Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File:                     LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier:          X/fk+lC0TDNOoXPwJjM0TSHG/dBFzk9edsHzHeZwuso=
Subject key identifier:   E7:09:DB:6B:7A:1A:1C:C2:08:35:86:07:F3:AE:D5:BE:D5:23:BA:D4
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer:       /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial:       019CABD9D3591F090D10E31E7C7EA7777E01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number:          0A45
Signing time:             Mon 02 Mar 2026 00:01:45 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:45 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:45 +0000
Files and hashes:         1: CVFC2AZT4zU7rxI78osYUeetX2c.roa (hash: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs=)
                          2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: oGvcX2i+m1Yi/ZIPgXH8LHuhwdcQuujk89fNGSSWkxs=)
                          3: PHM1V2LiLUnh_dtpW6HSuR0CqtM.roa (hash: WaAP7/tUSsIc2V6rPX2u2qrSpkI6CsWvnNzs+Vmc/68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:d3:59:1f:09:0d:10:e3:1e:7c:7e:a7:77:7e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
        Validity
            Not Before: Mar  2 00:01:45 2026 GMT
            Not After : Mar  3 00:01:45 2026 GMT
        Subject: CN=e709db6b7a1a1cc208358607f3aed5bed523bad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:26:89:33:75:9d:ec:c0:fc:d5:8a:53:98:
                    aa:a2:3d:74:5f:0b:f7:c3:f1:fb:f4:03:07:8a:f7:
                    5e:a9:c6:2c:30:d2:e1:33:1d:76:56:32:98:bb:2f:
                    69:41:e9:81:22:0c:3c:a1:73:72:57:af:3f:99:15:
                    bc:bd:c1:da:84:d8:d7:2b:24:21:20:24:a3:a9:de:
                    d9:19:35:65:e8:e5:15:87:2a:15:f0:74:cf:cc:86:
                    ce:33:2f:ca:bb:1a:43:82:83:3c:cb:97:1b:11:ca:
                    b2:93:38:71:d7:fb:4d:5c:3f:c3:b8:ea:5c:2a:15:
                    7b:de:5b:71:e2:5c:4b:5d:f2:34:85:96:53:c3:b8:
                    cf:38:d7:f1:b4:be:82:5c:27:d0:d7:9f:86:bc:e4:
                    73:0f:66:c8:53:da:3a:fd:01:f3:09:bc:08:68:a1:
                    a4:e9:3e:b7:ea:e9:28:f9:be:2f:b2:cb:65:04:74:
                    9b:86:4c:a4:34:87:2d:ba:dc:e5:e7:87:1e:56:19:
                    47:a9:99:d3:7f:ab:b8:6f:49:e2:a2:97:e8:99:30:
                    4d:7f:bc:37:f8:e8:1a:2b:df:97:9a:1a:e9:7f:7f:
                    f1:7e:95:88:c5:3f:43:9a:45:d0:40:1e:cf:5e:8b:
                    17:cf:3a:1e:37:4b:ff:1e:8b:e4:d2:6b:b0:dd:cb:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:09:DB:6B:7A:1A:1C:C2:08:35:86:07:F3:AE:D5:BE:D5:23:BA:D4
            X509v3 Authority Key Identifier:
                keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3d:5f:9a:59:28:24:e4:f7:a3:73:d0:19:04:b9:84:0b:a0:
         35:bb:4c:97:63:c3:e3:1e:ca:d8:fd:fe:33:03:9d:0a:59:77:
         1c:37:4b:52:1f:03:bd:d4:e5:b7:f6:db:73:ad:2e:f2:d9:76:
         cc:68:54:65:7a:ba:92:eb:29:94:e2:5d:a8:53:2c:a3:58:d1:
         eb:5d:dd:ad:0f:de:74:92:0f:59:a1:7f:73:1f:e2:1a:df:f1:
         0a:68:2c:64:1e:ea:bb:e0:c3:e3:dd:b8:02:bd:21:e6:99:55:
         a6:d4:cd:2f:bd:ed:eb:f5:65:d2:7a:db:75:33:0c:34:a6:f1:
         aa:6e:7a:de:22:30:8e:0a:03:f3:bd:50:82:44:cf:26:2d:df:
         0f:5f:2f:74:4f:53:99:52:6e:1f:94:6b:fc:4a:c3:1c:51:9d:
         8c:c6:08:0d:d6:4a:33:12:5d:ac:1f:8a:5a:02:16:88:a8:db:
         70:1e:3f:f4:0f:54:00:86:50:bb:b0:bb:76:51:b6:c0:ed:fa:
         08:a4:a9:5d:9c:d1:af:79:0c:73:34:75:3f:ef:b7:4c:7f:8a:
         27:30:ff:75:ed:09:c0:1c:9a:72:83:06:18:09:88:cd:dd:d2:
         61:d4:5d:08:9c:94:97:6e:53:80:c0:3d:bc:26:f1:15:a3:6c:
         dd:5b:be:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2dNZHwkNEOMefH6nd34BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmIyNmM1NTI1NjMwMDYyMTNjZmU0ODE0YTlkYzJhMGZj
MTZmNDMwHhcNMjYwMzAyMDAwMTQ1WhcNMjYwMzAzMDAwMTQ1WjAzMTEwLwYDVQQD
EyhlNzA5ZGI2YjdhMWExY2MyMDgzNTg2MDdmM2FlZDViZWQ1MjNiYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJsmiTN1nezA/NWKU5iqoj10Xwv3
w/H79AMHivdeqcYsMNLhMx12VjKYuy9pQemBIgw8oXNyV68/mRW8vcHahNjXKyQh
ICSjqd7ZGTVl6OUVhyoV8HTPzIbOMy/KuxpDgoM8y5cbEcqykzhx1/tNXD/DuOpc
KhV73ltx4lxLXfI0hZZTw7jPONfxtL6CXCfQ15+GvORzD2bIU9o6/QHzCbwIaKGk
6T636uko+b4vsstlBHSbhkykNIctutzl54ceVhlHqZnTf6u4b0niopfomTBNf7w3
+OgaK9+Xmhrpf3/xfpWIxT9DmkXQQB7PXosXzzoeN0v/Hovk0muw3ct5SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcJ22t6GhzCCDWGB/Ou1b7VI7rUMB8GA1UdIwQY
MBaAFC8rJsVSVjAGITz+SBSp3CoPwW9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjkt
MWMzNWI4MzkzNzliLzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjktMWMzNWI4MzkzNzli
LzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVD1fmlko
JOT3o3PQGQS5hAugNbtMl2PD4x7K2P3+MwOdCll3HDdLUh8DvdTlt/bbc60u8tl2
zGhUZXq6kusplOJdqFMso1jR613drQ/edJIPWaF/cx/iGt/xCmgsZB7qu+DD4924
Ar0h5plVptTNL73t6/Vl0nrbdTMMNKbxqm563iIwjgoD871QgkTPJi3fD18vdE9T
mVJuH5Rr/ErDHFGdjMYIDdZKMxJdrB+KWgIWiKjbcB4/9A9UAIZQu7C7dlG2wO36
CKSpXZzRr3kMczR1P++3TH+KJzD/de0JwByacoMGGAmIzd3SYdRdCJyUl25TgMA9
vCbxFaNs3Vu+EQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:15 2026 by rpki-client