Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
File:                     Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json)
Hash identifier:          pgSD9DwA2ZsRStOUhzKJdHGvscJHSl+LMxfw0nRzXzM=
Subject key identifier:   0C:5C:11:26:71:77:D9:70:10:AB:DB:12:B1:FC:01:60:2D:3B:12:7A
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Certificate issuer:       /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial:       019D27A904F264F0256EFB2982EAA94E3559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
Manifest number:          07B2
Signing time:             Thu 26 Mar 2026 01:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:21 +0000
Files and hashes:         1: 53lC0H3btLRtkl48pavEGuRV3es.roa (hash: MGSbnJd1vUZpt6uL4RTZOKaqC1aAoTugp6i9dh39DGs=)
                          2: Eu0i8M0_V6p9VckPVnggFrs-yL4.roa (hash: BboyrqZNZfIosj60BishiP+RH7BU4uq0hpH6SfCA1DM=)
                          3: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: zhEkcMszB7OFW4mgsZtp4nDL0EwU3AW5JL9EsxGhqwo=)
                          4: bTs69bYVB-nOMaTSLibF1SO4Eto.roa (hash: WJimykzOdhEHHfw42LRu7rdMqeixLnYLozEu448aBRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:04:f2:64:f0:25:6e:fb:29:82:ea:a9:4e:35:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
        Validity
            Not Before: Mar 26 01:01:21 2026 GMT
            Not After : Mar 27 01:01:21 2026 GMT
        Subject: CN=0c5c11267177d97010abdb12b1fc01602d3b127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:1c:88:c9:35:c8:95:a6:4e:d6:b9:fb:f8:
                    91:2c:8e:9d:27:83:14:b6:6d:75:0d:d9:a0:6c:cd:
                    40:24:16:06:f8:9d:68:99:7c:93:e1:9f:d4:54:2e:
                    e9:52:4c:19:ab:9d:be:2e:a8:1a:97:ce:60:d2:d0:
                    71:08:59:78:95:90:93:8b:2f:e2:c1:02:9f:16:98:
                    f1:a9:54:e9:ab:69:36:4e:02:cd:26:95:ac:7d:20:
                    8c:1b:bc:bc:d9:f8:5f:5b:45:35:63:f3:8a:67:04:
                    8f:31:dc:c3:11:d6:68:ab:9b:ea:c1:db:e3:ad:84:
                    c8:34:b9:d2:47:d5:47:72:46:16:82:5e:91:e0:f4:
                    47:ba:f1:01:9e:d5:87:ae:05:2b:aa:42:f4:62:ff:
                    d2:81:ad:0e:cc:43:96:5a:65:eb:23:59:ee:9e:0f:
                    1c:af:6d:97:a2:b5:2b:b3:ed:fb:47:0b:90:87:fc:
                    24:e6:91:45:13:d4:96:de:79:53:fd:c0:e4:97:e4:
                    b0:e1:51:a0:71:94:87:a1:6d:50:58:93:7b:74:fa:
                    1c:70:92:91:18:c0:af:da:f7:4e:b2:13:04:68:db:
                    0c:ff:f4:ce:2a:ff:ae:b4:3a:88:89:e5:64:c8:4d:
                    a2:67:a2:6e:66:28:68:c6:70:16:41:98:e7:39:25:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5C:11:26:71:77:D9:70:10:AB:DB:12:B1:FC:01:60:2D:3B:12:7A
            X509v3 Authority Key Identifier:
                keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:38:13:87:82:d2:b7:a2:4f:ac:66:67:30:c7:06:1c:d9:4c:
         a9:7e:e0:a1:f4:33:3b:7d:51:5d:9c:98:55:7d:5c:64:a7:22:
         b2:7e:08:af:40:1c:24:46:c3:1e:41:9a:27:fb:37:81:45:da:
         10:45:f6:66:83:fd:9c:9d:2a:7d:47:46:31:3d:63:1b:7d:73:
         90:19:fc:0e:77:5f:05:e5:66:0e:c1:1e:34:a2:01:24:b6:6b:
         be:28:3d:39:5e:c9:ba:6a:58:47:e0:b2:2d:63:81:bd:5a:83:
         0e:56:fc:30:cd:19:31:32:cc:7c:46:0f:4b:5b:7e:58:c3:04:
         81:d3:8c:58:07:5b:fe:5b:53:00:b9:91:28:c0:c0:5a:84:1d:
         36:59:c8:e9:98:a8:b9:e5:2d:34:9f:87:0f:3c:93:9d:76:2b:
         5e:88:ed:48:bd:78:93:ef:64:16:d5:d3:b7:4a:70:6c:97:f7:
         04:d5:c7:6b:c1:8a:f0:ec:0a:25:5a:c3:6a:ad:9a:ee:54:e6:
         e6:50:be:02:41:23:3b:7a:94:fb:a6:23:ca:e2:fd:5d:32:8d:
         1f:10:a1:9a:dd:b5:1d:49:dc:e4:3e:f5:a9:f4:dc:dc:7c:ce:
         59:b8:c8:1e:c1:56:97:bc:33:73:47:12:4e:e0:77:82:17:00:
         7d:ee:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:00 2026 by rpki-client