Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File:                     LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier:          cKWF5v5jdObrrERbcL0SYYhbn1oneL7hQ1tJrE2CA1E=
Subject key identifier:   0F:11:12:0F:BE:C5:2F:90:66:29:45:94:E0:7A:EC:5F:3A:9D:14:24
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer:       /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial:       019EC412D3AA7582E4BB114D5F3AA36B37C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number:          0A56
Signing time:             Sun 14 Jun 2026 03:00:28 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:28 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:28 +0000
Files and hashes:         1: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (hash: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI=)
                          2: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: 7jzo+dgoBGz/6UquV9HY2GoNk7WtqarFvSaG1qEA0To=)
                          3: elqT59ZWrAInz7TAGHCfesbdKLo.roa (hash: MtloAfg5PV+ZmF39WN4IskuqHMHTWwP8zag9ZXLDmqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:12:d3:aa:75:82:e4:bb:11:4d:5f:3a:a3:6b:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
        Validity
            Not Before: Jun 14 03:00:28 2026 GMT
            Not After : Jun 15 03:00:28 2026 GMT
        Subject: CN=0f11120fbec52f9066294594e07aec5f3a9d1424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:db:ed:45:d0:77:b7:bb:29:5e:0f:b7:b8:
                    e0:5d:aa:c9:85:48:e1:05:d1:4e:54:dc:d4:db:0f:
                    e0:79:65:85:bd:42:e5:bf:56:ed:d3:d6:ad:41:1f:
                    ea:80:46:1d:50:bc:a2:91:c9:4c:39:b5:2d:60:85:
                    47:83:c2:71:cd:8d:20:42:8e:be:3e:76:20:99:12:
                    d9:d2:bf:ce:c4:ec:44:56:74:b3:f9:90:b6:3b:da:
                    1d:38:b4:5c:c0:70:90:80:61:da:fe:1b:7b:a1:63:
                    27:eb:07:87:60:4a:ce:7d:01:79:59:65:7b:0b:7b:
                    05:37:67:e7:79:4f:68:c1:6c:50:8c:f6:60:5e:26:
                    8b:ad:ab:28:4a:8a:fa:f3:f6:2c:cd:da:93:cc:c1:
                    6d:76:9d:8a:c4:02:b9:cf:3d:78:e2:d2:ec:5c:c3:
                    2d:a2:7b:42:6d:37:72:14:d4:5d:08:cb:41:ef:3b:
                    72:0c:b8:8a:13:c2:81:ac:08:93:1c:57:83:b7:e9:
                    d6:eb:76:75:7a:a7:c3:e7:22:2c:03:15:e6:8f:b9:
                    58:43:14:b6:b6:1e:ad:6a:6e:8a:9a:4c:96:02:07:
                    4f:f7:70:3d:be:17:ec:8c:cc:65:0d:3f:c3:d7:21:
                    3c:df:40:98:f7:b6:fb:91:f2:34:2c:0e:85:ee:ea:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:11:12:0F:BE:C5:2F:90:66:29:45:94:E0:7A:EC:5F:3A:9D:14:24
            X509v3 Authority Key Identifier:
                keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:68:9e:3a:b8:61:fd:77:33:df:f1:b1:78:3c:bc:3e:65:ee:
         4d:08:c5:7c:cd:e4:f8:72:fe:74:63:9a:a6:72:9c:dd:85:d3:
         e0:ee:d8:38:2b:5f:e7:54:73:2a:ae:84:10:64:80:1f:b8:d1:
         b2:60:c1:b4:1b:4f:fd:1c:52:03:77:b3:5e:56:09:b2:e2:2d:
         0b:1c:51:12:88:6d:ce:6a:aa:55:cc:99:86:fa:97:12:2b:0c:
         14:df:03:71:ff:09:cd:49:80:31:ad:26:46:83:a9:35:07:09:
         a9:ec:d8:b4:25:45:af:79:ef:1b:33:57:e7:e9:66:11:54:a0:
         ca:dc:e2:fa:5f:4b:3e:b2:45:04:62:03:b7:da:4c:f4:07:11:
         3d:dd:24:44:5b:72:f2:c2:35:2b:ac:d4:02:98:c9:db:89:24:
         b6:49:3a:b2:ff:bf:f1:47:74:84:f2:a0:6d:ad:47:f4:fa:a4:
         2a:e7:58:68:d8:a0:30:4f:3e:35:8a:01:72:cb:0d:ed:11:06:
         9e:8e:86:4c:be:84:f5:9a:ee:4c:01:da:0f:bc:0b:e1:d9:91:
         2f:f3:a2:cd:3c:c7:74:51:92:ef:02:98:af:d0:07:ff:ff:e1:
         a0:2c:7c:c0:ca:8e:d8:5e:73:de:9c:2d:e9:54:6c:71:ea:2e:
         08:59:e8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:22:52 2026 by rpki-client