Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
File:                     LuNT81A_m_8zgUUANWKOgaltkI8.mft (raw, json)
Hash identifier:          ztg1Wng3aEENzHHulhXp4pbnCcXaMvkPHC3CyBn3pqs=
Subject key identifier:   30:A2:3A:8C:ED:92:16:A4:80:B1:E2:EC:8D:A5:CE:EC:BD:58:D3:51
Authority key identifier: 2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F
Certificate issuer:       /CN=2ee353f3503f9bff3381450035628e81a96d908f
Certificate serial:       019D265F3857FB35DC7E3B336A7BF350B12F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 19:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:07 +0000
Files and hashes:         1: 19gKAdZ2OBELsSWbR0pBJyLvOhE.roa (hash: YWntgYAuHpdewYDi+xzegIxOR/YDZabzxqawWZHN2QM=)
                          2: LuNT81A_m_8zgUUANWKOgaltkI8.crl (hash: 9GYpmLfPL+ohmsGsrAsH+HGbz7DH0UXg4Lldo8VB1GM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:38:57:fb:35:dc:7e:3b:33:6a:7b:f3:50:b1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee353f3503f9bff3381450035628e81a96d908f
        Validity
            Not Before: Mar 25 19:01:07 2026 GMT
            Not After : Mar 26 19:01:07 2026 GMT
        Subject: CN=30a23a8ced9216a480b1e2ec8da5ceecbd58d351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ea:28:50:7d:61:16:07:7e:02:2b:ea:3f:1f:
                    03:3a:09:f9:b3:f5:a0:d7:00:d7:73:f2:2e:32:f7:
                    8a:b3:4c:36:5a:27:f7:29:17:7c:24:ea:ec:52:14:
                    79:62:32:c5:11:bd:9b:4e:a2:84:0b:0e:9b:9d:23:
                    73:14:16:47:2a:e7:b3:4a:c3:59:ff:34:0e:85:ad:
                    7e:f9:a0:36:7b:c0:e1:ae:76:eb:a8:18:76:aa:2b:
                    9f:87:ae:18:78:4b:34:9b:c9:41:0e:24:d6:d4:cf:
                    ae:9f:9b:af:70:f5:c2:f3:8c:fe:ac:de:2d:00:39:
                    dc:ea:9c:cd:90:e0:27:7b:91:7c:34:48:01:cc:d7:
                    0b:67:51:a6:a2:85:90:2d:8e:69:d4:50:9d:f5:57:
                    f3:54:f0:ef:9e:b6:4b:75:24:95:52:92:fe:c7:ed:
                    d4:b2:1e:52:63:e6:6b:c9:42:ba:0a:b9:18:dc:f4:
                    82:34:e0:80:74:90:16:ba:4c:73:87:3b:5a:8f:c4:
                    3c:13:7e:04:e6:e4:98:6c:93:28:7a:85:ce:15:21:
                    ae:81:4f:22:a1:39:13:9b:a6:0b:e4:77:7f:e0:79:
                    b5:b1:c5:8f:90:65:ab:fe:d0:85:10:ac:fb:22:97:
                    9d:90:aa:16:06:91:2a:ec:e0:03:6b:b1:a3:1a:6f:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A2:3A:8C:ED:92:16:A4:80:B1:E2:EC:8D:A5:CE:EC:BD:58:D3:51
            X509v3 Authority Key Identifier:
                keyid:2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e1:64:5a:e6:43:8d:dc:95:7b:e9:38:02:6c:a4:f0:e9:5b:
         b3:19:35:89:ce:7e:22:c4:94:6d:1b:f9:ad:64:4c:35:1c:a9:
         30:09:d4:75:a4:3a:46:98:66:d3:03:b5:34:18:a2:0f:0a:24:
         67:15:34:c5:5f:00:4f:16:43:5d:da:6b:87:81:8c:f6:28:5b:
         3d:7a:7b:55:f4:e7:08:4f:e2:e2:fb:b7:92:89:5c:43:e5:6f:
         73:19:02:cd:3c:e1:c5:98:0f:17:54:6d:8f:31:fc:a0:82:9a:
         8a:42:a7:2d:23:51:90:d1:80:43:a3:8a:f8:70:0f:4d:91:8b:
         d9:2c:45:4f:c4:40:33:89:4d:be:8a:0a:a6:45:86:90:5d:45:
         58:58:f5:fa:f6:d6:12:15:c1:b3:cd:bb:d5:99:88:b8:a7:61:
         1e:ea:08:1a:9c:6a:a7:e5:b0:42:c5:a8:93:e6:f1:50:c2:3b:
         6c:a8:c7:61:8b:7c:22:da:a0:33:27:ea:d5:b0:06:9f:2b:bb:
         c3:bc:70:0e:93:2a:88:06:67:d6:c8:0c:e4:62:38:4d:31:f0:
         3a:bc:73:32:ac:9d:41:5b:27:68:af:6f:cb:40:82:37:39:d8:
         fc:a3:0b:01:1b:d5:ca:73:fe:11:ed:ad:6e:1b:36:67:0e:59:
         0b:66:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:17 2026 by rpki-client