:81:8a:f1:5a:09:ae:1b:21:
                    62:14:9c:0c:9a:2e:f2:d3:10:b8:01:77:09:98:67:
                    c2:41:2b:e9:2b:df:90:9e:0e:ff:b3:6b:01:6a:d5:
                    41:4a:68:f5:01:e0:2f:c0:50:c7:58:63:17:56:50:
                    14:cc:a5:a3:1d:d4:41:cb:bf:b1:3b:f1:d7:eb:59:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:47:6F:77:46:42:63:9F:1F:EA:04:1A:57:B3:5D:2A:89:0A:27:B4
            X509v3 Authority Key Identifier:
                keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f4:e7:60:cd:ea:ef:90:70:8d:e9:12:8b:15:73:c0:c8:f2:
         51:ac:3a:41:79:2f:0c:de:9c:98:eb:42:f5:c8:b9:61:d7:f6:
         85:d9:3d:33:f6:26:82:12:4c:a0:ea:67:20:41:23:58:83:11:
         13:d2:b5:83:3c:de:53:a5:e8:f9:3a:f4:4f:5d:25:8d:61:87:
         33:e6:e9:82:d5:6d:c5:22:68:66:24:19:fb:8a:9d:8d:8b:60:
         6c:40:fb:75:6f:ee:d2:2b:a2:b0:08:79:61:62:22:56:4b:b8:
         54:11:f0:1d:29:35:3f:76:4d:2c:ae:89:15:f7:6c:eb:e1:87:
         f2:3b:d7:66:46:ec:6c:f7:e2:76:2f:fb:4d:d5:c8:4b:0c:b1:
         05:5e:85:1d:a7:86:7a:25:6a:bf:34:4d:ad:b0:2a:11:61:59:
         9d:72:bf:78:41:1c:6f:4d:dd:d8:65:ee:ad:09:9c:28:b0:b5:
         f8:b6:45:c9:24:42:29:64:0d:19:e2:f1:92:39:8f:71:2a:74:
         35:66:7e:04:e1:8c:b9:29:50:c1:54:65:b0:01:d6:ff:8c:65:
         f1:ca:a8:11:08:b2:a7:ad:5e:2c:33:25:17:14:91:c2:5f:fb:
         9a:2c:2a:6d:d7:20:d9:61:bf:75:fd:e9:12:6a:c3:10:55:09:
         85:11:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:47:36 2026 by rpki-client