Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
File:                     LAe_O3M6XDpx2cqMNiaUjfcScFs.mft (raw, json)
Hash identifier:          zfiDxQ62Hqc4tT+FlbTaEqpI6MEJiBxLprinvkVl06E=
Subject key identifier:   85:B7:D7:73:F0:08:D7:AA:7D:7F:1B:90:80:A1:C1:B9:B8:5F:8E:A7
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Certificate issuer:       /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial:       019D2996EEAB2308317777320CC87966B3AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
Manifest number:          B6
Signing time:             Thu 26 Mar 2026 10:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:50 +0000
Files and hashes:         1: 7X8lCYsAS6GOEdR-ccHUOQIrvjc.roa (hash: r2glHg/T+YpYXCIT8+l4YxupOX2jMrXd200bHTuRVAA=)
                          2: LAe_O3M6XDpx2cqMNiaUjfcScFs.crl (hash: 0DZTD9uSJ99EcrIgeUpjgojpcKjnxzSOFLnpTj1T8Zw=)
                          3: SXH057UJKzS7rHzBDJcA4ENrOvM.roa (hash: xcKm9OrMnT6THeGkJMgEPYfZ1pZ8IIDbrRlbFdC0Bww=)
                          4: ajjWFLhMNU-QuF21tZ1GMQOJmmo.roa (hash: HwQXBdSljqHyOy0pToc7H06Y8W7GqL4m3uBiGpV22c4=)
                          5: gIa0siDHBQUIVJC-h9wzZHsz_wo.roa (hash: Q05EkkWFRXXj0iriIUfeqc3S/RvQaY5kNMIte9Ex2Us=)
                          6: p2oqcrVTplHu4mo_lRPqrhkXin0.roa (hash: HnueGy98kJdrZiLw6MwMnbOvXwxCTg0BkoU4RdrjPQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:ee:ab:23:08:31:77:77:32:0c:c8:79:66:b3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
        Validity
            Not Before: Mar 26 10:00:50 2026 GMT
            Not After : Mar 27 10:00:50 2026 GMT
        Subject: CN=85b7d773f008d7aa7d7f1b9080a1c1b9b85f8ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:72:d4:77:58:8f:ef:a9:c6:f2:19:43:d1:
                    86:31:41:5c:8c:ff:49:dd:6e:88:3e:c0:b2:d2:ab:
                    3a:86:08:16:de:11:d0:e9:2a:fa:e6:0a:de:24:ab:
                    12:08:6c:45:03:7a:d7:80:24:02:32:dc:f2:c1:7e:
                    bd:73:36:69:06:26:ba:33:19:e8:ce:10:8b:3a:10:
                    43:36:02:8f:0b:49:fc:0f:0a:31:89:d5:36:11:86:
                    6b:0e:c7:e0:e5:55:47:b0:02:8d:88:c7:7f:dc:3d:
                    49:d2:5c:ba:3c:67:e6:ba:5c:e1:48:d1:68:5e:32:
                    d3:60:62:c7:e1:54:ee:0f:a7:bc:a5:28:7f:13:7c:
                    85:9b:80:f8:d6:63:6e:45:49:1f:5a:05:1f:78:c3:
                    46:1d:d2:a3:fe:1f:29:06:bd:36:55:a0:c1:8b:7a:
                    c1:a1:59:a8:ce:70:7e:d6:e1:74:b5:79:b3:fe:73:
                    c2:47:c8:02:83:97:56:7f:e2:80:08:bc:94:63:30:
                    eb:92:9d:34:5f:c1:ae:41:e0:bf:d8:66:a4:10:6d:
                    b6:da:5c:a8:f4:6d:a9:87:a4:27:8e:5d:12:6d:a1:
                    c4:c8:35:3e:1e:06:ec:2d:bb:88:5e:58:3f:d4:58:
                    bc:ff:4e:96:79:84:3c:13:1a:fe:52:e6:4b:71:0a:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B7:D7:73:F0:08:D7:AA:7D:7F:1B:90:80:A1:C1:B9:B8:5F:8E:A7
            X509v3 Authority Key Identifier:
                keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:56:6c:a7:ac:58:e3:61:3e:d4:01:d4:44:39:6a:71:c0:e3:
         ea:0a:54:7f:a4:82:4e:e7:89:e9:e6:a8:cb:86:c7:a5:90:95:
         2d:b9:3a:01:b3:9e:4a:00:22:70:2b:b5:95:b4:75:6a:43:6c:
         23:b2:82:42:26:5f:90:37:21:cb:26:76:4c:6c:4a:9c:d3:12:
         e0:37:13:93:c4:22:20:db:c8:d2:60:1d:06:32:da:92:79:b3:
         02:89:3e:8c:51:b9:fc:15:69:df:a5:6e:12:dc:a9:ad:4c:4d:
         35:6a:81:50:c8:2b:d0:c6:32:a5:ac:ea:10:18:fe:c4:a2:86:
         f8:86:c1:98:39:a8:0f:96:d2:a4:4e:71:d7:be:7c:46:d7:33:
         fa:8d:60:78:47:38:d0:b0:3f:11:4d:1d:cd:b5:e8:94:6e:a5:
         36:fa:29:f0:e4:39:d6:19:84:4d:78:a2:44:aa:57:41:47:30:
         76:c4:a5:14:3a:07:35:f0:38:2d:1c:11:aa:40:75:d8:e1:e5:
         22:4c:1a:56:c8:f3:a9:10:79:f5:61:91:a6:c0:c8:e9:bd:44:
         85:09:23:7c:4f:d1:8b:80:a5:8d:8d:24:44:f3:16:3a:81:1e:
         f3:b3:49:ea:06:dd:4b:91:c9:c5:cf:72:c0:65:17:ac:63:45:
         99:2d:7a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:53 2026 by rpki-client