Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File:                     lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier:          H+FimUn3ixKCebaNlGKBjVkLftKb4NvGk4LhyYnECCA=
Subject key identifier:   DD:70:B4:E6:D1:30:79:0C:11:07:54:E7:ED:C8:3D:65:2E:D0:A4:53
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer:       /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial:       019F9391E60B28349DFA1EC3106FE6C1B272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number:          0453
Signing time:             Fri 24 Jul 2026 10:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:40 +0000
Files and hashes:         1: P3bBBi_YBaE4cV_VtfNF8i696oo.roa (hash: y1a/3A3vOIwmjOY1TgiM92LxR/aRkfoi3hKdkrKBG6Q=)
                          2: ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa (hash: zQ+cgbxBxeFyJgysTpnSUkOVuSjMGCgEsR1NJ1pLGCk=)
                          3: h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa (hash: us18JsIOMphnH0kNot1ftkzW7XzyNG9dxD+IeSBCYOM=)
                          4: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: 1PF1JB26HWVgobEqfOcTLnfjbhmw1vvuyTJjnFGErag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:e6:0b:28:34:9d:fa:1e:c3:10:6f:e6:c1:b2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
        Validity
            Not Before: Jul 24 10:00:40 2026 GMT
            Not After : Jul 25 10:00:40 2026 GMT
        Subject: CN=dd70b4e6d130790c110754e7edc83d652ed0a453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:e3:ad:52:fa:40:9e:f8:98:6b:fd:c6:6a:
                    08:28:c0:cf:1e:ec:0f:3d:8f:47:5a:ea:a9:6c:74:
                    79:f9:f5:97:c7:6d:70:8c:8e:4b:84:8e:fd:58:7b:
                    69:87:8f:3d:2f:75:68:85:f6:0a:0a:d8:d1:f2:a7:
                    aa:2f:b8:b4:8f:fe:18:9d:d6:96:6b:cb:e5:f4:47:
                    8a:7b:cb:b1:00:4f:1d:49:e0:1d:83:ea:29:62:59:
                    d0:33:40:cd:7f:b1:12:e3:88:3e:f4:3e:d1:32:ce:
                    19:d1:47:c5:7d:d9:dc:d8:dc:c9:b9:fc:44:e4:f6:
                    6e:96:99:0e:67:69:83:b6:40:e8:ab:ff:84:b8:65:
                    a1:d6:ba:68:90:c9:d6:46:e0:84:c6:8e:bb:0d:f0:
                    6a:0d:de:08:30:6a:85:d6:f8:c0:22:b4:4a:6a:a0:
                    b2:6e:42:bc:0d:97:6e:67:9f:f4:2a:f3:44:b4:18:
                    3b:16:6b:b0:b0:66:34:c8:eb:c2:07:e2:32:8d:00:
                    c6:05:9c:af:bb:04:ac:bf:b9:46:48:fe:d4:e5:9b:
                    82:44:72:c3:79:33:ac:68:08:17:81:1e:fa:ff:51:
                    6f:98:9c:25:21:19:73:43:e3:18:3f:ad:83:a5:85:
                    bb:39:f9:0e:20:41:2a:12:8f:42:cc:ec:cf:1d:bf:
                    ef:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:70:B4:E6:D1:30:79:0C:11:07:54:E7:ED:C8:3D:65:2E:D0:A4:53
            X509v3 Authority Key Identifier:
                keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:00:32:fd:2a:69:f9:2f:1c:fb:af:d2:46:42:39:a0:63:ae:
         73:1c:f5:e9:45:80:dd:82:bc:30:e8:32:ce:22:0a:fb:76:2a:
         5a:0c:a7:ab:da:67:09:0a:50:bd:02:a9:08:55:fb:1c:4a:77:
         c7:e0:52:5c:68:a5:69:27:c3:4a:9e:45:45:ed:1c:a3:bb:c5:
         69:41:d2:53:1a:28:1b:78:26:d6:76:2b:25:c2:e7:b5:90:e5:
         5e:35:30:37:b9:de:ba:b7:8c:67:d6:70:1b:34:76:57:97:c1:
         cd:ad:7d:27:5f:f4:7e:52:1e:35:54:27:40:39:8a:ee:03:2b:
         01:22:17:04:d2:83:4f:62:6f:82:f0:b1:c2:ae:dd:10:db:d1:
         6d:a0:0d:4c:29:b0:87:f8:60:9d:6d:21:ba:a4:99:4f:b5:93:
         32:d3:f9:8b:4f:f8:ab:2a:d2:3e:37:0b:67:29:8f:59:9c:7d:
         df:b9:ea:fc:25:ee:86:3d:0f:22:68:15:d3:87:f2:46:35:6e:
         34:18:a1:7c:3d:16:1c:f7:67:cd:d7:e1:39:bc:24:c7:3a:f0:
         2c:8f:de:8e:fc:df:20:de:f2:0d:47:06:b5:d1:2e:6e:bd:18:
         98:60:cd:1f:7c:2e:a5:be:86:f8:0c:e6:10:3e:7a:ab:15:ab:
         2b:82:76:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:48 2026 by rpki-client