Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File:                     lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier:          NMpG+p/l6kwseF3+xV2aJb0cnPd5i5auLbzwcIH5Icc=
Subject key identifier:   B6:77:5F:87:16:01:7A:AB:3B:26:FE:75:F1:A1:1C:25:F2:F8:B4:2C
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer:       /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial:       019D27049C220B8684F3079F4B9AC12B3FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number:          0AFE
Signing time:             Wed 25 Mar 2026 22:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:46 +0000
Files and hashes:         1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: N+3N0t428vpe9f2vkAJxvr7W/jlK1aBLt3h1mry7gPs=)
                          2: w9C2YEP1w5Y_JbXVYJuueL5--a4.roa (hash: +XN99efnsnCoGzlf+tUbIokhlmEnZBGkv0fp+mcWEF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:9c:22:0b:86:84:f3:07:9f:4b:9a:c1:2b:3f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
        Validity
            Not Before: Mar 25 22:01:46 2026 GMT
            Not After : Mar 26 22:01:46 2026 GMT
        Subject: CN=b6775f8716017aab3b26fe75f1a11c25f2f8b42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:0d:fe:54:0f:7c:2c:42:76:59:31:85:49:
                    ec:71:55:99:c2:f1:f5:b0:fc:bf:ae:f4:05:44:e9:
                    81:ab:e9:8c:59:4e:1f:c2:26:a5:8d:fc:0c:28:27:
                    1e:37:51:1c:d8:2f:c4:b8:bb:d5:12:92:1e:01:ec:
                    a6:0d:fe:90:93:28:12:45:ef:16:40:34:84:0e:82:
                    cd:cb:6c:c1:f4:e9:7f:3e:18:57:f7:ba:68:9b:34:
                    aa:7e:91:76:9a:fa:d0:52:d0:2a:18:cd:0b:0d:05:
                    97:e8:21:24:62:11:88:79:55:96:07:d1:18:81:bb:
                    b0:37:0f:c3:a4:0a:da:0d:54:4b:cb:49:81:5f:01:
                    27:15:c1:98:80:cc:9b:89:13:8e:ec:e6:d3:9f:fb:
                    a2:ac:80:4a:ab:f1:70:69:1b:8b:15:3c:db:f2:99:
                    85:1e:f3:11:bb:6c:ed:28:bc:73:9b:ab:8e:fc:79:
                    3a:f4:d3:ce:b5:a1:98:7f:ac:f7:1f:e3:57:b5:46:
                    f1:39:2f:05:cb:06:3f:0e:b1:30:b5:11:35:ce:d8:
                    0c:e3:07:d6:57:86:41:bd:10:43:b7:82:16:76:20:
                    2f:b7:8b:f5:1b:29:97:c6:0c:09:19:0e:be:15:10:
                    7a:cb:1a:1d:f3:6b:6f:84:33:8e:ff:62:38:4b:d4:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:77:5F:87:16:01:7A:AB:3B:26:FE:75:F1:A1:1C:25:F2:F8:B4:2C
            X509v3 Authority Key Identifier:
                keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7f:b1:89:f2:9b:01:5b:f3:fb:b4:0a:65:54:0d:5a:d2:d9:
         23:32:1a:2e:b8:30:50:95:df:22:f2:83:4d:7e:2f:b7:45:c9:
         65:e6:0d:cf:2f:ea:df:8b:a1:15:8f:a1:10:25:3a:7a:3a:3a:
         1b:27:1e:06:33:e4:0a:65:d8:fd:fa:2c:a8:12:5a:13:30:cc:
         53:83:9f:48:43:3d:89:57:84:c1:4f:6d:a0:28:4e:20:0f:48:
         5a:3d:18:70:00:c9:b7:bd:77:ab:f1:2e:19:6c:ba:ef:1e:de:
         ed:af:13:35:95:1a:1d:46:37:81:2b:46:db:7a:b3:94:f6:9b:
         dd:61:06:2f:35:12:c0:bc:4d:b4:93:5e:79:d6:84:ce:91:fc:
         75:d7:72:18:dd:59:d7:62:0c:3a:ee:e7:4d:fe:f0:86:5e:d5:
         d8:e7:79:a2:60:3f:f8:4c:ba:50:b7:59:9c:be:1a:60:be:29:
         ac:9f:e5:ba:07:8a:4e:c4:8d:20:e8:67:4b:ac:0e:f3:6c:f0:
         8d:bb:fb:8e:7f:b2:31:2b:ff:29:2e:63:c3:8a:c2:29:61:45:
         1c:9f:34:04:02:8e:e1:56:5b:ab:5e:dd:be:e7:57:d6:da:a2:
         6a:37:b5:0b:70:85:d3:c1:48:2f:61:6e:f5:49:19:0d:ac:4b:
         53:ff:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:11:16 2026 by rpki-client