Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File:                     lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier:          Bhu8qAP3ZfrPnle+64BlTVRERbF2+0ggc5gwUAfN7UU=
Subject key identifier:   55:29:06:A2:EA:23:A5:06:F7:77:CA:80:21:49:8C:9A:66:6B:17:F8
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer:       /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial:       019E1EA368EC9D2E6ED53E0A7B267DE3CA1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number:          174F
Signing time:             Wed 13 May 2026 00:01:26 +0000
Manifest this update:     Wed 13 May 2026 00:01:26 +0000
Manifest next update:     Thu 14 May 2026 00:01:26 +0000
Files and hashes:         1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
                          2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: TLhYRthnRCquU5HgfiF5nHPkoWBfePt3Yh72XJOEC3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:68:ec:9d:2e:6e:d5:3e:0a:7b:26:7d:e3:ca:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
        Validity
            Not Before: May 13 00:01:26 2026 GMT
            Not After : May 14 00:01:26 2026 GMT
        Subject: CN=552906a2ea23a506f777ca8021498c9a666b17f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:1c:ca:7e:d0:95:c1:c4:8d:03:97:7a:be:
                    ee:63:bb:a0:5b:b6:f3:04:50:24:6c:16:07:ad:39:
                    ac:d9:50:f3:29:c7:96:87:03:8f:5e:f6:0f:a5:89:
                    e6:ba:2a:55:21:14:ef:51:2a:eb:02:8a:f1:d2:a9:
                    5a:8a:3f:b7:57:48:df:58:47:48:f5:73:50:44:4b:
                    e1:1f:03:e4:9c:2d:e5:59:4d:60:af:79:2f:d3:31:
                    b9:11:a3:8e:01:d3:4f:9a:98:40:e1:41:ab:f1:d6:
                    f0:17:77:8a:06:cc:cb:7d:52:fa:66:29:75:63:ce:
                    22:40:c3:e5:93:6e:c6:40:b9:23:f4:d4:e7:7d:29:
                    bf:5c:bf:12:a0:6e:44:90:4f:a8:a1:6e:d9:00:bf:
                    94:43:5f:ec:51:38:29:3a:d6:d8:84:62:4f:b4:a2:
                    35:1b:91:a1:d7:a2:f8:37:77:d4:c0:31:2c:f5:d2:
                    19:43:56:f7:a3:e0:04:90:6d:1a:4c:59:31:be:18:
                    58:fd:5d:33:54:f7:7d:fd:45:fd:c3:c7:9d:d5:8b:
                    d8:14:8a:2c:99:08:4d:11:b6:2b:a1:93:19:6c:93:
                    7f:b6:e2:43:a9:1c:d6:7b:c5:6d:1a:8a:e3:5a:43:
                    da:68:fb:52:fb:1f:42:81:1f:96:ec:a1:30:7d:15:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:29:06:A2:EA:23:A5:06:F7:77:CA:80:21:49:8C:9A:66:6B:17:F8
            X509v3 Authority Key Identifier:
                keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c5:53:03:24:07:79:29:95:12:fb:cc:22:b0:8f:71:19:08:
         c2:08:e8:08:b6:63:a3:a8:7a:ac:c4:4e:a9:f7:78:d3:ca:16:
         40:67:6f:ba:67:eb:67:db:66:ad:18:f9:ae:d9:97:2a:f1:f6:
         b2:b5:c1:9c:e0:f1:0d:ea:37:ef:28:d9:70:e4:9d:9d:6e:bc:
         5a:4f:fc:9a:b3:63:8c:8f:a4:2c:01:28:72:47:d4:8c:21:2e:
         9b:59:8f:78:a4:19:97:be:73:f7:32:ce:26:2f:5c:6b:d3:a8:
         75:97:c6:28:ab:b8:0e:3c:6f:67:d4:3c:ad:fb:10:e9:82:ac:
         02:c9:3c:5a:54:77:98:8a:b7:fb:b6:d7:68:5e:80:af:5d:2b:
         2a:76:71:ff:87:3b:4a:d1:8e:ca:2d:5b:cc:46:ce:37:52:22:
         0c:3c:d0:7c:b0:8c:c9:23:b5:63:8e:bc:6e:32:32:df:68:61:
         7f:b3:d9:85:a8:19:fd:c5:e6:3a:3e:d5:c5:8f:cf:d1:f0:1e:
         99:2f:b6:c9:dc:84:7a:78:e1:67:ea:9f:25:f1:4d:26:2f:77:
         7f:c2:8f:28:5e:9e:c8:eb:be:f1:4b:0d:f2:47:8c:43:55:bc:
         5a:20:69:d3:ed:aa:f6:62:54:de:60:5b:c3:de:43:e0:cd:00:
         00:67:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:01 2026 by rpki-client