Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File:                     LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier:          6cMbZP0wguwTOLJdr16j0uaNjhiG6jsDbyKgM1FYLDA=
Subject key identifier:   47:10:0C:1C:30:30:7C:C8:7A:3D:2B:D0:7C:D1:22:94:A3:F2:4D:34
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer:       /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial:       019CAF116BB8F9F7D07D05B88A55664A6295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number:          0942
Signing time:             Mon 02 Mar 2026 15:01:20 +0000
Manifest this update:     Mon 02 Mar 2026 15:01:20 +0000
Manifest next update:     Tue 03 Mar 2026 15:01:20 +0000
Files and hashes:         1: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (hash: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI=)
                          2: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: ZKv4YNNcg4lxwpXmWeshAGUXtH9izgIrdsKfQ6S+ndU=)
                          3: elqT59ZWrAInz7TAGHCfesbdKLo.roa (hash: MtloAfg5PV+ZmF39WN4IskuqHMHTWwP8zag9ZXLDmqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:11:6b:b8:f9:f7:d0:7d:05:b8:8a:55:66:4a:62:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
        Validity
            Not Before: Mar  2 15:01:20 2026 GMT
            Not After : Mar  3 15:01:20 2026 GMT
        Subject: CN=47100c1c30307cc87a3d2bd07cd12294a3f24d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b5:5a:4f:66:d0:54:a2:80:4c:ef:ca:8b:17:
                    1b:db:35:5c:c4:72:cb:57:44:b6:a0:43:9d:8a:01:
                    a8:0e:0c:59:22:d8:9d:7f:f9:ae:e1:44:b8:c9:50:
                    a2:c7:d8:fe:90:bb:bf:d7:49:ef:d1:b0:d2:81:43:
                    17:2f:a1:b4:e5:19:55:e0:aa:bc:90:ea:99:41:60:
                    91:20:87:ae:67:70:b2:b6:99:5c:3f:be:59:2c:84:
                    f0:67:26:ea:39:ee:96:5b:85:4b:b3:f3:7b:eb:93:
                    a9:c1:75:d7:fa:0a:26:ce:ae:e7:55:30:4e:14:2a:
                    ec:79:3b:bd:e1:4b:47:14:25:ad:81:b4:91:04:2e:
                    b6:72:84:04:be:34:ba:5d:41:af:67:20:41:ee:6d:
                    59:dc:db:4d:7a:3d:61:11:7d:92:79:10:cb:9b:fa:
                    3c:1c:2f:d4:ff:b5:2a:6b:a2:39:20:26:7b:50:69:
                    11:d6:c7:5f:20:0e:d7:ee:6d:c6:f3:b2:7d:f6:0c:
                    1b:77:48:22:52:e4:70:d3:31:2f:fd:0d:4f:4c:31:
                    f2:c5:55:b5:e4:6d:61:69:9a:87:a6:89:0f:b8:e4:
                    2a:b5:92:d9:22:fc:18:5f:b7:6e:19:3b:51:f4:e5:
                    c4:56:9b:8a:74:7e:e8:fb:68:8a:06:a7:35:57:28:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:10:0C:1C:30:30:7C:C8:7A:3D:2B:D0:7C:D1:22:94:A3:F2:4D:34
            X509v3 Authority Key Identifier:
                keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:41:67:83:08:12:74:76:86:c8:83:2d:cf:88:80:b0:ad:f3:
         6f:98:b3:c4:03:3e:83:42:bb:7d:b4:31:03:34:4f:db:e7:5d:
         db:9e:b7:54:91:dc:d3:de:0f:db:c5:3b:87:44:e8:69:4b:b1:
         fd:4a:14:22:d3:4f:ea:94:09:25:ea:97:56:1c:d5:7d:d6:05:
         5f:20:f9:25:19:e4:28:6e:65:33:b5:c9:9c:da:2d:ee:4c:ab:
         46:2c:79:b3:b9:2e:1f:45:ef:26:86:b2:75:ee:7b:73:cd:be:
         8f:e8:62:41:03:d6:d1:7e:d5:1f:69:cc:dd:c4:b7:ba:97:06:
         0a:68:da:3f:b0:1e:9d:e1:15:65:9f:a0:56:3b:21:26:20:9a:
         2f:d8:fc:66:dd:53:29:e8:ca:7c:c7:36:57:93:8d:28:db:0f:
         f2:4c:04:e7:e4:a0:57:1a:37:a9:da:aa:2a:16:c7:94:2c:75:
         eb:cd:08:fe:8d:99:e8:08:3d:21:a8:1e:ef:1b:9d:80:3c:0a:
         2d:cb:c0:0c:32:3c:3d:d3:8a:69:e2:64:5e:55:63:28:a5:6c:
         2d:cd:03:ee:3f:a3:c5:dd:c4:8a:ba:9c:e9:5c:18:50:79:08:
         b1:6f:ce:5b:ad:e9:8c:2f:eb:25:db:9b:cc:f5:ce:cd:4d:6e:
         34:75:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:57 2026 by rpki-client