Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File:                     lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier:          cCknldB3hxVPDnrqiP+AWv/+SqEY+37ag+/siswlSV8=
Subject key identifier:   89:0E:1B:88:92:88:3F:52:CC:8B:48:D3:E4:C3:E4:D0:26:F1:B0:21
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer:       /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial:       019EC25BE229B9193CBC5D7F9C96D5BB8D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number:          14F4
Signing time:             Sat 13 Jun 2026 19:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:02 +0000
Files and hashes:         1: VYI9qa8JCE6VkIqD0V54pQu3Jdo.roa (hash: pJTrpDe7OIckvsF3AmZnqqPmgPvtyMz/7jk3tJQykek=)
                          2: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: zEXYkZy3wxnITl1iGqKd7hCRkS+EXIqhPSsPVE3rs7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:e2:29:b9:19:3c:bc:5d:7f:9c:96:d5:bb:8d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
        Validity
            Not Before: Jun 13 19:01:02 2026 GMT
            Not After : Jun 14 19:01:02 2026 GMT
        Subject: CN=890e1b8892883f52cc8b48d3e4c3e4d026f1b021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:1f:6a:18:3e:47:e9:c0:2b:7b:03:50:a7:
                    d5:fa:dc:07:0a:c1:27:96:bb:dd:06:ea:38:e5:db:
                    21:32:3f:32:63:0c:a0:8a:2b:00:dd:08:1a:26:83:
                    46:db:48:df:92:c2:82:41:e6:0d:43:e6:bd:3d:b7:
                    c1:b3:e0:78:ee:f9:4c:29:5b:0f:9a:02:03:60:28:
                    f2:1f:1e:d6:6d:a1:dc:70:8c:bf:ea:22:65:db:47:
                    03:b4:2e:b5:8c:20:81:fd:74:b5:dd:36:a7:e2:2a:
                    0f:da:14:4b:9c:09:4b:65:4e:31:79:5c:6d:ad:62:
                    e7:13:3b:17:1e:78:e2:64:68:e8:ba:0b:ed:56:a3:
                    30:6a:f5:41:0f:46:5e:14:47:d8:9e:58:de:5a:74:
                    90:0b:26:47:04:26:36:0d:17:cc:32:2d:b7:df:ee:
                    bc:0f:0a:82:c4:0e:ca:cb:21:06:6a:12:00:91:78:
                    a8:10:2b:f8:97:8b:80:0b:3e:39:9a:8c:f6:8d:00:
                    9e:fb:65:cf:db:42:58:18:e9:76:c0:53:95:3e:b1:
                    2f:1e:02:4e:16:66:0f:23:52:b0:dd:b9:01:61:9a:
                    00:b6:86:31:b8:95:b7:57:a5:cd:32:66:f7:93:95:
                    71:33:3e:6d:ad:62:df:da:ce:fb:19:26:15:db:7a:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0E:1B:88:92:88:3F:52:CC:8B:48:D3:E4:C3:E4:D0:26:F1:B0:21
            X509v3 Authority Key Identifier:
                keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:99:d9:ef:14:72:06:b3:48:ed:07:44:79:a5:11:b5:ee:9b:
         d5:ec:3a:b6:dc:10:3c:da:70:50:c4:63:f8:49:2e:b2:eb:25:
         4f:7f:de:76:2f:11:96:2b:44:e2:41:64:10:fb:40:5e:da:dd:
         80:c0:81:83:06:b5:52:0c:b6:14:a7:a4:f1:04:ce:58:6f:fe:
         14:77:8d:00:29:2c:d4:79:8c:b6:77:7a:0f:da:ac:76:c3:8e:
         26:23:ef:37:2a:b0:e4:e3:31:f4:17:7e:94:74:ab:29:78:0d:
         c5:95:02:4d:3e:ed:90:c9:23:cc:66:02:bc:50:d4:e8:5f:90:
         70:17:67:e2:bc:65:8d:6b:e7:7f:8c:64:2f:8d:9c:48:03:8f:
         8e:46:77:e2:90:0a:53:14:6b:f5:65:a9:c8:ac:83:f6:0a:83:
         4f:40:33:20:bc:53:dc:e2:bd:09:57:7e:80:c1:ee:d0:d7:85:
         64:e1:b3:c2:21:93:33:0e:5f:b3:9a:d4:44:12:61:86:bc:f5:
         06:53:cd:0f:3a:a8:cb:da:9a:c2:44:4f:a8:58:57:43:4c:1c:
         53:fb:b1:1c:fd:54:ff:d1:23:cc:fd:17:ce:e3:e7:11:d5:84:
         6d:e9:0a:35:c3:d8:db:65:ee:cb:76:be:6e:fa:c5:ca:a7:ee:
         4c:74:15:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:01 2026 by rpki-client