Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File:                     LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier:          sLhm8Ih/9u5NuYxlSyEk9TyfCbAOG4Mb/wY+mWmOh/8=
Subject key identifier:   D0:DF:7C:11:56:C1:1B:5B:E8:16:D1:25:AB:0B:76:3D:04:B0:FE:C6
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer:       /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial:       019CAB6B1CEABAA02D2D0EE93A4FD466AB28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number:          056D
Signing time:             Sun 01 Mar 2026 22:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:49 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:49 +0000
Files and hashes:         1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: plfn/UWmqStnGDkvKdTnSqD7E+5xXgs/4eGt7zHknNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:1c:ea:ba:a0:2d:2d:0e:e9:3a:4f:d4:66:ab:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
        Validity
            Not Before: Mar  1 22:00:49 2026 GMT
            Not After : Mar  2 22:00:49 2026 GMT
        Subject: CN=d0df7c1156c11b5be816d125ab0b763d04b0fec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:79:ae:85:9a:41:14:5c:c3:4c:68:e9:c6:96:
                    73:36:f6:89:49:bb:0c:d9:e9:2a:ef:86:cd:f6:04:
                    0d:55:7e:ca:b3:84:52:09:57:7e:a0:24:16:16:89:
                    e6:e9:83:76:c8:89:da:53:2d:99:04:cc:6d:f1:03:
                    fd:09:44:ce:4f:83:00:02:30:e6:ca:cb:36:92:75:
                    73:21:57:5e:1b:af:30:24:52:9c:a4:37:fa:a3:24:
                    9c:34:d4:30:9f:56:3f:01:30:4a:45:03:d7:da:78:
                    2b:eb:0c:7b:0c:d6:da:06:37:34:b3:95:fe:23:10:
                    a0:82:f1:c7:26:37:21:63:db:fa:38:fe:b6:c9:56:
                    e7:e1:1b:1f:a5:dc:4d:91:9f:64:6a:12:59:1e:6e:
                    44:ab:ce:b1:48:97:70:c9:10:bf:07:c0:c4:84:40:
                    19:a1:ed:fe:99:85:72:bd:a5:bc:7c:46:49:28:31:
                    91:dd:e8:c5:92:eb:9d:86:73:84:99:77:40:20:36:
                    dc:c8:ad:96:f2:04:fa:a5:a0:18:23:3d:22:d9:4a:
                    da:4a:6b:53:99:ab:76:35:88:3c:0c:69:9d:30:8a:
                    0a:22:c0:cf:9f:bf:2b:ac:51:df:d0:53:3b:8a:dd:
                    97:0d:91:48:48:54:1a:5b:e8:fc:f2:8e:1c:ce:bb:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DF:7C:11:56:C1:1B:5B:E8:16:D1:25:AB:0B:76:3D:04:B0:FE:C6
            X509v3 Authority Key Identifier:
                keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d0:52:35:20:97:0d:58:5d:cc:70:39:c1:17:5e:ef:87:66:
         69:38:d8:15:29:cb:f9:52:96:97:98:ea:58:60:e7:a6:4f:52:
         e8:f3:65:c8:95:c1:d8:94:bf:9f:2e:4f:29:b6:5c:bb:e6:b2:
         38:83:cd:37:b6:8d:e6:6e:9e:10:5a:1a:29:c8:54:b6:76:22:
         ee:8b:54:6a:6a:aa:61:6d:eb:29:e8:6a:f6:72:90:f3:a3:85:
         b3:cf:1a:fb:d8:8e:48:06:05:d9:bf:c7:40:59:47:1e:46:2e:
         b1:ba:43:aa:2e:88:9b:ed:43:90:b4:c2:78:3a:3c:82:35:b5:
         86:ad:37:16:98:e6:5c:8a:9c:4c:a8:bc:33:c4:9c:e7:d1:23:
         31:3a:70:6b:8a:b4:82:b5:fc:d9:bf:30:4e:0c:15:73:cd:58:
         1c:4d:bd:7a:0e:a0:27:e3:e5:5c:39:0f:74:2a:8f:14:63:4a:
         88:df:78:36:9f:e0:a5:8b:05:31:90:31:a1:c3:29:ad:fc:6b:
         90:54:8b:4c:04:c0:0e:ad:d7:90:76:3d:24:37:47:e3:aa:94:
         ea:df:3e:a8:00:fe:1b:66:74:60:9a:e5:01:ee:dd:ee:c8:43:
         1b:18:58:7b:ed:43:2a:b2:5c:03:59:fe:b1:a1:25:cb:7c:28:
         98:b1:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:56 2026 by rpki-client