Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File:                     LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier:          7SXnDz4RVfLZQK677rdwAW3XWhojxBxBP2dTwBP3Ybk=
Subject key identifier:   6A:D8:D3:EC:AC:D9:1E:80:2B:C7:D9:09:31:A4:20:5C:D9:D8:8A:24
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer:       /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial:       019F92482D2DC76D853043C173BF95ECE4FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 04:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:31 +0000
Files and hashes:         1: CBnGBeMmfjtC-_l50Apa-rnM7ro.roa (hash: tqc1bO+aiQg/sSJgPer6VgbSztJvGQrMbPiX8vaUTEc=)
                          2: CK3zVq2E2JWnSie8IPkPmkTQAJw.roa (hash: 5fi0O3p9ePi7rf1DhBwT/4afhsP0X6JGcQ74b0c4lTQ=)
                          3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: Qe4jX+4dvx/dlMko7pKHyloyyFOiU3T5rxlxoTNC0Lw=)
                          4: Yg9iLr8mf8U8LuZpwB1CnTu08oQ.roa (hash: /1zfIH4wj/NT7nx+ZkonwZjt7ZKmu7eqePuUpLvYMyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:2d:2d:c7:6d:85:30:43:c1:73:bf:95:ec:e4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
        Validity
            Not Before: Jul 24 04:00:31 2026 GMT
            Not After : Jul 25 04:00:31 2026 GMT
        Subject: CN=6ad8d3ecacd91e802bc7d90931a4205cd9d88a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:45:3b:15:de:80:31:54:c0:c2:33:3c:10:3f:
                    bf:6f:cd:54:e3:21:a1:5d:81:d0:b2:28:eb:ad:7a:
                    44:d1:3c:bd:cb:59:c0:6a:db:a7:1b:b3:84:6c:ce:
                    2d:2c:ce:e0:49:e1:7e:ff:e5:84:8e:6c:a1:77:a3:
                    e5:b3:4e:d0:47:ba:59:9f:b9:20:90:03:60:f3:61:
                    7b:3b:30:c1:06:00:ba:41:01:2a:c4:17:47:a9:4e:
                    8c:7f:ce:d2:78:bd:d1:86:4a:8c:d9:4a:f5:74:55:
                    16:89:02:c1:7b:fd:29:4d:02:19:48:1c:a2:95:d0:
                    1b:2d:69:9b:4a:36:01:b2:2b:e5:06:fb:5c:9b:9c:
                    a8:73:8e:f7:ce:0c:2d:e1:65:a3:d8:c1:d0:3d:72:
                    4e:63:db:05:27:a4:f2:18:e5:b1:b8:a9:aa:5b:4f:
                    41:cc:42:66:e8:50:ca:22:72:31:f0:b3:e9:bf:ee:
                    f5:53:a2:6b:da:c5:86:29:a4:3e:d5:09:fc:0e:5c:
                    55:a7:ec:8c:9a:65:53:a5:d9:66:0f:c6:01:c2:83:
                    30:bd:12:8b:20:9c:1d:87:ff:2d:29:bc:34:3f:7a:
                    44:66:6b:14:ba:19:9b:4f:22:62:7e:e7:f7:80:32:
                    32:3e:a8:e2:06:e9:dd:f7:f1:b2:86:07:fc:43:aa:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:D3:EC:AC:D9:1E:80:2B:C7:D9:09:31:A4:20:5C:D9:D8:8A:24
            X509v3 Authority Key Identifier:
                keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:65:d6:3e:38:78:9d:a3:77:ab:34:b5:1a:cc:17:bf:73:f2:
         f4:d0:e0:91:b1:07:b5:b3:5f:76:12:22:d4:eb:44:c2:01:c5:
         21:56:bd:51:3b:9b:12:7f:05:96:3c:7a:84:ed:e9:89:e5:43:
         a1:ac:1c:e1:2e:fc:dd:4b:0a:d6:c3:cd:6c:c8:8c:14:72:77:
         9c:61:66:6d:9d:a6:df:6e:d7:d8:78:3a:bd:63:bf:00:cf:21:
         c5:4d:1a:16:65:31:c9:77:23:b7:37:d8:e2:bb:e5:c3:46:eb:
         c0:c6:b2:ba:ab:84:8f:5b:32:8c:1b:b6:01:41:b0:24:c2:b3:
         8f:20:4d:ac:57:96:92:e0:29:94:19:50:6d:72:2d:cd:3d:ca:
         e0:9d:fc:65:84:c2:c5:3f:f4:ca:ce:20:1d:7b:da:4b:2e:c0:
         f8:25:ed:21:f0:31:4a:0e:e8:3c:f3:a5:f2:f5:4f:44:07:73:
         2e:12:01:6c:a6:e7:8c:3f:fc:f7:88:0f:fa:0b:99:1c:e4:fd:
         98:11:39:ff:50:b3:bc:fd:81:04:f5:85:8f:03:be:38:06:be:
         61:4a:33:0d:1d:c4:18:ad:0b:7e:2e:3d:98:9c:e9:b0:3e:aa:
         6b:b9:b6:70:e3:b7:56:d9:cf:75:7f:23:e5:1c:73:ab:0b:12:
         57:b2:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:37 2026 by rpki-client