Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
File:                     lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft (raw, json)
Hash identifier:          kTcaZSdl+R3QaZvNirh7IXCnlWC1QF3jvWjBnlJZL14=
Subject key identifier:   7B:F7:3F:8C:7B:3C:67:1C:02:1F:A7:31:C9:45:85:DB:0E:BB:2C:5B
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Certificate issuer:       /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial:       019EC1EE3EF72FFFBCF9586E29CEC668AAB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
Manifest number:          1966
Signing time:             Sat 13 Jun 2026 17:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:16 +0000
Files and hashes:         1: 3lueYa4cGAq4U9ivFZ8-mTJKeUs.roa (hash: yo8hQ3SuLYgiKWGisWTt5R1HgigntwJ6UO6bodCaAnE=)
                          2: 868VkIZTeEk8g8K-nc-GYk4GNqA.roa (hash: mAkolD9i09Q2h4MCniDyPs0rmf1iQU6A0FPOG2LgFwE=)
                          3: lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl (hash: Lsxu3Vs2BVylMVonBXu+EpGjwfEL3SoX1el/TjJqeZM=)
                          4: q05mb8KRpZC-dZjSk2rMKN2gE_Y.roa (hash: eotOUqJ53rWQxs9/sn9KK6XM4STngZxv7oKNTVxb9eI=)
                          5: xY0yzyzGKETMGEPdBnrDX84itWs.roa (hash: avsQpG9VhWpkE114IUXSkSxZIAsU+MHzryCiy/ZPdtw=)
                          6: yQDR4RXyJipBGIGaXf0hpmvg9MI.roa (hash: Gz9z3oldgWaZnVSRtfCqMKiqcH9Ia6S6jLOD4nomWR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:3e:f7:2f:ff:bc:f9:58:6e:29:ce:c6:68:aa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
        Validity
            Not Before: Jun 13 17:01:16 2026 GMT
            Not After : Jun 14 17:01:16 2026 GMT
        Subject: CN=7bf73f8c7b3c671c021fa731c94585db0ebb2c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:60:96:01:d0:44:e9:db:f9:be:d1:07:a0:
                    ef:31:79:23:57:06:0d:43:44:1c:a6:10:d8:b2:d3:
                    e6:0a:ec:f8:2e:9d:ff:2a:f0:4a:f2:aa:9f:ed:ad:
                    ce:9b:75:3b:dc:2e:74:3d:ac:94:19:ae:c9:97:b1:
                    38:7c:46:90:45:24:09:d5:1c:4b:f6:bb:07:b1:0b:
                    17:4c:2b:7a:c1:99:7c:2b:2e:75:10:7c:b9:8c:21:
                    e5:3b:4a:a9:6e:dc:bd:b8:74:b5:eb:cc:49:54:00:
                    5a:77:1d:c9:fd:39:35:60:77:91:3e:95:6f:ce:a4:
                    64:2d:70:08:1b:22:6a:43:f8:85:02:0f:08:ea:70:
                    e6:13:08:8c:61:04:3b:ad:fe:47:eb:ba:39:d8:d0:
                    ee:1b:92:28:6b:5b:5e:66:0a:c8:c1:66:b3:6d:f6:
                    0a:38:ba:36:00:fb:30:cb:a8:4c:7d:2c:9d:0c:19:
                    9a:1c:28:3b:ac:89:21:ee:11:0a:83:0d:41:d0:d0:
                    d6:40:2b:72:d3:d7:18:de:d4:f8:39:b5:6f:89:3d:
                    56:70:d2:92:68:8b:43:d0:69:2f:8b:3f:74:4b:00:
                    3a:f7:26:4c:de:8d:c3:bc:8e:7d:4a:da:d9:77:98:
                    00:00:83:74:61:07:8e:03:98:e7:e3:cd:bb:67:ea:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F7:3F:8C:7B:3C:67:1C:02:1F:A7:31:C9:45:85:DB:0E:BB:2C:5B
            X509v3 Authority Key Identifier:
                keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:79:77:df:8a:55:9c:af:36:9d:5e:be:b8:73:15:c4:5a:6a:
         15:0f:c5:26:b9:8a:9c:2a:05:e2:9a:71:02:e1:7a:cb:90:74:
         1d:8b:e3:f3:15:74:4b:e6:c2:24:2d:d3:e4:8d:88:66:bd:ae:
         75:d1:6b:7e:00:8f:d6:98:e0:61:84:39:0b:0f:f4:ad:87:33:
         45:01:ad:fd:65:db:d3:21:5d:b2:e7:44:18:a2:82:07:9f:e8:
         5c:b8:0c:28:da:3c:48:af:f2:88:67:bc:17:53:36:57:61:0d:
         87:60:fc:a9:40:37:88:cc:fb:63:e6:15:b0:46:65:1d:d5:bf:
         44:14:a0:5c:a6:05:a8:c6:53:cc:97:c2:93:68:87:79:ea:a7:
         fb:e9:f6:92:d6:c8:0d:fa:d5:57:c3:98:61:f7:83:40:01:0a:
         9b:9a:8f:b1:5e:05:a8:8d:64:a0:98:d7:9e:c2:18:b5:06:34:
         87:c3:11:e1:2d:f8:b4:27:21:ba:65:93:15:ba:53:10:f7:13:
         b6:ee:cf:8e:56:3a:f6:66:f3:a1:ce:c5:8f:17:01:e2:32:28:
         22:4d:50:41:bc:4e:ec:9e:3c:c7:5b:f4:d8:55:bb:e3:97:77:
         2d:58:13:b4:0d:2f:7e:3f:65:52:92:43:48:f0:49:b2:11:94:
         61:12:d6:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7j73L/+8+VhuKc7GaKq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YmZjNWExNzI2NTRkZDYwMDlkYjFkODJkOTJmZmFmNzEy
MzQxMjAwHhcNMjYwNjEzMTcwMTE2WhcNMjYwNjE0MTcwMTE2WjAzMTEwLwYDVQQD
Eyg3YmY3M2Y4YzdiM2M2NzFjMDIxZmE3MzFjOTQ1ODVkYjBlYmIyYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02pglgHQROnb+b7RB6DvMXkjVwYN
Q0QcphDYstPmCuz4Lp3/KvBK8qqf7a3Om3U73C50PayUGa7Jl7E4fEaQRSQJ1RxL
9rsHsQsXTCt6wZl8Ky51EHy5jCHlO0qpbty9uHS168xJVABadx3J/Tk1YHeRPpVv
zqRkLXAIGyJqQ/iFAg8I6nDmEwiMYQQ7rf5H67o52NDuG5Ioa1teZgrIwWazbfYK
OLo2APswy6hMfSydDBmaHCg7rIkh7hEKgw1B0NDWQCty09cY3tT4ObVviT1WcNKS
aItD0Gkviz90SwA69yZM3o3DvI59StrZd5gAAIN0YQeOA5jn4827Z+pWFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv3P4x7PGccAh+nMclFhdsOuyxbMB8GA1UdIwQY
MBaAFJa/xaFyZU3WAJ2x2C2S/69xI0EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmIt
YmZmYjc1N2MzMTM0LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmItYmZmYjc1N2MzMTM0
LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnl334pV
nK82nV6+uHMVxFpqFQ/FJrmKnCoF4ppxAuF6y5B0HYvj8xV0S+bCJC3T5I2IZr2u
ddFrfgCP1pjgYYQ5Cw/0rYczRQGt/WXb0yFdsudEGKKCB5/oXLgMKNo8SK/yiGe8
F1M2V2ENh2D8qUA3iMz7Y+YVsEZlHdW/RBSgXKYFqMZTzJfCk2iHeeqn++n2ktbI
DfrVV8OYYfeDQAEKm5qPsV4FqI1koJjXnsIYtQY0h8MR4S34tCchumWTFbpTEPcT
tu7PjlY69mbzoc7FjxcB4jIoIk1QQbxO7J48x1v02FW745d3LVgTtA0vfj9lUpJD
SPBJshGUYRLWNg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:04 2026 by rpki-client