Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
File:                     LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft (raw, json)
Hash identifier:          hGmsi9CLhJKZ2jy3AoFmtQ7L6AiOjc5xmuuEuFS3L0Y=
Subject key identifier:   F5:D0:12:79:14:9A:C6:26:EF:BF:FA:BD:D9:96:6C:9C:A9:08:19:E2
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Certificate issuer:       /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial:       019D25BA9D7FC1DF63F325DC4C630F375BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
Manifest number:          07BB
Signing time:             Wed 25 Mar 2026 16:01:20 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:20 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:20 +0000
Files and hashes:         1: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl (hash: 5QW9T+PdYewTWAoI3olVIOwD+uLmQdUMqAbn+HkGRBA=)
                          2: qQXczGpLv7J7hq-BXv0MunRxV1c.roa (hash: Ujrg8dmMYkyioyqFyW+i5iP0MRcs5Kuh6E+0SAn8NNs=)
                          3: z5F-NpHTklKVWAn6D5A0JTxkXS0.roa (hash: sWSxz0HZQ0kSW1+UlQBYZDH3NEvjZZ8BJExjY5FUj2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:9d:7f:c1:df:63:f3:25:dc:4c:63:0f:37:5b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
        Validity
            Not Before: Mar 25 16:01:20 2026 GMT
            Not After : Mar 26 16:01:20 2026 GMT
        Subject: CN=f5d01279149ac626efbffabdd9966c9ca90819e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:d9:3d:2b:c8:06:b6:20:ca:c2:13:ac:d9:
                    98:6c:37:b8:85:57:2d:e8:3b:2c:9e:40:e5:2c:f2:
                    65:fa:55:f1:7e:ad:76:23:f8:dc:ad:a5:dc:3c:93:
                    29:70:bb:1a:c0:12:a4:06:61:06:1e:11:8e:49:c9:
                    7e:cc:8a:58:e9:38:52:20:71:2a:14:17:9f:28:2f:
                    a8:b9:87:c2:dc:f8:b1:1f:15:54:b3:79:89:d3:37:
                    3a:f0:80:b4:ce:ac:86:4e:1f:33:c5:ba:ee:c8:78:
                    8d:f5:17:63:30:da:44:41:89:d8:0a:70:08:35:d1:
                    b2:a3:87:82:ed:02:31:42:23:96:8f:78:a8:cb:cb:
                    62:52:07:34:ed:af:07:ad:f7:e5:84:3d:7d:83:59:
                    27:3e:4e:80:e0:9a:7b:71:88:cb:94:40:ae:7b:34:
                    27:f8:54:50:34:cc:e4:0f:11:2c:6a:47:75:5f:51:
                    92:8b:1a:4d:7f:9b:79:0e:79:d5:8b:a2:e0:c4:4f:
                    3a:5d:54:e8:9d:11:5c:4f:89:b6:a8:2c:99:83:a6:
                    90:4c:73:a5:04:88:9e:31:46:1c:6b:93:64:cb:06:
                    97:8b:6f:da:68:5d:f8:90:17:bf:50:ad:12:cd:70:
                    db:ff:2a:de:cb:73:7a:69:e0:2d:9a:8d:ca:01:c6:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D0:12:79:14:9A:C6:26:EF:BF:FA:BD:D9:96:6C:9C:A9:08:19:E2
            X509v3 Authority Key Identifier:
                keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ce:f5:0e:3b:69:5f:17:4a:16:9e:bd:8b:70:69:e3:1a:21:
         6a:19:03:26:20:4b:7c:80:04:cd:d3:3e:23:17:07:f2:5d:40:
         4f:4e:5b:c4:ae:77:22:6e:7d:e6:16:8a:e9:11:fd:a7:eb:66:
         44:27:46:77:c3:19:f1:2b:59:d1:e1:6f:66:06:be:51:be:82:
         15:f1:2f:31:7c:fd:93:49:e6:e1:b7:c5:5f:eb:90:ed:13:a6:
         34:ec:f7:c6:ee:bb:00:e4:fb:08:90:34:73:f3:3c:ba:cf:fb:
         4c:27:4a:4f:55:37:23:91:98:d1:6a:ca:41:a8:09:be:ed:7a:
         10:1d:6d:c8:2e:c4:f4:ec:84:c2:9a:d6:4c:0c:d6:0d:97:76:
         e5:18:1c:da:00:68:09:f7:cf:f8:e3:97:9b:1e:00:df:da:92:
         ed:a5:e0:eb:aa:28:a3:6c:47:98:2c:3f:b1:ba:2f:ca:6d:c2:
         dd:b9:c6:3b:a4:83:b6:b7:a8:61:b9:38:2a:aa:1c:65:59:41:
         42:60:81:2e:1a:65:70:6f:64:3d:f2:0e:79:3d:04:ac:67:84:
         19:d7:22:03:25:f8:fb:80:eb:bc:d9:f2:92:46:a8:c2:90:60:
         4f:c1:82:87:6a:63:49:42:ba:c9:ad:d3:26:f4:17:9b:40:75:
         c2:13:af:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lup1/wd9j8yXcTGMPN1vaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNThiNmJlOWM2YzAzM2IzYjEyNmYyNzdkMDJiYzA1NDQ5
OWZjZmIwHhcNMjYwMzI1MTYwMTIwWhcNMjYwMzI2MTYwMTIwWjAzMTEwLwYDVQQD
EyhmNWQwMTI3OTE0OWFjNjI2ZWZiZmZhYmRkOTk2NmM5Y2E5MDgxOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4LZPSvIBrYgysITrNmYbDe4hVct
6DssnkDlLPJl+lXxfq12I/jcraXcPJMpcLsawBKkBmEGHhGOScl+zIpY6ThSIHEq
FBefKC+ouYfC3PixHxVUs3mJ0zc68IC0zqyGTh8zxbruyHiN9RdjMNpEQYnYCnAI
NdGyo4eC7QIxQiOWj3ioy8tiUgc07a8HrfflhD19g1knPk6A4Jp7cYjLlECuezQn
+FRQNMzkDxEsakd1X1GSixpNf5t5DnnVi6LgxE86XVTonRFcT4m2qCyZg6aQTHOl
BIieMUYca5NkywaXi2/aaF34kBe/UK0SzXDb/yrey3N6aeAtmo3KAca1XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXQEnkUmsYm77/6vdmWbJypCBniMB8GA1UdIwQY
MBaAFC1Ytr6cbAM7OxJvJ30CvAVEmfz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2Mt
Y2I4NmRiMzUwOTMxLzEvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2MtY2I4NmRiMzUwOTMx
LzEvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHM71Djtp
XxdKFp69i3Bp4xohahkDJiBLfIAEzdM+IxcH8l1AT05bxK53Im595haK6RH9p+tm
RCdGd8MZ8StZ0eFvZga+Ub6CFfEvMXz9k0nm4bfFX+uQ7ROmNOz3xu67AOT7CJA0
c/M8us/7TCdKT1U3I5GY0WrKQagJvu16EB1tyC7E9OyEwprWTAzWDZd25Rgc2gBo
CffP+OOXmx4A39qS7aXg66ooo2xHmCw/sbovym3C3bnGO6SDtreoYbk4KqocZVlB
QmCBLhplcG9kPfIOeT0ErGeEGdciAyX4+4DrvNnykkaowpBgT8GCh2pjSUK6ya3T
JvQXm0B1whOvvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:14 2026 by rpki-client