Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File:                     LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier:          9Hcn4Hpwat22kjvl+OeH9DDVLw9WMmZ7EnbfyHcnJwE=
Subject key identifier:   93:B7:95:49:A0:A2:5E:C3:07:DD:62:9E:19:69:17:FF:F9:22:52:A7
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer:       /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial:       019ED461DBE270BE52BC978ABA944F1D824D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number:          0F40
Signing time:             Wed 17 Jun 2026 07:00:43 +0000
Manifest this update:     Wed 17 Jun 2026 07:00:43 +0000
Manifest next update:     Thu 18 Jun 2026 07:00:43 +0000
Files and hashes:         1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: YQ3mLrjgQSqYQU7lucs1UWnFkLXRv/07lwx1F3w0Ax8=)
                          2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:61:db:e2:70:be:52:bc:97:8a:ba:94:4f:1d:82:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
        Validity
            Not Before: Jun 17 07:00:43 2026 GMT
            Not After : Jun 18 07:00:43 2026 GMT
        Subject: CN=93b79549a0a25ec307dd629e196917fff92252a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:47:4f:eb:4e:68:7f:f4:a6:3e:fd:e5:c4:
                    c1:09:c0:ec:73:46:be:10:25:b7:59:2e:8d:ec:06:
                    15:41:57:4b:79:71:86:fc:dc:cc:d0:c1:9f:bd:c3:
                    b7:e5:9b:ba:93:eb:73:6e:c4:88:77:4a:34:58:50:
                    be:d8:17:e3:d2:68:d0:f2:50:1a:32:f7:27:08:6b:
                    cd:e0:ce:07:16:d7:88:eb:f5:73:e8:1f:34:b7:03:
                    50:df:12:31:be:27:39:7b:ef:61:d0:31:df:a5:31:
                    8a:74:29:29:36:e3:35:79:bb:0a:cf:ba:68:23:72:
                    81:84:d0:0c:19:99:c3:ec:87:11:c7:cd:d6:65:4b:
                    99:55:fc:ad:1e:a0:6c:7d:33:d2:7d:78:69:a0:7c:
                    01:83:6d:84:75:a6:ea:63:95:0d:e7:b1:68:f8:a6:
                    86:a2:ab:86:3e:87:50:b8:38:e2:f3:9c:7a:7a:97:
                    e4:64:ae:61:66:ce:03:3a:2c:a3:ff:b9:43:5e:d2:
                    72:90:83:e3:7b:75:11:51:b6:68:cd:ce:cc:a3:b4:
                    85:45:53:7a:09:ad:72:fd:00:0d:a4:b9:5a:f4:46:
                    82:44:52:53:36:d1:dc:1a:e5:9e:91:ca:49:e3:43:
                    26:5f:7f:3a:cd:3a:d8:64:eb:3a:65:7e:16:63:11:
                    4f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:95:49:A0:A2:5E:C3:07:DD:62:9E:19:69:17:FF:F9:22:52:A7
            X509v3 Authority Key Identifier:
                keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:23:dc:01:a0:2f:51:7f:69:a3:90:50:e7:11:e7:cf:fb:b9:
         08:cd:2a:ae:1f:3c:a7:cb:b0:25:52:4b:9f:9c:78:5e:15:b2:
         fb:c5:9d:82:6a:2b:62:d1:4c:71:47:1f:e2:19:e0:85:a7:86:
         83:33:13:31:6c:29:62:59:b6:48:54:09:68:9e:ec:48:e5:ef:
         c9:6f:ed:22:b5:79:f5:d4:cf:16:d1:e4:09:83:17:0b:ed:98:
         82:67:aa:d7:8d:d2:0b:ed:10:21:de:79:bd:7f:8d:0f:d5:b3:
         f2:fb:ec:f8:92:18:78:69:6c:b3:5e:d6:6a:f8:bf:92:66:93:
         84:ec:9b:21:21:e3:6d:37:2f:b2:e8:7d:b2:b3:43:25:9d:29:
         99:c2:97:b2:25:af:2e:3b:a3:44:cd:ff:5d:a9:13:b9:d9:5e:
         eb:c8:f1:c7:6e:c5:f5:48:20:cd:55:49:58:ae:6b:04:f3:e0:
         7a:75:b9:60:75:f6:1e:dc:33:cf:26:1f:76:9a:9a:73:43:41:
         0b:62:92:00:5f:ff:d8:dd:2e:a3:a5:9d:2a:b1:bd:0c:89:bc:
         f5:ae:58:63:29:db:36:a7:ee:b0:20:0c:51:6d:7b:bb:fd:28:
         2d:97:56:b6:97:1f:fa:c4:0a:68:70:1f:e9:f1:f1:68:36:a2:
         53:57:56:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 16:16:38 2026 by rpki-client