Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File:                     LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier:          okXZcPdKgRyK/B6e+Hh+E8Cp1BWhYndjGpyt6A4oWHU=
Subject key identifier:   95:0D:C3:7E:60:82:5E:03:E4:52:8D:C1:9F:BB:28:4D:47:A1:48:D2
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       019F9135E8C6915CAD0F0E3E6A8098744F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number:          1A05
Signing time:             Thu 23 Jul 2026 23:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:57 +0000
Files and hashes:         1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: cfQYzIlsaFjsz3H0QOMctFaJCNN3VURTXf00jiybAyY=)
                          2: vQGqMk2tUWFQV3KWvNRVI4u6g8A.roa (hash: ETJTcUD8tj+bJ3F84d7NY+2CRj1SkXQZGuzA9XMRE3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:e8:c6:91:5c:ad:0f:0e:3e:6a:80:98:74:4f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: Jul 23 23:00:57 2026 GMT
            Not After : Jul 24 23:00:57 2026 GMT
        Subject: CN=950dc37e60825e03e4528dc19fbb284d47a148d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ce:42:8e:9c:cf:b0:62:13:67:fa:52:52:36:
                    e2:ed:71:53:66:12:c9:0b:91:fa:7d:bc:02:5f:85:
                    1e:f3:67:ed:f7:83:0b:dc:63:39:4f:ad:70:7f:12:
                    df:bf:43:4e:05:a3:7b:df:cb:f8:37:cd:75:b8:68:
                    51:c5:f7:2e:37:84:11:16:3a:69:b2:6c:f5:52:7b:
                    2a:62:3d:67:ae:1b:fb:72:23:94:e4:1e:51:87:35:
                    02:25:88:07:0a:38:6a:5f:c5:1d:46:f1:99:9d:f5:
                    7b:3a:71:5b:40:01:27:71:a4:6b:eb:58:de:02:a7:
                    df:09:83:f3:bd:be:d5:8b:cd:4c:6c:bb:9c:42:31:
                    17:50:a6:70:e0:4c:a1:38:56:f9:23:b7:c6:f3:b3:
                    85:7f:70:3c:35:74:c3:92:49:52:99:76:f2:a5:3d:
                    6c:15:5d:6a:bc:bc:8a:8f:17:93:6a:7f:89:4d:8a:
                    bf:6b:5d:f8:cf:b1:95:22:57:e2:34:92:0f:4c:1d:
                    65:04:83:2f:96:21:47:a0:31:06:8e:d7:4c:91:51:
                    da:05:d5:3a:43:1a:d0:eb:86:7b:7b:8c:72:30:8f:
                    c0:bf:bc:ad:3c:d8:00:ab:01:2d:08:f6:d3:a7:26:
                    bd:b7:b5:8d:0c:65:5d:ee:59:72:2d:09:61:c6:ba:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0D:C3:7E:60:82:5E:03:E4:52:8D:C1:9F:BB:28:4D:47:A1:48:D2
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1a:49:20:76:10:92:ef:a4:3d:5f:e9:bc:62:9f:ab:9f:57:
         93:0d:81:d3:c9:a5:3d:4b:df:f6:c1:c2:c5:22:43:d0:a7:70:
         f8:b8:ea:ae:22:cc:ed:8e:cd:37:59:cc:ca:96:9e:5e:be:b9:
         1d:a5:53:9f:7e:66:c2:e4:62:52:40:c4:d4:27:79:bc:64:fb:
         4c:a1:84:40:91:9b:30:88:9c:b1:65:f6:fc:f2:93:7d:72:c1:
         0b:51:21:d9:e2:b9:a1:48:2a:65:a0:c3:bb:32:d5:9f:0d:f6:
         ff:e9:77:80:79:64:ad:4c:ae:e4:54:8c:39:0d:24:46:e3:4e:
         77:5a:07:05:f1:dd:a6:d0:56:62:aa:32:f4:3a:a6:9e:e0:07:
         24:fe:fc:c1:61:73:50:7c:83:e7:fb:7e:85:41:eb:00:7e:ba:
         3b:a1:0b:34:50:25:51:64:fe:9c:07:b3:dd:b9:97:63:95:5f:
         f0:e1:90:cb:b8:a9:50:c9:ca:fe:fd:eb:79:d9:f0:9e:6d:db:
         21:19:a8:f8:b1:c8:d3:11:13:6e:e7:d4:0e:28:4f:cd:0a:83:
         8a:74:f0:e4:dc:e2:f3:3f:bf:13:75:86:b7:3a:ff:e9:8d:e7:
         48:0c:92:94:68:30:e9:1f:89:6e:21:66:90:93:82:72:e9:e4:
         5d:80:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:41 2026 by rpki-client