Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
File:                     LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json)
Hash identifier:          IvFwiUv27rbS71dBxdpY3IhsHMyscZIHJemmYcrKeJA=
Subject key identifier:   4C:D1:73:C1:77:70:95:1F:05:60:CE:4D:62:D2:30:8A:86:2A:7C:C9
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Certificate issuer:       /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial:       019E1F11391EAB1842589B2D1721001E4DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
Manifest number:          14E2
Signing time:             Wed 13 May 2026 02:01:22 +0000
Manifest this update:     Wed 13 May 2026 02:01:22 +0000
Manifest next update:     Thu 14 May 2026 02:01:22 +0000
Files and hashes:         1: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: kZM5+B+Llu07/hju7S8UcaM6mIloimeOiBWdGykdb28=)
                          2: Rs82s1GfL_H0ZSEYQ-pjLnSpEg4.roa (hash: CPahuBP/QEjD7/mn+rgujqsn8CmzHunCThRPx25Eyto=)
                          3: regdGTdqPxSg7ERZs4-zecqOg1c.roa (hash: SO+bb/AT3Es4TWWPCPRUMxbKDZ/Elg/HF32w+RORyPA=)
                          4: sJ7rRhlozSopUwn3kZQ6qS2Lj3A.roa (hash: 69ARsnQbQaHuHkyGiqTvn8kIeud2aA9Y9jgyLsbYA4k=)
                          5: uwmHRiIuTJylz9Gdo1W-0ay8bNM.roa (hash: TKuZkBqiGMkGtIq0Yy2Mt/oKfXM7W5PYWJgE3e9qIwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:39:1e:ab:18:42:58:9b:2d:17:21:00:1e:4d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
        Validity
            Not Before: May 13 02:01:22 2026 GMT
            Not After : May 14 02:01:22 2026 GMT
        Subject: CN=4cd173c17770951f0560ce4d62d2308a862a7cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:af:5f:ee:f2:e1:b8:67:8a:f2:d7:82:2e:
                    0f:e5:39:ef:27:06:f3:22:de:24:21:ff:dd:fb:d1:
                    13:a1:f6:c3:64:f1:72:fe:17:39:ee:cd:74:82:dd:
                    9c:e1:df:81:a5:a8:21:93:1b:5f:b6:60:09:40:58:
                    44:97:01:ea:db:1e:3a:43:20:e3:31:61:9b:fd:a8:
                    e4:a2:e1:90:87:0d:02:4a:d9:fa:fd:aa:39:82:3b:
                    02:3a:24:ef:18:b0:92:40:73:9b:a3:ac:d4:ed:f5:
                    d4:30:de:c5:5f:58:41:f0:04:da:63:24:6e:59:9f:
                    f7:d6:24:66:94:9b:04:b4:13:d2:34:77:a4:db:45:
                    bf:51:92:d3:65:ab:b6:ab:d3:41:0f:73:bb:a7:62:
                    9b:98:41:8f:37:c8:0c:74:f6:a0:95:bb:b5:cf:77:
                    1d:88:f2:c8:7f:43:2a:bf:36:ac:9a:b5:c0:65:a4:
                    db:f3:2a:7b:f1:06:11:8f:28:37:64:33:e0:68:02:
                    2c:ca:3b:4f:fb:27:fc:dc:53:11:d3:21:40:46:c5:
                    9d:de:32:10:48:af:60:af:f9:01:88:18:4b:ba:5d:
                    9c:6e:91:4d:ee:df:6f:7a:45:e6:44:2c:02:72:8d:
                    01:c6:8e:76:e8:4a:fc:04:29:8a:53:2f:b1:03:6a:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D1:73:C1:77:70:95:1F:05:60:CE:4D:62:D2:30:8A:86:2A:7C:C9
            X509v3 Authority Key Identifier:
                keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:fd:fb:df:3a:6a:76:e2:f0:5a:1a:3a:f3:6b:ee:21:03:06:
         8d:fa:54:6f:6f:5b:6b:a2:f2:aa:ad:bf:3f:71:51:d6:3c:73:
         60:8d:e3:b5:90:da:e0:16:2c:c5:17:e0:c9:1e:0a:eb:38:cb:
         ef:1c:cc:3e:71:ba:a3:b1:08:a2:8e:b9:44:cd:31:7f:ee:78:
         2a:48:a9:1c:12:56:a0:f4:d0:8a:e7:50:0e:70:47:3e:bb:6b:
         4b:b6:40:f3:27:98:15:e0:91:78:89:50:cc:1e:49:bf:6f:f0:
         38:d5:f2:79:08:73:2f:54:b6:d5:a9:d2:96:36:17:75:29:5c:
         d6:de:e1:51:57:1a:dd:40:5d:fd:a1:f0:8f:3f:7b:89:8b:83:
         38:a8:0e:d3:f0:0b:84:5f:23:f8:7d:c3:06:73:e9:d5:a0:bd:
         38:d6:47:ef:99:95:82:c3:3a:0b:c9:b9:c8:f4:1b:1a:f0:a2:
         7d:25:00:16:39:7d:76:0f:27:c8:b4:5d:91:0b:f2:6a:47:8a:
         47:b0:fd:e3:f1:1c:00:9e:f5:a2:b3:e4:ee:e7:06:98:08:48:
         fc:cc:c1:2e:2a:ae:67:c4:79:be:45:96:de:6d:e3:f5:97:34:
         44:2a:ab:64:29:39:51:33:1b:cb:33:ed:62:91:e3:40:1b:b3:
         7c:b5:c4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:18 2026 by rpki-client