Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File:                     LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier:          A83XAltUKhfATIZjO3SAmnSFhzkV0KWwFZc2S1MPlUE=
Subject key identifier:   01:08:83:8F:2D:8C:2C:50:E8:AE:A3:ED:5C:C3:12:1B:F0:4C:23:B3
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer:       /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial:       019E1F47773CD9C9BF12F2C2959B3E64DEDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 03:00:37 +0000
Manifest this update:     Wed 13 May 2026 03:00:37 +0000
Manifest next update:     Thu 14 May 2026 03:00:37 +0000
Files and hashes:         1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: 4h1Ij8oFVNA+Ji4RwNWYxYkmbNvgdGZqpcuw9oBX3pc=)
                          2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
                          3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:77:3c:d9:c9:bf:12:f2:c2:95:9b:3e:64:de:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
        Validity
            Not Before: May 13 03:00:37 2026 GMT
            Not After : May 14 03:00:37 2026 GMT
        Subject: CN=0108838f2d8c2c50e8aea3ed5cc3121bf04c23b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:9f:dc:c9:46:9d:76:d3:50:37:27:6c:73:
                    3d:dc:86:14:71:90:4f:ab:8a:02:34:ad:0d:ed:60:
                    68:f3:f3:8f:22:f2:34:45:38:e5:80:f4:af:e9:ab:
                    df:91:9e:7b:77:53:2b:4b:8c:7e:94:94:38:8b:2d:
                    c9:0f:9f:8d:34:74:10:0e:24:11:93:2c:7e:64:ce:
                    cc:e1:29:c8:c9:4e:01:84:db:0e:b4:41:1d:11:e5:
                    ea:81:7d:71:e7:35:92:68:ac:8d:2a:00:7a:ce:cc:
                    1c:60:4d:ce:a0:a8:dc:ba:af:1d:62:62:97:14:03:
                    83:e3:d3:db:1d:71:1f:18:0b:98:ed:f3:f3:d3:1d:
                    be:7b:b7:6d:c6:86:9b:f4:be:9b:20:0f:75:aa:53:
                    58:c4:c9:da:43:3b:01:9d:42:7e:bd:e5:92:63:33:
                    92:52:be:e6:03:e1:e5:97:8a:44:7b:47:94:28:92:
                    d8:53:9a:3a:a2:c7:93:e8:e7:3b:33:dc:2b:cd:09:
                    49:4d:84:4f:d5:28:2c:eb:a9:57:39:72:24:35:a8:
                    b5:e0:2c:48:4b:f9:e6:fd:29:a6:7d:fa:db:34:a1:
                    b4:b0:9b:6b:12:4d:c0:e0:c2:d6:38:0a:8a:0c:99:
                    ba:0c:ab:66:93:5a:f6:49:74:21:6e:06:df:bf:f0:
                    67:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:08:83:8F:2D:8C:2C:50:E8:AE:A3:ED:5C:C3:12:1B:F0:4C:23:B3
            X509v3 Authority Key Identifier:
                keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e2:22:63:3b:53:3d:5c:85:a0:b2:18:85:71:97:9b:b9:36:
         25:92:e2:b1:3a:6f:a0:32:11:fe:74:02:f1:81:f0:2d:0e:e6:
         e0:69:5c:19:4b:8a:a6:ce:60:ab:bf:45:d9:ad:9e:cb:48:4a:
         19:e1:ba:78:95:58:d1:c8:ba:82:d1:fe:d0:e7:d6:98:a1:bb:
         2c:bc:55:fe:e9:47:8e:9a:41:46:88:26:9b:fd:d9:c8:02:f5:
         17:a7:76:9c:d3:26:1d:d9:44:9b:f0:8c:46:71:09:2a:f8:8e:
         91:8b:44:b8:c3:8c:9e:13:71:d0:26:7b:ef:d6:8e:00:b0:ff:
         68:96:eb:c5:e0:5c:f7:fd:2f:28:d6:a5:64:41:c8:92:db:76:
         51:61:5a:0f:07:9b:e7:a0:1b:5b:46:18:04:d1:33:b8:a3:e5:
         0d:6a:50:e6:0f:1c:c8:94:4a:78:e7:b7:8c:65:f0:d0:04:e7:
         fa:8d:6b:ec:34:04:a7:17:2b:c9:cb:ab:95:81:b6:17:69:ae:
         a2:24:17:db:30:b1:34:ed:b8:3f:94:a0:53:8c:0d:3c:63:f5:
         f8:63:26:df:c6:5c:03:04:3b:85:40:ee:5b:ef:81:7e:5e:0f:
         0e:76:33:44:c2:b8:1b:31:26:70:f7:7a:fc:6c:22:15:5a:d7:
         ff:4d:c1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR3c82cm/EvLClZs+ZN7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjODNkZmIyNDYyOWMxNjc3OTM1MGI0YTc3N2I1YjI4MGZj
NTlkNDQwHhcNMjYwNTEzMDMwMDM3WhcNMjYwNTE0MDMwMDM3WjAzMTEwLwYDVQQD
EygwMTA4ODM4ZjJkOGMyYzUwZThhZWEzZWQ1Y2MzMTIxYmYwNGMyM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKif3MlGnXbTUDcnbHM93IYUcZBP
q4oCNK0N7WBo8/OPIvI0RTjlgPSv6avfkZ57d1MrS4x+lJQ4iy3JD5+NNHQQDiQR
kyx+ZM7M4SnIyU4BhNsOtEEdEeXqgX1x5zWSaKyNKgB6zswcYE3OoKjcuq8dYmKX
FAOD49PbHXEfGAuY7fPz0x2+e7dtxoab9L6bIA91qlNYxMnaQzsBnUJ+veWSYzOS
Ur7mA+Hll4pEe0eUKJLYU5o6oseT6Oc7M9wrzQlJTYRP1Sgs66lXOXIkNai14CxI
S/nm/SmmffrbNKG0sJtrEk3A4MLWOAqKDJm6DKtmk1r2SXQhbgbfv/BnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEIg48tjCxQ6K6j7VzDEhvwTCOzMB8GA1UdIwQY
MBaAFCyD37JGKcFneTULSnd7WygPxZ1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3Yjkt
M2ZjMzk0ODc4MDdjLzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3YjktM2ZjMzk0ODc4MDdj
LzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOIiYztT
PVyFoLIYhXGXm7k2JZLisTpvoDIR/nQC8YHwLQ7m4GlcGUuKps5gq79F2a2ey0hK
GeG6eJVY0ci6gtH+0OfWmKG7LLxV/ulHjppBRogmm/3ZyAL1F6d2nNMmHdlEm/CM
RnEJKviOkYtEuMOMnhNx0CZ779aOALD/aJbrxeBc9/0vKNalZEHIktt2UWFaDweb
56AbW0YYBNEzuKPlDWpQ5g8cyJRKeOe3jGXw0ATn+o1r7DQEpxcrycurlYG2F2mu
oiQX2zCxNO24P5SgU4wNPGP1+GMm38ZcAwQ7hUDuW++Bfl4PDnYzRMK4GzEmcPd6
/GwiFVrX/03BWg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:03:14 2026 by rpki-client