Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File:                     LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier:          irmGFyNPCfY8vwVoc/BGdgXv4fb1nC/d2Xd9Md4lnGI=
Subject key identifier:   B0:DC:B8:3C:CB:6E:D4:C7:6E:96:D0:8C:1E:C6:C1:EC:28:34:90:D6
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer:       /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial:       019EC0A422BD1A7106FA8F8013CDF03F718D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number:          18F0
Signing time:             Sat 13 Jun 2026 11:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:42 +0000
Files and hashes:         1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: n+YaiiMp0CjfN59gP5WdGUD4mnnPzG1OV80mWO1P6JA=)
                          2: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (hash: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:22:bd:1a:71:06:fa:8f:80:13:cd:f0:3f:71:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
        Validity
            Not Before: Jun 13 11:00:42 2026 GMT
            Not After : Jun 14 11:00:42 2026 GMT
        Subject: CN=b0dcb83ccb6ed4c76e96d08c1ec6c1ec283490d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e3:c7:f9:12:13:d5:c7:24:2e:46:f0:4b:fd:
                    3c:a8:54:38:c7:19:cb:a2:d7:f1:65:91:b7:d7:c2:
                    77:7f:29:bc:f8:27:c2:2b:98:cf:1e:df:2e:f3:eb:
                    fa:16:8b:6c:44:e2:ec:02:e8:d0:fa:02:d4:59:0f:
                    82:a1:76:23:e4:e5:5d:2e:dd:e9:50:28:a7:fa:b1:
                    7d:20:4f:9c:43:fa:07:45:cf:91:29:80:f4:ba:7b:
                    31:61:3a:39:e6:9c:b7:95:cd:c7:bd:95:35:0c:43:
                    41:f3:27:be:65:6a:5a:c2:35:40:3c:26:2f:9e:27:
                    08:bf:70:2e:40:d5:95:fb:61:72:ca:9b:59:61:7f:
                    67:58:9d:a8:dd:94:92:be:62:cc:5c:f0:62:11:20:
                    32:e5:96:a1:0d:cb:75:28:7b:6c:0b:14:8a:9d:19:
                    35:1c:b2:1a:c9:4b:ea:dc:f6:e5:07:10:5a:74:79:
                    ea:8e:40:6a:9b:86:69:1e:0d:31:bf:7c:2a:fb:98:
                    7e:89:28:5d:7e:45:59:dd:36:48:cd:fc:e0:30:5d:
                    08:4f:50:ec:35:41:f1:cb:56:8d:7a:fd:a7:bd:a5:
                    3e:26:5a:c6:73:56:b9:29:41:8c:b6:47:6c:7d:a8:
                    54:22:99:b9:cc:31:bb:ed:cf:10:30:7e:89:a7:a7:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:B8:3C:CB:6E:D4:C7:6E:96:D0:8C:1E:C6:C1:EC:28:34:90:D6
            X509v3 Authority Key Identifier:
                keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:20:9d:ec:8c:69:11:00:b5:8b:b1:7c:a5:c3:4a:23:f0:d8:
         ac:8c:a2:b1:67:8f:c3:ba:93:56:04:fb:67:ab:9c:fa:8e:0d:
         ad:0c:f1:41:11:cf:6c:6f:8d:b1:c4:96:2f:bd:6f:a1:5c:56:
         ff:b5:f5:5f:4c:de:3c:24:59:39:6e:43:40:c4:82:31:05:62:
         88:4b:ce:b3:71:2a:77:99:9d:3e:43:8f:88:e1:fc:fe:fe:1e:
         f2:f6:d9:b0:18:eb:69:75:02:1c:ae:41:04:8d:68:9c:6d:b2:
         7e:10:fb:b3:ac:b0:65:fa:66:e5:1c:1e:5c:46:a2:46:51:a4:
         28:83:4b:08:a3:8a:35:47:09:9f:3a:fb:76:6a:02:65:2a:66:
         9c:2e:a6:d4:a1:7e:7c:12:56:79:dc:c5:05:5f:d7:09:0a:1f:
         72:c8:3d:5e:9f:f6:16:c0:a0:94:34:ab:29:46:a6:70:55:b8:
         a9:a9:ec:05:28:b5:f1:0e:e3:04:a5:10:0a:c9:a3:2e:bb:df:
         59:20:5b:e8:10:ec:a1:48:51:19:63:75:f5:80:2e:7b:4b:3f:
         d6:28:1b:f0:63:da:4d:a6:bc:d8:5b:8d:31:4d:36:2f:b6:82:
         44:8f:9d:3e:97:dd:97:88:c6:4a:7d:f3:7d:f3:87:10:ef:6c:
         07:11:ce:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:10 2026 by rpki-client