Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File:                     Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier:          KmCKBqdekVvHzRP9ioO6cC9gzIUtb/NFgG3mz3F47pk=
Subject key identifier:   75:68:81:DD:D2:37:54:E9:24:63:09:4D:2D:FC:31:BB:90:5A:56:6E
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer:       /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial:       019E1EDA410402BBAEC145B86F6FA9FD1F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number:          190D
Signing time:             Wed 13 May 2026 01:01:20 +0000
Manifest this update:     Wed 13 May 2026 01:01:20 +0000
Manifest next update:     Thu 14 May 2026 01:01:20 +0000
Files and hashes:         1: DsgH-2l0ZUEQ5QwDCoj8o-EpJFs.roa (hash: yvpnLBP9aiLVJJIHtl3Or2O/+llJmxZ1ZUNn0YtwZpg=)
                          2: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: XLct7fmoFvi9eLW0VOLljV/GYFHCoZrQPtyz4gy5lLw=)
                          3: NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa (hash: UE/nLkMq9esL2M39yDKTuiYBOgv6z8tQHjDR2GXbU1s=)
                          4: PpfIHCD22AUayAWPFxeE0m6hL9o.roa (hash: tEQKGH709CVuan0YOwHt1iqyxRmhemh2Iabk8KfvabM=)
                          5: X9ZqGynMA1KtK65ZVtTizqC4m9M.roa (hash: hcMM10zcyfbfDa1u/NFR+3E0NC3GcUNUVcvC/8j8tfA=)
                          6: pR8icRPbtmxZyLYy7ClhNlyoP3I.roa (hash: hJET2JInI9K0Hd2BzAqq/nSPxKB057Gd1PzyTDZKZpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:41:04:02:bb:ae:c1:45:b8:6f:6f:a9:fd:1f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
        Validity
            Not Before: May 13 01:01:20 2026 GMT
            Not After : May 14 01:01:20 2026 GMT
        Subject: CN=756881ddd23754e92463094d2dfc31bb905a566e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:9b:0e:78:c3:63:98:4c:b8:f1:c0:5a:a0:
                    0d:b2:37:da:ec:ce:66:9b:b3:b2:6b:e5:1a:dc:b8:
                    2e:8a:e4:41:7d:1d:4b:b8:33:59:6b:f6:bd:f0:96:
                    05:76:42:07:cd:69:d5:66:53:15:ea:d1:1c:73:3c:
                    60:a5:54:7d:fe:4f:3e:18:1d:62:1e:62:81:60:d8:
                    96:90:5c:43:c1:e2:f0:b3:8a:41:c7:fd:1c:62:5c:
                    57:03:b3:16:20:ab:1e:4b:61:80:6f:2b:73:59:0d:
                    a3:47:98:b7:b4:eb:ae:e6:a1:50:07:c4:cc:08:46:
                    94:e5:b3:15:94:c7:62:37:d6:16:31:85:a3:e7:1f:
                    39:e9:f8:99:89:91:b0:8b:3a:d7:c5:67:2f:15:00:
                    d0:dc:cd:3b:b3:4a:5b:0a:ef:35:8c:fb:20:be:24:
                    21:54:a6:51:b3:43:49:6b:73:19:a4:52:4f:68:5c:
                    ff:b2:a5:44:ec:86:09:31:63:b5:1c:b1:85:20:f6:
                    d7:b0:b2:e0:59:44:08:e5:b3:65:63:23:4a:26:f0:
                    45:08:d4:33:2b:bc:da:4e:48:67:d2:cb:8e:ca:32:
                    6c:d6:66:ec:f7:4f:61:07:cc:3c:51:ab:b5:e2:41:
                    4a:59:b8:e0:13:e7:c4:5b:f1:0b:78:eb:ff:ec:b9:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:68:81:DD:D2:37:54:E9:24:63:09:4D:2D:FC:31:BB:90:5A:56:6E
            X509v3 Authority Key Identifier:
                keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0d:ca:8e:47:41:3f:3c:ca:61:dc:74:40:4a:fe:c0:61:54:
         7e:37:de:50:5d:c7:24:f6:a3:3f:7c:43:13:09:4c:2a:b0:67:
         e9:ab:76:df:08:3e:d3:ee:57:6f:e2:e2:1e:80:19:53:87:a4:
         ac:dd:0a:aa:38:d6:48:2b:2b:06:fe:44:55:7a:2f:02:61:3d:
         86:d5:a2:fc:f3:cc:88:99:4b:b7:b9:78:9a:38:e7:97:ac:bb:
         34:ba:89:ea:d6:0f:20:c6:43:f8:a1:d8:aa:db:0d:85:dc:78:
         38:8c:32:e7:f8:4e:4d:90:c2:0b:4b:34:f3:1d:a3:3a:b1:9e:
         57:61:c2:3d:2e:ea:da:7c:07:22:30:09:82:0c:cc:82:46:8b:
         45:58:bb:3e:29:d3:02:26:8f:00:ff:6d:ee:e5:13:02:f9:4f:
         b9:a4:64:61:ab:2b:5f:96:f2:4d:9d:35:2a:f0:87:05:7e:9b:
         6c:03:b0:3e:54:e0:48:80:37:83:c4:da:d5:5b:18:0b:40:e2:
         a1:50:00:63:18:7c:4b:43:f0:c5:7d:98:c6:0f:f3:17:e1:88:
         9e:61:d8:8b:a6:92:57:99:9d:f8:fd:ce:87:7b:de:3a:a6:16:
         79:19:bc:93:70:63:be:31:22:1f:d1:49:e8:7b:ef:4a:45:89:
         cf:9b:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:21 2026 by rpki-client