Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File:                     lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier:          sHhS7WbcHak/ShwVd8DY06YXPzp6qINRp+efP1DAK8M=
Subject key identifier:   68:22:76:AA:F1:69:7F:BB:54:CC:C2:91:26:DD:BB:D9:B9:4D:3B:0C
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer:       /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial:       019CA9EB75FFF5CC7C53E54CF87D83A139D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number:          070F
Signing time:             Sun 01 Mar 2026 15:01:46 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:46 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:46 +0000
Files and hashes:         1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: +trTCyEFi6zlLtJoHWOqVKOt2cpec30IKxfVYQPnCaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:75:ff:f5:cc:7c:53:e5:4c:f8:7d:83:a1:39:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
        Validity
            Not Before: Mar  1 15:01:46 2026 GMT
            Not After : Mar  2 15:01:46 2026 GMT
        Subject: CN=682276aaf1697fbb54ccc29126ddbbd9b94d3b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:30:fe:a9:6b:04:ed:f4:2b:07:64:10:58:
                    24:0e:2a:32:1b:51:87:1a:8c:d7:55:17:df:91:15:
                    62:78:1a:b9:2a:c8:62:2b:2b:6a:99:4a:5c:c8:1e:
                    12:d1:b6:d1:88:9f:8a:ca:09:11:66:85:b4:cb:a2:
                    98:b8:76:d6:ec:40:7b:88:60:b1:9a:ca:9f:50:c8:
                    28:ae:d5:04:11:8e:76:5c:27:7f:71:15:28:bc:9d:
                    f8:46:ae:8c:90:01:c5:b9:22:2b:f6:f2:e5:a7:cc:
                    0e:3a:6b:9b:92:8c:aa:7b:3f:52:4b:2b:8f:99:a8:
                    ae:8f:76:53:8d:6e:87:27:d2:b7:50:88:62:2e:97:
                    e7:f7:26:fb:b1:ed:18:46:ba:47:c7:63:dd:6d:11:
                    e7:78:14:2a:18:20:4d:6d:9c:c8:44:9a:3f:cf:24:
                    b8:11:b2:a0:aa:da:d4:71:14:fe:38:a7:1d:be:c9:
                    99:65:dd:a1:21:98:b1:a3:62:70:80:3f:ff:2a:3f:
                    c8:37:aa:c8:8e:eb:5c:82:4b:b8:1c:f8:54:0f:af:
                    58:71:f1:4a:39:e5:cc:b5:b1:df:38:53:07:ed:b8:
                    91:39:ee:a4:05:c6:7a:3a:d3:d8:5f:d6:7c:e6:6e:
                    13:2b:d0:91:89:c8:cd:d4:b7:83:d4:5b:4e:60:32:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:76:AA:F1:69:7F:BB:54:CC:C2:91:26:DD:BB:D9:B9:4D:3B:0C
            X509v3 Authority Key Identifier:
                keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:49:b6:fe:c2:d3:ba:bc:3d:ef:63:85:b3:5f:c3:b3:18:eb:
         c9:4d:3c:3a:7b:a3:78:72:03:22:4e:30:b1:c4:ce:06:80:9b:
         8e:87:00:08:32:e7:90:38:4e:49:48:c2:4e:0a:50:15:cf:3e:
         04:b9:8c:80:aa:cd:99:cb:54:f6:75:95:53:3b:c5:0b:5c:61:
         e4:ea:0b:93:42:15:88:3a:5f:d1:84:da:a0:d1:9b:76:c5:62:
         13:39:16:50:73:c5:59:0a:78:86:cf:6f:d0:25:0f:1b:03:6a:
         69:e5:20:6c:31:25:c9:18:b1:a1:da:04:35:95:92:94:c1:10:
         9e:8c:e2:8b:ec:67:f7:6b:66:4c:df:4d:92:97:f1:72:42:f0:
         50:32:ee:68:be:8c:ad:ae:47:ac:36:47:af:1f:53:49:b6:0c:
         61:04:b8:57:7b:cd:4e:c1:0e:e0:dd:f3:2e:68:de:9e:cc:bd:
         b1:62:c5:67:c8:51:6f:da:73:73:81:00:61:45:73:b4:2d:71:
         3c:9d:a8:6c:ac:df:c9:6d:fc:a3:a6:f5:2e:a0:e4:27:4f:6c:
         3e:ca:63:15:ef:27:2d:10:83:cc:d3:4b:ca:64:ac:b5:30:18:
         b3:ea:5b:f1:10:db:ba:68:b1:a6:c4:26:09:51:f1:c4:2a:0d:
         af:8c:14:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:32 2026 by rpki-client