Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File:                     ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier:          5vyNpLUOnaqW1w34hl8OVy2tnmK9/vdYu5EFYL3BNGg=
Subject key identifier:   CB:88:FA:1D:19:1F:15:CA:D4:DD:38:63:50:C9:16:48:A6:57:8C:EF
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer:       /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial:       019EC148ADB25DDA3F35CCBA90EDCDF8A97A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number:          18E7
Signing time:             Sat 13 Jun 2026 14:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:26 +0000
Files and hashes:         1: VTlRcNnwp5gbAntgQ6nLMgU1MSA.roa (hash: ngugrS9FOqnMnHH73cGn9uhwoCPbokxFByaxLpb4tLY=)
                          2: WMqtzsECKWwXCJIg2DonPUbpFnw.roa (hash: 5GfXNj8pVFfA55H0iZRmskGZ4d2ccQFECebszaJAMv4=)
                          3: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: LkMnfjdJI84WoqKZWMD0JGBs6W1CYlVUiRL0IpJWlBw=)
                          4: moNBxLDkr7hyNWiWsQQXFSA8f68.roa (hash: Xbv2BjhxEJT++H7rJ3ZuNWYMKN46NfqnW7okEukq0/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:ad:b2:5d:da:3f:35:cc:ba:90:ed:cd:f8:a9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
        Validity
            Not Before: Jun 13 14:00:26 2026 GMT
            Not After : Jun 14 14:00:26 2026 GMT
        Subject: CN=cb88fa1d191f15cad4dd386350c91648a6578cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:f7:99:b1:9b:86:51:27:f2:7e:93:64:5e:
                    34:a0:d8:fc:fb:70:1f:66:00:c0:2c:6b:b9:85:41:
                    e4:73:36:1a:a5:5b:8d:cc:a7:8a:2a:83:fd:69:34:
                    ce:82:89:0a:01:7b:f6:6e:eb:5d:a3:87:0d:80:b8:
                    89:e4:32:65:ae:77:61:f7:22:3c:7e:2c:a8:d6:2a:
                    c4:02:08:fc:4e:0d:77:4d:b9:8c:8a:2a:e5:0f:03:
                    b0:b3:43:94:78:84:7c:1e:82:1d:25:c9:4e:23:74:
                    73:78:6b:12:af:46:ed:89:d9:cd:6e:1d:28:0f:c3:
                    69:1e:52:24:e3:88:e5:44:95:cd:ed:38:1f:61:95:
                    f6:7d:28:8d:6c:47:73:a4:0c:e6:7f:b9:c3:18:83:
                    16:f4:87:d5:50:86:14:79:1f:d3:d6:73:1a:e4:cf:
                    10:68:ed:f4:2a:7e:7f:ec:bb:de:2d:5f:f3:22:7c:
                    d1:98:dd:4e:10:28:d7:ef:0b:85:ff:8c:90:27:ba:
                    1a:cd:1d:7a:da:96:27:d2:61:8e:8b:51:a1:95:31:
                    58:d6:20:20:5e:6b:51:b1:f1:a4:36:16:d9:d6:8c:
                    ff:07:fe:18:e5:8f:d3:c4:af:d0:44:29:a7:20:54:
                    09:b7:ee:b9:e9:3c:cb:33:ab:34:06:43:b6:3f:0e:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:FA:1D:19:1F:15:CA:D4:DD:38:63:50:C9:16:48:A6:57:8C:EF
            X509v3 Authority Key Identifier:
                keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e6:15:84:22:af:98:5f:eb:85:2a:b2:de:8b:46:15:7d:03:
         bf:36:f1:60:85:91:50:b1:37:d5:b6:9b:5d:5c:22:f6:28:e9:
         70:05:f9:c8:a4:ce:62:16:84:d5:8b:60:5b:e0:e6:4a:93:c9:
         c0:37:d4:55:a1:f9:0d:51:88:ba:25:38:72:89:e2:60:1a:dc:
         c8:56:7d:30:dc:01:11:8e:d8:80:f7:d3:88:10:e0:7a:5e:97:
         4e:41:35:64:0d:4b:5a:d5:fd:17:23:3f:db:34:33:7e:48:6f:
         bc:6e:d7:2b:5f:58:c3:80:da:d2:70:0e:d6:5d:58:de:f4:c9:
         d7:77:13:bb:88:37:09:28:b5:aa:c4:71:30:1e:a9:e6:e1:62:
         cb:a4:1d:80:0a:74:3b:19:1e:00:05:88:90:8f:31:94:d8:f6:
         57:13:1f:ff:d1:14:4e:fb:f7:0d:4a:92:63:e2:31:04:e0:0f:
         2f:a2:0b:6c:50:60:ed:80:77:e4:b5:ff:88:ef:60:7f:7b:9f:
         39:4e:57:48:02:cc:c7:71:c8:9a:de:3b:ca:98:7e:2e:f0:b1:
         00:3d:33:13:88:d8:74:d7:b2:8a:b0:10:c7:0e:a7:7c:5f:b8:
         ec:1d:62:4e:07:28:bf:29:5d:be:d6:29:da:75:72:bc:68:6a:
         d0:51:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:34 2026 by rpki-client