Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File:                     LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier:          /UbSQNXhC4vwd+ojVIOD3KFglWLGXFtIehV7HqyduMo=
Subject key identifier:   6D:22:9F:2F:84:BB:6B:0A:0E:0E:D9:04:DC:F8:A3:2B:01:EF:56:61
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer:       /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial:       01A1DDCBAAC259D7FD7994B45C7D85DAECA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number:          16C8
Signing time:             Sun 15 Nov 2026 06:01:14 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:14 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:14 +0000
Files and hashes:         1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: j2BfeS4HFvyBc8lG0J8BVQxW7VdFRgDSJ6Ld8HezdxM=)
                          2: PdB7yHgtRY5AbRPzGQ7Kal7stk0.roa (hash: ZfhLG4tdAsP3dDzk6eFVvwC/Pe3dDXcwaTLLVzg2Rko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:aa:c2:59:d7:fd:79:94:b4:5c:7d:85:da:ec:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
        Validity
            Not Before: Nov 15 06:01:14 2026 GMT
            Not After : Nov 16 06:01:14 2026 GMT
        Subject: CN=6d229f2f84bb6b0a0e0ed904dcf8a32b01ef5661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b0:06:80:c2:15:95:a5:24:5d:c1:9a:59:70:
                    47:33:33:2f:07:a6:39:71:44:a1:11:a9:57:28:70:
                    c6:af:a2:c3:9e:1b:d8:24:da:da:8a:3b:98:2d:a1:
                    3a:de:44:c4:f3:31:2d:4d:b3:02:77:cf:0e:f8:c6:
                    15:88:6f:15:9c:10:05:50:38:19:e5:af:83:a0:c4:
                    04:c0:dd:2e:87:35:e8:a3:da:21:95:cc:5c:80:f3:
                    71:83:b6:8b:a8:b0:1c:6a:2a:13:8f:15:5b:5b:2c:
                    d9:34:35:e1:a8:53:fb:f2:6e:e6:72:d8:0e:fa:36:
                    d0:90:46:f6:6d:2d:a6:92:36:0a:57:ce:b6:c3:28:
                    e4:d9:24:cf:04:f4:2b:41:78:45:0e:55:ed:ea:ec:
                    29:5c:75:fb:de:05:5e:98:9d:db:b0:5a:f1:a3:74:
                    d5:29:29:93:4a:5c:b6:ca:7e:4e:bf:e0:db:ad:b8:
                    41:29:23:68:ba:f6:64:05:fc:92:8b:f7:7d:bb:68:
                    c2:68:49:d2:c9:1f:60:42:3f:2e:6f:ab:d2:3b:66:
                    00:7f:cd:83:18:87:d8:ba:c8:a0:86:ba:c9:38:31:
                    e0:f7:71:01:d0:a6:04:47:e0:68:c0:e7:75:a1:a4:
                    0f:4e:b1:7c:df:96:7c:98:fd:fb:0a:8e:7d:75:5f:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:22:9F:2F:84:BB:6B:0A:0E:0E:D9:04:DC:F8:A3:2B:01:EF:56:61
            X509v3 Authority Key Identifier:
                keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:1c:cf:bd:27:46:ed:07:9c:6f:83:98:14:09:f9:ba:04:
         82:60:4d:09:eb:03:09:5a:72:1d:c0:82:40:34:d1:c2:2b:32:
         ce:e2:9f:db:7d:46:e0:da:a5:6d:bb:4e:16:f5:5a:46:0b:73:
         e4:05:0d:79:44:81:6d:89:8f:09:eb:d5:32:1b:c5:22:bc:da:
         9f:5a:dd:13:2a:63:b3:dd:72:81:3e:68:94:ee:8c:ef:ef:20:
         bc:ea:12:89:3b:1b:19:e9:97:64:fa:b0:3d:72:2d:ce:a7:c5:
         fe:81:cf:8a:ac:f4:e8:18:a4:d8:a7:58:5e:53:79:84:be:82:
         b5:0f:e2:62:07:e8:e5:14:fc:a0:3e:d0:43:89:fe:66:b4:1b:
         22:cf:83:9b:74:9f:a6:66:5e:a1:62:dc:15:f8:22:61:bb:56:
         35:b7:06:00:f6:70:38:f8:51:af:48:3e:37:60:34:2d:38:f5:
         58:b7:ac:a8:96:8c:9e:ff:19:f7:6b:bb:2e:7d:41:07:ab:9a:
         d4:47:dd:83:19:30:9d:4e:79:21:bc:6f:53:8a:f7:7e:7a:7f:
         67:87:73:4f:17:50:12:90:04:5a:27:8d:24:cf:fb:ee:f2:84:
         a4:62:f7:14:2c:52:89:d4:50:13:de:2b:81:fd:1c:9e:e7:49:
         8f:b3:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:03 2026 by rpki-client