Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File:                     LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier:          7H40DiQ/nV+tKzcLlioeScf9rgR7A67u3zlOyhBd22g=
Subject key identifier:   8E:5E:6B:36:F3:27:89:FF:39:E2:20:15:AC:58:03:4A:43:FC:10:F7
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer:       /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial:       019EC300D279AB0AA2795D805C04CCE376F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number:          1497
Signing time:             Sat 13 Jun 2026 22:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 22:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:11 +0000
Files and hashes:         1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: FAtLvXMZtj6qpQWdksOzCcvKTrN6BCeEuTo9/4VYhzw=)
                          2: mFiXzHrxbxRLCdJjqMjDV1qXsf0.roa (hash: xj8BfUXzJ6HgdFsCYVaF06L0rsBxHlnBN9flZ6X2gpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:d2:79:ab:0a:a2:79:5d:80:5c:04:cc:e3:76:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
        Validity
            Not Before: Jun 13 22:01:11 2026 GMT
            Not After : Jun 14 22:01:11 2026 GMT
        Subject: CN=8e5e6b36f32789ff39e22015ac58034a43fc10f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:20:8f:d1:06:7e:a9:b8:d2:5f:3a:77:ba:
                    71:9a:e1:c7:06:fd:2a:e2:f4:3c:88:7a:aa:4a:1a:
                    8d:7b:c6:b8:2a:84:ac:9d:1a:d8:74:3c:b0:44:9c:
                    50:ca:9d:8a:aa:08:65:a6:81:13:f2:0f:eb:26:07:
                    60:10:86:86:84:64:83:29:66:84:53:6c:73:d4:ee:
                    22:ce:af:c1:98:6c:aa:18:0a:62:51:cb:e2:4a:c8:
                    4a:f1:b6:dc:6c:a3:38:55:6e:78:68:17:56:f3:b1:
                    1f:fc:33:43:46:be:9b:2e:76:a6:98:21:1c:04:02:
                    71:59:7e:59:0e:f8:1b:3d:0d:b7:5a:d0:d3:89:df:
                    0b:0d:c4:a1:74:db:91:49:61:44:01:69:e9:15:45:
                    2e:33:d3:3a:4b:b5:87:c8:f6:20:8f:dc:a0:77:e0:
                    74:8c:f7:71:7d:5d:b8:7e:fd:e8:b0:50:6b:98:a7:
                    9a:63:9a:1a:c7:36:f1:e3:c0:cc:c8:3e:08:e8:8b:
                    cc:58:b4:50:a6:2e:79:0f:1a:48:5e:3c:43:9a:65:
                    d1:2f:a4:3f:c0:b2:40:97:ff:5e:fc:d6:0b:9c:91:
                    2c:c5:65:8c:bf:b6:ea:b3:69:ea:4e:02:19:19:c3:
                    f9:91:c3:4b:fe:65:0c:77:56:e7:f7:1c:ee:bc:d1:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5E:6B:36:F3:27:89:FF:39:E2:20:15:AC:58:03:4A:43:FC:10:F7
            X509v3 Authority Key Identifier:
                keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:2f:62:56:ca:91:5a:ff:88:c0:e2:35:4f:a8:1a:ba:ff:
         b4:b8:22:63:28:10:eb:81:98:55:ef:16:b0:8f:d6:6d:6a:fb:
         d5:1f:74:db:95:bb:8f:3a:21:11:45:a6:43:ae:ce:cf:18:d0:
         a0:48:ac:3a:66:3e:07:ae:ab:f1:f3:32:b8:3f:94:04:5e:02:
         43:7c:a5:84:42:91:b1:ee:a0:4f:29:25:64:d1:4c:dc:75:34:
         95:dd:a8:7e:82:90:cb:ce:81:73:3e:59:65:b6:60:68:34:2d:
         77:1f:c3:57:6a:3d:0b:a9:c5:fc:b2:ec:f9:e0:15:98:cf:97:
         25:dd:14:00:ef:c7:ae:b0:69:a8:7c:24:39:ad:71:f1:73:90:
         fd:53:65:34:b7:de:eb:45:9f:f6:b2:0e:a6:a6:02:0c:38:74:
         a4:78:cc:2b:62:38:99:24:cb:0a:f8:4f:3b:cd:2c:71:16:27:
         4b:7d:bb:fb:26:25:0d:b1:4b:65:7c:c3:e0:56:fc:72:85:0f:
         64:c3:0c:0d:71:13:f2:fb:f2:13:6e:13:60:51:01:ab:2c:44:
         00:a0:1a:51:6e:9f:35:38:a3:9f:06:bf:bd:82:a0:29:49:87:
         a4:e1:a8:45:75:cf:7a:cf:df:07:a6:75:72:13:65:ec:a5:56:
         35:da:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:23 2026 by rpki-client