Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File:                     LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier:          vNpNDMrxx2JiURZM5Gl3zlLCXTANo4jvag7lcRZ8Q9Y=
Subject key identifier:   EF:8C:3B:83:9A:83:56:AC:6D:F1:04:FE:A0:E0:2E:41:BE:E2:E5:34
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer:       /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial:       019FAA509480BBE559E142621889D08D9D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number:          1969
Signing time:             Tue 28 Jul 2026 20:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:35 +0000
Files and hashes:         1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: RQINvpLB5KAWeH/5phuAFYxfV/DNRXfVwZhQPbPEHI0=)
                          2: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (hash: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:94:80:bb:e5:59:e1:42:62:18:89:d0:8d:9d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
        Validity
            Not Before: Jul 28 20:00:35 2026 GMT
            Not After : Jul 29 20:00:35 2026 GMT
        Subject: CN=ef8c3b839a8356ac6df104fea0e02e41bee2e534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:9d:0f:e5:10:79:23:9f:5a:dd:7a:cb:84:
                    e1:fc:2c:ef:7c:bf:c4:eb:c7:c2:b0:95:88:f8:44:
                    5f:2d:cd:0f:bf:54:13:ac:8c:69:f7:bd:1e:d7:d8:
                    99:a9:5e:71:7c:b3:b0:7a:85:22:f0:4c:06:24:26:
                    e9:a7:ce:08:89:82:70:b3:46:2f:c7:de:df:0b:53:
                    5e:df:be:ed:09:e8:5f:5d:50:dd:b9:d4:00:cb:ef:
                    b0:9a:cb:f9:95:98:3b:8d:48:96:3f:22:9a:dd:b0:
                    cc:d3:38:fa:87:a0:c6:99:3f:ff:d2:67:27:d1:3d:
                    34:13:95:5b:3b:a6:dd:8d:a5:a5:a9:fe:30:18:df:
                    09:ca:7e:ac:3d:06:b2:de:04:f3:4a:84:2f:2c:ec:
                    a4:ed:08:1e:ee:ae:8e:5c:87:3b:8e:2d:0b:82:93:
                    b7:6b:76:e3:84:db:10:1d:b9:1a:0e:1e:c1:91:c6:
                    c9:49:7e:17:e8:6f:3d:34:a2:22:bd:3d:05:64:6f:
                    d2:7e:ac:1b:d2:4e:e1:cd:0a:19:1d:5f:10:35:e3:
                    86:79:a8:a2:21:5e:b2:86:0e:39:76:ad:02:3f:75:
                    ff:a0:83:56:09:a8:50:27:8e:8b:48:2f:df:e4:ae:
                    47:6b:61:f9:b8:f6:be:7f:6a:50:ab:a2:8a:7f:b9:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8C:3B:83:9A:83:56:AC:6D:F1:04:FE:A0:E0:2E:41:BE:E2:E5:34
            X509v3 Authority Key Identifier:
                keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:30:c6:66:9d:03:4d:6e:77:7e:cb:9e:39:c8:3c:9c:ad:cd:
         52:ce:e1:a1:7b:ae:ba:09:61:36:64:53:7e:52:8c:45:04:de:
         f4:d9:c6:ec:ad:80:4f:47:65:0b:8e:3d:14:5d:33:6a:df:19:
         30:69:8a:d5:1d:4c:0d:de:24:57:dd:22:54:d9:72:2a:44:84:
         0a:84:2d:65:2c:a8:da:f0:3e:69:68:6d:f2:cf:0c:2d:b2:91:
         d7:3e:e8:67:28:a8:c6:85:8c:68:1c:af:87:1f:ea:a1:95:e4:
         07:69:ab:3d:b4:62:5f:78:5b:2d:85:9f:3e:29:15:5a:ca:d8:
         c3:4f:05:44:7c:72:38:40:55:07:03:80:8f:5c:d6:b7:0b:5a:
         d7:d2:2b:01:a0:80:07:2f:e6:99:b0:0e:71:e1:3d:ba:82:e6:
         f5:c1:38:d4:e0:8f:9d:be:1f:fc:9b:b7:73:1b:5b:a5:36:ac:
         9d:d4:88:81:2e:59:32:5a:75:18:d0:c8:71:f2:05:cb:8c:98:
         06:da:55:28:6c:eb:df:f5:9c:bb:92:69:bf:3d:ec:97:e2:4e:
         57:71:69:16:f3:65:34:ab:a9:c5:fc:5b:fb:28:91:a1:f3:a7:
         5f:d9:7a:d5:9b:41:d7:6e:60:ba:93:34:c4:76:b8:8e:51:a4:
         a1:62:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:34 2026 by rpki-client