Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
File:                     lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json)
Hash identifier:          anHPsSBYbsxrhUtPE5bo0PGTCVsj8PM8KV477LYWQSo=
Subject key identifier:   47:5E:C7:8D:2C:BA:7A:4A:1D:31:B8:6A:A3:A6:6E:01:8D:FA:8A:9D
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Certificate issuer:       /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial:       019F91DAEAD3B63F44B9CCB7348707E97D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
Manifest number:          0E6C
Signing time:             Fri 24 Jul 2026 02:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:10 +0000
Files and hashes:         1: 5tq-dphgnapNG8uID0bzWyuSiiI.roa (hash: Geh8HxvdWtRdjQA8GTRZhRKQeMt/TQkbrTaKQX7hwuM=)
                          2: SNXaMmatRq7Y2yZacERGh_Byx3c.roa (hash: 1VfAG/PWe9ADh3l7lJxuP3CaKheNhNOZc9+mMKVHmsc=)
                          3: aeJRC_Zrs1Xdsza3m-Bp94bJ1dk.roa (hash: 31o9/oasTnGfM4n9yp1biNvrc9x/A8EYFBmDcG491Fg=)
                          4: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: K8c9cxd2MSo40yAANwi6fsqJhCZP3DyCUEOS272TkFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:ea:d3:b6:3f:44:b9:cc:b7:34:87:07:e9:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
        Validity
            Not Before: Jul 24 02:01:10 2026 GMT
            Not After : Jul 25 02:01:10 2026 GMT
        Subject: CN=475ec78d2cba7a4a1d31b86aa3a66e018dfa8a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:76:e8:bd:ba:a1:04:8b:16:2a:fb:71:51:
                    52:7e:75:fa:67:6f:0a:7e:6f:f3:33:81:ea:7a:54:
                    7b:f6:ac:84:df:62:7a:e1:90:df:8c:bb:6d:ad:c4:
                    4c:25:d4:f1:4e:39:9c:53:7b:15:60:8e:d6:58:e1:
                    c9:bd:f3:c1:60:0c:51:6e:24:75:b2:f0:b0:4c:f0:
                    a0:87:3d:3c:a7:8d:fa:a7:bc:76:aa:e6:93:c9:bb:
                    3b:8f:d0:62:1e:95:5e:60:aa:90:e2:57:46:53:6a:
                    fd:d0:ae:e4:dc:50:ea:d1:56:29:ac:89:9c:1e:9d:
                    fa:71:3f:92:5b:10:fd:a7:e5:d0:77:d2:90:3a:fe:
                    96:49:58:a9:b8:4c:3e:43:e6:52:f2:1d:13:d9:29:
                    52:6e:2f:ec:6b:fb:dd:d6:f6:74:9b:2a:a9:32:0d:
                    c4:dc:ab:56:35:44:3a:9b:13:a1:6b:ef:70:ad:d1:
                    99:e9:52:0f:02:98:5a:db:01:c1:4b:9d:42:cd:52:
                    85:02:00:34:d4:12:3e:a3:88:9c:00:43:7f:53:92:
                    6b:54:80:3c:b3:36:10:ad:9e:b1:3d:63:aa:45:9e:
                    a8:57:94:37:41:fd:19:14:32:a1:4d:45:3c:8a:f1:
                    1a:18:11:40:b9:e3:68:36:ae:6f:84:9c:9a:0c:d5:
                    93:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5E:C7:8D:2C:BA:7A:4A:1D:31:B8:6A:A3:A6:6E:01:8D:FA:8A:9D
            X509v3 Authority Key Identifier:
                keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b1:06:40:a8:4a:06:75:e8:e7:6a:29:5f:59:b0:09:f6:65:
         7d:c6:b4:cd:e6:ff:81:03:57:42:c4:a3:9d:17:4e:0c:f3:94:
         bb:9f:f6:a1:37:d3:6e:f8:32:36:66:73:ae:39:d7:78:80:d0:
         2a:39:7a:4a:e0:51:da:0d:32:f8:af:4d:7f:d7:60:fd:7a:df:
         12:58:62:30:8d:ae:bc:60:21:64:74:0b:51:25:24:ad:c3:9d:
         e2:e0:61:78:98:b8:64:a8:36:8d:9d:90:c1:0f:74:25:9b:f1:
         12:7b:c4:fb:e9:6f:af:ad:7a:51:ad:34:a5:08:a8:8b:e7:27:
         25:a9:32:b2:69:c2:87:b2:aa:78:4e:41:20:b2:17:f6:fa:01:
         7c:90:41:0f:76:ce:7b:af:78:0d:40:f3:6f:8c:62:3e:ed:6e:
         9c:f7:40:bd:fb:3c:52:73:c0:79:a8:8d:af:a7:4c:f3:77:b7:
         6e:d4:ce:cc:55:6e:ca:4d:3e:5a:ed:c7:67:fe:44:e8:58:70:
         00:3b:ed:b6:47:3b:1e:38:ca:06:55:86:5d:17:d4:8c:f5:14:
         13:bd:5e:43:5b:ca:05:1d:b5:f7:f2:b5:d0:fd:64:ce:86:61:
         fa:9e:0c:43:38:cc:d9:04:93:01:49:c2:f5:d8:54:c8:e8:4d:
         29:a7:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:30 2026 by rpki-client