Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
File:                     LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft (raw, json)
Hash identifier:          QC2I27zrRfGckn4RPqK6VfYQH2BNEbZ6oAP8jY4J6/A=
Subject key identifier:   9B:2E:88:03:EF:77:0E:13:EF:2D:6E:7E:9A:B6:F2:DC:09:74:8C:FE
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Certificate issuer:       /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial:       019D25BA186901D8F3920CF11D019E2B1DBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
Manifest number:          162B
Signing time:             Wed 25 Mar 2026 16:00:45 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:45 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:45 +0000
Files and hashes:         1: LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl (hash: LfQeyB8jwX/UA7XLxZOTutdY6I/fjdOT86ae6r+BQCA=)
                          2: eCsI9ucXPaJjthSt7UqstfpMcgw.roa (hash: BJmFakl63PW8FDTTqEoYLCeTIRf7a3gbYrepvj1Gygw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:18:69:01:d8:f3:92:0c:f1:1d:01:9e:2b:1d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
        Validity
            Not Before: Mar 25 16:00:45 2026 GMT
            Not After : Mar 26 16:00:45 2026 GMT
        Subject: CN=9b2e8803ef770e13ef2d6e7e9ab6f2dc09748cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:da:d8:07:85:80:90:e5:67:37:50:94:ca:
                    81:19:30:f7:e1:09:77:5d:d6:a4:69:80:83:aa:1f:
                    5a:4e:13:0b:38:cc:e5:84:df:fa:46:06:74:bb:3e:
                    db:8b:7d:80:52:e1:50:23:a6:92:ca:df:68:76:aa:
                    e5:80:14:82:db:39:7c:9b:5d:65:4a:ba:4a:b1:14:
                    0b:22:68:08:4c:cf:8b:4e:62:89:80:23:9d:1e:f6:
                    56:25:33:84:2c:47:7b:10:85:21:02:c9:a8:cf:bb:
                    72:ee:36:86:2d:ec:a5:c7:a7:1c:b8:51:fb:d3:9f:
                    14:32:35:be:49:59:78:42:e4:2a:b9:69:3b:9c:15:
                    3d:3d:55:59:82:8d:09:2d:08:e0:a6:cc:9a:a5:e8:
                    8f:bc:6c:43:5f:a2:f9:5d:89:fb:a5:30:25:8e:61:
                    08:58:ca:56:d6:1a:2a:eb:ce:18:7d:86:3b:61:99:
                    48:07:2d:71:07:d7:fb:7e:6e:77:66:8f:96:74:4f:
                    57:41:e7:c0:34:96:6d:c1:f6:1c:92:88:2c:10:5b:
                    27:69:c5:4c:de:2a:c5:cf:9b:89:8e:3a:57:f1:b2:
                    43:e7:8b:8e:08:f5:c5:10:bc:c3:51:43:96:dd:b8:
                    bd:12:bf:29:90:89:33:e5:dd:28:63:90:7a:3d:c8:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2E:88:03:EF:77:0E:13:EF:2D:6E:7E:9A:B6:F2:DC:09:74:8C:FE
            X509v3 Authority Key Identifier:
                keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:24:8b:17:14:34:ed:9e:05:7a:79:5e:51:05:aa:1f:81:35:
         fb:88:e9:48:28:3f:db:94:0c:75:60:5b:17:19:8c:c4:6a:68:
         b7:72:7b:a5:bb:17:e3:c0:a5:72:ff:e3:1d:ef:a1:97:1a:39:
         64:5f:4a:d0:74:63:90:fa:ee:34:0c:f2:64:22:cc:3f:62:1f:
         d7:48:54:d0:ee:7b:99:dc:0e:18:b0:88:25:ed:44:4b:50:02:
         54:5b:51:6c:d2:ed:02:42:40:39:c5:17:eb:68:c6:44:ee:4b:
         a0:67:30:28:e7:9d:54:66:c6:bd:d7:5e:78:78:c8:a0:af:ee:
         97:3f:8b:89:38:8e:fb:b6:ff:58:95:3f:db:bd:92:90:43:3d:
         0d:12:23:51:bf:ac:13:03:24:8a:7e:07:27:dc:d4:3c:91:63:
         07:69:bf:65:d6:b3:66:81:ee:a8:77:89:a0:a0:30:1e:31:44:
         80:47:a0:36:2b:49:7f:dd:5e:9c:2d:c1:e3:d8:93:09:86:5b:
         3c:d6:96:ed:07:f3:4b:f2:f1:74:d3:72:41:f9:db:04:b9:c3:
         cc:01:09:4c:bd:90:f6:34:39:01:32:a4:f6:25:30:25:5d:c8:
         ab:6c:6c:11:a8:c4:5c:89:5a:f3:e0:eb:62:c9:85:7b:cc:37:
         13:00:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:48 2026 by rpki-client