Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File:                     LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier:          F39tQNDPvJfMzh+jtz+9v+BsAiAEdPghEhpSPKaU2Iw=
Subject key identifier:   B6:0A:09:59:FE:72:75:3D:1C:88:7D:5D:D2:0D:FE:1E:59:4A:07:95
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer:       /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial:       019ED46224F3385D7D995BB340382DB5C8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number:          1970
Signing time:             Wed 17 Jun 2026 07:01:02 +0000
Manifest this update:     Wed 17 Jun 2026 07:01:02 +0000
Manifest next update:     Thu 18 Jun 2026 07:01:02 +0000
Files and hashes:         1: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: 9n6xGHE2aqTQR2Q4s3iAXpBzWJuxElyYg6qcjAYyhvA=)
                          2: kwn4ZdvrIv6hl400pgtVWpsd9lk.roa (hash: eyoTNP4CeFTLuxttmf6toqGd/JyyxtdCqToHMpNrH6E=)
                          3: oCe9xKAx3gPI7iUETaqklwJOVSg.roa (hash: Hl/RVZt4ha0REz41RabhXwcOue4AeE9NninK5nqE8vY=)
                          4: r5nJTgvmGErgj92PgnmHG4Q55HQ.roa (hash: 6MNQfyzaahoWRGsiDwsnjFka/uy5pB/S92sxE6Waevs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:62:24:f3:38:5d:7d:99:5b:b3:40:38:2d:b5:c8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
        Validity
            Not Before: Jun 17 07:01:02 2026 GMT
            Not After : Jun 18 07:01:02 2026 GMT
        Subject: CN=b60a0959fe72753d1c887d5dd20dfe1e594a0795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:2e:31:ba:da:28:5b:90:dd:bc:94:64:85:
                    c0:84:f8:71:f2:22:4f:27:50:f6:99:fe:56:03:d8:
                    62:42:b5:36:03:46:0a:1e:15:c9:07:40:a8:1f:21:
                    5b:8e:16:c7:e3:f8:be:f8:80:b8:84:4b:a8:13:6f:
                    79:9b:fd:8a:7a:86:a1:40:b6:ae:4c:c7:a7:87:4d:
                    82:67:be:55:49:ee:4b:04:fe:85:53:ec:3c:b5:0b:
                    0d:02:f2:48:17:65:e4:5e:e7:97:28:52:2a:a8:f3:
                    86:e6:89:c6:c8:9c:3e:96:76:90:c1:63:97:c5:e0:
                    67:88:2c:24:54:b3:92:85:20:46:ad:97:fb:7a:35:
                    bd:ba:98:4a:aa:93:bb:26:15:91:a0:e4:46:2f:9e:
                    20:8b:08:2a:26:a5:6c:3b:20:e3:36:1b:73:94:1c:
                    d0:df:c3:6e:3a:87:cc:10:25:8b:f6:c0:59:c4:77:
                    cf:48:3c:c3:85:58:0d:f2:e7:b6:6a:07:a5:a3:5b:
                    27:9d:74:f4:3e:44:0b:04:1b:cd:cb:85:a1:2c:0d:
                    ce:c0:17:cf:22:b5:7e:67:2d:81:d5:56:59:3e:1c:
                    61:9e:f7:e6:d7:15:d1:34:95:ab:5e:6f:74:fb:16:
                    5c:3c:3f:ec:c0:93:bc:49:7c:4e:5b:7a:b6:11:0b:
                    bb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0A:09:59:FE:72:75:3D:1C:88:7D:5D:D2:0D:FE:1E:59:4A:07:95
            X509v3 Authority Key Identifier:
                keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e6:4a:5b:7e:8b:63:e2:36:94:f5:ee:69:e1:eb:56:26:5e:
         15:e2:56:ab:26:af:97:8b:d8:6e:31:41:5c:98:64:bf:02:c7:
         74:f9:56:8d:c3:b3:61:46:52:04:f5:42:da:6d:fb:21:92:a6:
         86:27:75:bf:78:3c:2b:61:6f:4d:73:9f:47:3b:32:fb:64:ca:
         be:29:4d:f2:9c:5c:95:64:b7:05:f7:c4:67:07:50:b2:38:bb:
         0b:c1:49:cb:cf:69:d5:d4:0f:80:54:b4:08:de:d1:1a:5c:5b:
         30:a0:20:e4:04:19:8b:ab:20:91:e6:7f:a6:bb:58:06:80:a1:
         13:cd:9c:70:63:61:dd:d2:96:3a:19:dd:9a:7f:2a:85:f3:39:
         20:64:9b:12:0f:8a:ca:80:62:fd:ec:0a:11:63:40:fa:da:c9:
         96:96:57:6f:f5:69:62:c9:cc:54:e9:7c:0c:80:ba:6c:b6:f6:
         91:2c:2e:5a:e3:92:7d:b2:af:57:7d:48:ee:a8:3d:d8:41:da:
         99:b3:3f:87:26:a9:8f:d7:b7:08:3e:1d:29:35:43:52:dd:8c:
         98:21:6f:23:50:8d:6f:86:72:3d:39:24:42:d2:53:57:17:78:
         fe:c7:6d:09:3b:69:cb:e0:c4:0d:f4:da:ed:86:84:cb:8d:03:
         0a:53:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:37:38 2026 by rpki-client