Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File:                     LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier:          GrgIQaMTUGLhrfQ18rc9dzyyGhlqocmxPnK85MKgWCc=
Subject key identifier:   F3:A9:90:52:2A:AF:47:0D:AF:62:04:64:66:4F:24:BD:E1:A5:95:3D
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer:       /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial:       019CAE6BFDF45B48176F7488BFB09BAC43D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number:          179E
Signing time:             Mon 02 Mar 2026 12:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:38 +0000
Files and hashes:         1: L0jSxadFSRxDbeEIJkMjsXuRrsw.roa (hash: bW93NQ8Ncdiq9Bbt9BqL60MAc+VLB90QZgaITU4iLqc=)
                          2: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: KRCw8bjeUrSdnrK3RY2DtkG7zNG2hE7sDlw55q/kz7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6b:fd:f4:5b:48:17:6f:74:88:bf:b0:9b:ac:43:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
        Validity
            Not Before: Mar  2 12:00:38 2026 GMT
            Not After : Mar  3 12:00:38 2026 GMT
        Subject: CN=f3a990522aaf470daf620464664f24bde1a5953d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:e3:4f:4d:50:5c:3c:bf:f3:99:7f:56:8a:
                    c0:d3:74:93:ff:7c:56:9d:89:9e:35:da:2f:21:e9:
                    ad:b1:24:46:87:a4:c6:5a:93:e5:f2:f0:da:9f:dc:
                    0e:e8:5d:ca:83:2e:e7:88:b4:d9:aa:41:5e:be:cd:
                    86:c6:d8:ea:39:f0:6b:b9:69:28:b8:19:7b:c3:ed:
                    c6:da:6b:23:00:e2:d8:6d:ba:b1:f6:0e:4f:1f:69:
                    9e:62:86:f7:2d:2e:5a:9d:c3:34:b6:56:b6:98:67:
                    26:66:41:a2:2e:50:ca:bd:fc:d8:d3:ab:d4:6c:94:
                    50:ab:dd:b2:00:87:af:59:d3:c1:b8:3f:0e:8f:05:
                    c8:fd:d5:c8:8a:f7:d2:32:c2:1c:27:b3:c1:d2:38:
                    d7:d9:81:45:2d:c1:c8:71:a0:35:48:8c:36:97:9a:
                    65:ed:03:8e:9b:16:83:51:54:fc:c9:b1:cd:38:23:
                    85:16:94:06:d7:18:de:3d:20:3c:72:48:1c:b5:9e:
                    0e:09:bf:45:e4:fa:c3:6f:c3:f4:fb:30:4d:98:50:
                    e2:bc:6f:ce:30:5e:0c:d9:59:73:ef:ce:93:08:45:
                    e2:5d:ac:12:64:67:a0:54:64:6e:ef:d5:f3:3f:49:
                    86:6b:45:96:d8:f0:ee:77:bb:75:de:a0:8e:06:c9:
                    e8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A9:90:52:2A:AF:47:0D:AF:62:04:64:66:4F:24:BD:E1:A5:95:3D
            X509v3 Authority Key Identifier:
                keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:dc:fe:bc:62:59:3f:69:94:78:1e:c9:0a:83:8f:59:0c:fb:
         c5:ae:06:1c:cd:9d:f0:fd:ab:07:ba:07:0d:2e:de:0d:bd:5b:
         4d:41:be:c6:4b:db:6c:83:cc:07:d1:cf:36:3a:90:77:fe:cf:
         15:33:fc:9b:38:63:66:2d:a7:74:9e:f8:17:79:e9:22:8b:43:
         a1:6c:8d:4c:3b:ef:01:18:55:33:01:ff:06:64:19:0d:d0:91:
         5a:6b:bd:04:24:d2:bc:b2:c5:0a:47:43:53:95:48:37:cb:1a:
         b6:5d:69:fc:28:7b:37:ba:9d:f1:cb:17:2b:eb:3d:19:c6:df:
         1a:aa:23:7c:ef:19:38:ce:60:dc:a8:e6:93:9b:3e:bb:a7:05:
         c5:e9:b8:8f:a2:9d:a5:96:92:d2:86:b7:92:01:e9:53:28:b4:
         f0:a5:cb:28:ef:3b:28:ad:46:9f:d8:f0:02:77:2f:a2:1d:99:
         6e:96:42:b7:72:ea:8d:cd:8e:38:55:a8:f7:54:b6:a0:53:19:
         a7:d7:0d:60:af:40:4a:98:5d:8c:9f:ee:25:e6:46:10:ce:49:
         34:d6:59:6a:3c:11:89:20:d0:99:49:3d:f8:d6:9b:64:aa:79:
         5d:9e:7e:55:1d:74:ab:79:2d:94:1b:79:66:cc:63:08:74:c9:
         c8:bc:a8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:42 2026 by rpki-client