Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File:                     lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier:          BUOaQxRVm97eO6wb48Fx9gwgcWat33Vxr7rgou4IhRE=
Subject key identifier:   DB:01:43:D4:63:9E:82:B3:26:1C:BE:51:F6:FA:12:7B:8B:7D:69:24
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer:       /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial:       019EBE7EB6E3EAB7CDFB1C1C0CDA90D4E4E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number:          0176
Signing time:             Sat 13 Jun 2026 01:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:35 +0000
Files and hashes:         1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
                          2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: UQ3gXOhHkNtZHeis4qOv4xhChS2/yZTmxLRcVeOe+r8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:b6:e3:ea:b7:cd:fb:1c:1c:0c:da:90:d4:e4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
        Validity
            Not Before: Jun 13 01:00:35 2026 GMT
            Not After : Jun 14 01:00:35 2026 GMT
        Subject: CN=db0143d4639e82b3261cbe51f6fa127b8b7d6924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:25:33:74:c3:0a:45:cc:41:27:d7:db:fc:ab:
                    9a:4f:70:2b:c0:ee:f9:f0:f8:61:1a:49:9b:e4:75:
                    c0:e1:09:67:bf:d4:7c:97:ff:e8:e7:7f:9e:9e:e9:
                    68:a0:f8:ea:ec:66:b6:3b:2e:61:52:a7:b8:71:14:
                    af:0d:53:43:1c:3a:33:7f:40:a5:4c:d7:7c:a7:a4:
                    c6:ff:0a:bc:c9:02:51:d7:73:fe:e7:2a:49:26:4a:
                    e8:6d:ef:54:a1:3d:f7:41:87:a5:f4:bb:15:25:20:
                    d2:4a:a1:e4:47:17:7f:3a:a2:3d:8f:31:9d:fa:de:
                    87:72:e1:d4:51:63:cc:25:36:22:52:41:f4:03:30:
                    fa:90:1d:78:3b:1f:d9:e1:79:86:84:cd:52:06:65:
                    c1:e5:2b:60:2d:1a:f9:cf:47:2c:37:8d:bd:78:62:
                    c5:2d:10:00:e4:18:aa:c8:af:d3:cd:7d:28:8c:39:
                    0e:be:7c:43:d3:ae:fb:aa:84:2f:99:c1:6b:9c:ac:
                    27:2c:88:76:ca:92:25:3c:14:42:e0:e9:44:12:f0:
                    b1:d9:23:2f:a8:d1:b5:28:44:c7:9d:80:c5:4d:1c:
                    06:ff:92:dd:54:d1:de:7a:69:64:bc:ba:20:6e:f1:
                    bd:97:e4:23:e2:42:8e:40:76:97:e3:f1:be:e5:d2:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:43:D4:63:9E:82:B3:26:1C:BE:51:F6:FA:12:7B:8B:7D:69:24
            X509v3 Authority Key Identifier:
                keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:fa:c2:7c:47:8b:38:b4:f0:69:fa:3d:79:93:61:4d:7e:cc:
         92:fa:77:40:46:2d:ae:55:65:e7:86:6f:c6:ab:45:5d:52:a9:
         e7:2e:d7:be:18:c7:9a:ef:ce:dd:eb:e0:53:09:46:f0:35:b5:
         bc:a5:d5:c9:d3:ed:5e:dd:de:0a:ca:bb:09:31:7d:57:51:ad:
         51:65:ef:33:92:75:41:35:ea:fa:73:0f:96:b9:bb:f3:7e:b3:
         d5:bc:d3:6d:a3:4a:11:33:47:87:11:20:8a:2e:26:e7:70:0c:
         3e:c2:59:29:ce:06:76:e7:7d:df:66:ad:86:16:ec:49:2b:f6:
         ff:92:eb:15:6d:fd:b2:dd:ef:16:90:47:fe:d1:45:1d:d6:1d:
         c1:36:6f:5a:bb:05:4a:5c:a0:4f:5e:1b:e4:12:73:9f:24:01:
         d5:0c:bb:9a:57:d4:a6:55:5b:8d:90:12:61:46:48:d1:ea:b1:
         34:64:69:db:a9:89:44:f8:6c:f6:f3:84:c1:79:94:c2:62:78:
         8d:87:30:25:a0:37:59:bb:b3:5f:74:e2:2a:86:a5:7a:c5:80:
         40:c3:36:09:3c:67:26:eb:a3:cd:91:0c:33:df:8c:02:85:bd:
         4d:66:6e:4b:8d:49:0c:79:c7:39:c9:57:0f:6f:a9:6d:7b:d1:
         a8:31:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:02 2026 by rpki-client