Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File:                     lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier:          t0rjcgS+EpkOSr37f3FhxiY8RalEizqVmkYwejckBH0=
Subject key identifier:   82:38:20:F6:7F:4F:A5:AF:EC:D3:E0:FA:FD:CB:26:7E:5C:CC:3B:E9
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer:       /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial:       019E1F10A8DD4815A80BF56DA09FCDB996FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number:          083B
Signing time:             Wed 13 May 2026 02:00:45 +0000
Manifest this update:     Wed 13 May 2026 02:00:45 +0000
Manifest next update:     Thu 14 May 2026 02:00:45 +0000
Files and hashes:         1: SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (hash: 3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=)
                          2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: CjEhJx1SHtmuU8sTOg40wkPIbczhMQ5wiGVe97NrWUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:a8:dd:48:15:a8:0b:f5:6d:a0:9f:cd:b9:96:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
        Validity
            Not Before: May 13 02:00:45 2026 GMT
            Not After : May 14 02:00:45 2026 GMT
        Subject: CN=823820f67f4fa5afecd3e0fafdcb267e5ccc3be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6c:50:db:89:42:f8:2d:98:6c:4b:f6:17:bf:
                    88:6c:8e:da:85:28:65:70:92:20:ba:2e:6e:45:e5:
                    59:76:61:38:dc:3a:da:8a:e9:87:3a:ca:07:c3:9f:
                    d5:59:b0:9f:85:7c:ce:41:86:21:81:a2:4e:25:08:
                    2e:88:0e:4a:8f:79:28:84:99:8f:95:ca:60:ff:d2:
                    d0:53:5b:69:e4:ff:13:74:ee:d3:c3:a8:e0:2b:85:
                    8a:14:ad:ef:84:42:fe:71:00:d4:89:47:a1:ee:4c:
                    d6:42:02:1f:11:42:b5:d0:ff:54:81:45:a1:52:58:
                    a7:bc:2e:46:39:c9:d7:dc:2f:3a:06:57:28:a9:c9:
                    1d:4d:47:e3:60:19:bf:48:1d:a4:63:bd:ae:07:15:
                    1c:f9:31:5a:8a:d2:b8:21:58:78:83:a2:21:b7:d8:
                    5c:a5:2f:5f:97:d3:89:90:4a:b9:09:34:a7:99:d2:
                    5d:23:01:99:34:07:83:35:8d:b6:10:0b:4a:96:61:
                    ca:ff:4e:32:5c:17:83:25:79:0c:fa:2a:83:5e:80:
                    0e:7b:0a:e0:a6:3c:59:b9:ba:9a:b5:61:1f:f9:89:
                    54:f9:33:29:d9:de:2f:6b:ff:1c:28:2d:45:e0:c5:
                    4d:6a:cc:e9:8e:eb:d0:3e:c4:27:c0:16:53:6c:ab:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:38:20:F6:7F:4F:A5:AF:EC:D3:E0:FA:FD:CB:26:7E:5C:CC:3B:E9
            X509v3 Authority Key Identifier:
                keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:6d:ad:c5:2f:1a:29:4e:3f:f1:09:f8:96:2e:b3:e5:d2:
         79:98:5b:32:87:95:83:b6:f7:30:ee:ab:cb:61:80:05:35:19:
         e2:32:2a:d3:ef:d6:0b:22:3c:71:d6:8b:d5:9a:d1:df:47:87:
         39:90:ba:4d:54:83:37:41:26:84:ad:9f:f6:0a:46:83:f4:da:
         9a:97:fc:89:80:39:dd:33:f8:5c:53:92:81:76:8c:4d:07:fa:
         4c:a4:7b:c1:ed:b6:6e:d6:01:43:95:16:d2:02:12:b9:83:c6:
         23:52:d3:d2:d9:b2:b8:4c:82:22:f5:7d:14:36:cc:ff:1f:fa:
         16:3c:57:9e:47:ae:8f:e7:d5:f6:2f:16:1f:6c:8b:c6:c9:ee:
         d5:d8:e0:34:f3:e9:88:3f:bc:5d:52:77:c7:39:e3:22:25:75:
         24:d6:2c:5f:69:dc:d0:31:90:30:05:12:8a:3d:24:3f:03:95:
         30:37:1d:0e:90:79:08:75:8d:47:46:d5:0b:e1:d4:23:16:0d:
         0c:72:35:06:8f:3a:95:a9:c0:77:28:70:d7:34:af:67:e5:6e:
         75:00:14:20:14:4f:07:ba:1d:35:e2:fc:05:15:06:73:a3:6a:
         f8:f2:51:52:6e:8d:ed:d7:13:d1:19:8c:55:2a:14:b1:15:89:
         14:12:e8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:53 2026 by rpki-client