Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File:                     LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier:          52ioO7XroCiL913SfnWQk5Rh9n72rkoIwLQRgtMkzFw=
Subject key identifier:   14:93:DA:CF:84:FE:B5:C2:90:8F:9E:ED:2A:C7:0A:89:8C:F7:DA:2B
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       019D2704443372754399766EA4E2CC799D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number:          188D
Signing time:             Wed 25 Mar 2026 22:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:24 +0000
Files and hashes:         1: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: 0k9g7vx47gNem1ksdKQC5pyRia3EXzeoe1wzMKBlsck=)
                          2: PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa (hash: RoukLN17HEVFuKCJd4uqal1toMgfNC1RsX/IX0RX0fY=)
                          3: ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa (hash: /U4sk1hEfw6QielSTTSNVHXW385f6r5x3U3PzQsHic0=)
                          4: _lZzPK9uWMwoSBp8I6Oz0H5otFM.roa (hash: HhqN6YMYlZ3P1sgosME+uE6us2GmXOviN/kysVznFCI=)
                          5: qVl9UPtcOfv2GnXxXOewgnePOCY.roa (hash: Ls9yx6jQRN+6skTSMeFCiw+2fZmjJYWCP94aDC2pEzQ=)
                          6: rdJ8xXk5mnbp3JUsMack9bv5xiI.roa (hash: D2xipsYNPUahyWKXqjJrN51ikNliYwMKQLyig70LUbA=)
                          7: ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa (hash: qw3dBH90auYZSvCUgIiKsoKHtmICDEf0vkVYNxSJ9/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:44:33:72:75:43:99:76:6e:a4:e2:cc:79:9d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Mar 25 22:01:24 2026 GMT
            Not After : Mar 26 22:01:24 2026 GMT
        Subject: CN=1493dacf84feb5c2908f9eed2ac70a898cf7da2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:fc:e9:99:23:63:19:12:9e:13:51:9a:4b:
                    37:81:33:33:d5:a8:17:99:cf:f3:e8:11:77:d1:90:
                    13:0e:d4:f7:7e:1b:c4:06:1a:4f:87:13:14:4d:dc:
                    4f:c8:aa:58:56:37:d4:e5:4f:e6:9b:38:69:bd:b5:
                    0a:db:4d:db:25:3d:e7:59:2e:ee:d0:46:ba:ad:ba:
                    2f:bd:94:4e:de:44:0b:b5:b2:4a:c5:18:73:2a:de:
                    d3:7c:96:5e:0a:3f:a8:03:f2:bf:8b:b9:df:e0:51:
                    6d:6a:be:91:1c:5d:f4:1b:31:3a:7b:f3:87:fb:8f:
                    d0:d6:cf:ca:72:8d:3f:70:02:43:49:4b:83:74:28:
                    58:2f:2d:9c:27:b6:5a:36:da:bd:00:f1:84:44:02:
                    5a:2d:2d:b9:7f:a5:ab:1f:c4:2b:0e:5a:da:99:5c:
                    cb:6e:77:20:65:3a:16:23:f0:92:9d:f8:90:79:0c:
                    5a:a1:7f:b2:81:da:05:91:b5:81:60:23:42:1b:34:
                    33:eb:83:81:63:fd:89:66:df:fd:47:4c:f7:bf:4a:
                    10:da:4b:f8:87:59:a6:81:23:cf:fb:d6:a5:7d:f4:
                    98:ae:77:e6:17:f8:7c:74:63:1d:3f:f7:55:c8:1f:
                    a9:01:1d:f2:ef:6d:16:83:af:06:6b:ce:b8:73:22:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:93:DA:CF:84:FE:B5:C2:90:8F:9E:ED:2A:C7:0A:89:8C:F7:DA:2B
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:e7:0e:4e:f7:42:6f:52:42:ce:8e:27:6a:8f:eb:1e:4c:
         88:0c:19:a6:59:8d:19:9b:64:d4:90:37:87:2f:3a:0b:53:46:
         af:01:2e:10:22:c8:a7:41:5b:e3:dc:5a:7e:cf:b7:e2:59:9e:
         6b:d4:c1:41:46:2a:54:7e:1b:c6:14:67:25:dd:b0:fe:3f:c6:
         68:64:4c:ce:13:ed:73:ae:40:45:85:e0:87:a4:89:ae:11:50:
         f9:d7:46:fb:2f:db:1d:09:e7:d6:d0:22:e8:db:d7:50:6b:1c:
         38:38:08:f9:72:7f:23:04:b5:30:7d:69:eb:e0:87:39:65:c2:
         03:24:fc:34:82:43:55:4e:2b:3f:3d:2d:c5:62:7e:d7:23:37:
         42:19:eb:d7:d2:74:07:fe:a2:5d:d2:6e:0e:22:cb:62:76:54:
         95:9f:73:fa:ce:6e:ae:26:cc:d2:30:4d:3b:5f:c0:7f:6c:a9:
         fa:36:2c:63:85:7a:49:c8:e7:1c:94:32:a8:31:37:c7:94:b1:
         ab:7e:0f:8b:b2:0e:53:04:a5:e8:af:e3:fb:56:b5:ef:e0:f8:
         fd:14:e1:74:fe:27:ca:8f:b5:0e:2d:15:5f:f4:73:e4:1a:58:
         15:74:8f:00:0a:77:c8:6a:01:4e:d9:3b:12:39:26:ca:94:ad:
         d5:a2:fa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:47 2026 by rpki-client