Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File:                     Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier:          Jau84GUBTzHx/DBt882E45lez5m0ez4lB4M6GL0A6+Q=
Subject key identifier:   12:F9:14:37:9D:86:8B:B3:F6:73:00:CB:4D:59:67:4D:1B:A8:7F:7E
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer:       /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial:       01A0CE910C92B23F85937E4777AE3F59F0D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number:          16EA
Signing time:             Wed 23 Sep 2026 14:00:07 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:07 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:07 +0000
Files and hashes:         1: EGpVIrdRnG9CRa6NrIGgUaf4RK0.roa (hash: qlEpn4VlX/rteCsE8wb4JuutsTGuUOTJhd52p/j8504=)
                          2: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: jIm2cj7VvL/SciRhkIKvY4y2sWUZqK/yzjOpxRx0zJo=)
                          3: vrV8KB95q2_fxuLiil-ALWVgbaA.roa (hash: v1waj9FATfrwz5lLbL9USP8KlqV0JVnfBS+y9CnLHbA=)
                          4: x0MELFSbqqJKiGquntsM_ntKjzI.roa (hash: AoRA2wOoPtKeWgJD9qk2RQiOPxBRat9/lgim3GntO3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:0c:92:b2:3f:85:93:7e:47:77:ae:3f:59:f0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
        Validity
            Not Before: Sep 23 14:00:07 2026 GMT
            Not After : Sep 24 14:00:07 2026 GMT
        Subject: CN=12f914379d868bb3f67300cb4d59674d1ba87f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:24:b3:f8:94:ff:fe:0f:20:70:bb:71:19:
                    53:2b:45:ba:d8:86:bc:4b:a5:32:76:77:83:1e:d9:
                    98:8e:62:ae:9f:d1:01:ff:d1:7a:99:15:55:40:98:
                    33:37:a2:a6:60:64:c5:2b:57:de:e3:ec:10:6e:d1:
                    4e:ba:c9:b4:b5:4d:ca:97:be:b7:63:cd:47:04:2f:
                    89:67:c2:0c:83:63:63:95:59:1c:53:3a:bf:bc:06:
                    92:ac:dc:f1:fb:ae:e5:22:7a:af:64:5e:7b:04:fa:
                    d1:21:54:8b:62:69:68:23:91:94:84:43:67:a6:1f:
                    b3:da:00:72:91:2f:f3:cd:e2:98:35:32:e8:3e:3b:
                    03:d1:f3:a0:f7:d2:35:b6:e2:70:45:04:da:7d:66:
                    52:f1:c2:1f:fe:b4:11:d0:3c:00:4c:84:70:6a:84:
                    f8:45:0f:30:f5:f3:a7:55:f9:4e:39:a3:e8:7b:a6:
                    d0:c9:74:65:83:04:43:9e:a6:1e:e3:f1:2d:16:a2:
                    f1:bd:be:35:32:09:de:75:b8:ac:75:a7:0c:49:45:
                    e3:f4:c1:ce:68:a2:1e:9a:74:07:31:82:55:9f:ef:
                    d3:5e:80:40:4c:b7:f8:7a:ae:f0:3f:26:f6:01:6e:
                    c7:db:08:ef:ce:51:16:35:30:56:89:38:97:f0:e6:
                    8b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F9:14:37:9D:86:8B:B3:F6:73:00:CB:4D:59:67:4D:1B:A8:7F:7E
            X509v3 Authority Key Identifier:
                keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fc:01:a3:e1:43:6c:61:e5:2b:c4:be:ff:f7:ee:43:6f:d2:
         76:2d:5c:09:31:e8:94:fb:0f:fc:eb:21:be:1d:7d:75:4e:15:
         86:c7:64:f2:dc:68:e0:9a:38:e2:f3:f8:7d:32:4b:20:5c:2e:
         21:96:f8:77:d2:24:dd:8b:cb:0b:5c:b1:a8:a2:9f:5a:3e:6d:
         41:0d:42:b0:29:47:39:aa:ed:ba:63:32:39:cf:c5:88:ba:df:
         fc:83:f5:51:ad:f3:79:12:d8:71:96:dd:2c:0d:c3:16:62:55:
         0b:c4:f9:0c:f8:9d:df:87:6e:cd:6e:5b:1c:77:ab:b3:80:e2:
         35:b8:47:e0:e8:78:e4:fc:e9:14:63:43:00:dc:12:bb:25:09:
         ad:ff:72:ee:8c:82:36:e2:8d:d4:90:ec:bb:70:d0:28:63:e8:
         34:05:14:e9:8e:19:88:ca:ec:d2:fa:ed:58:b9:49:0f:6a:2a:
         08:15:b6:0d:7b:ff:a0:f8:b1:cf:20:1d:b8:12:a2:7b:80:b9:
         89:57:2b:ca:a5:9d:d7:d3:4c:fc:46:ed:a1:13:9d:bb:db:1e:
         fe:1f:ba:a2:84:b7:4d:88:e8:f5:f7:39:43:6e:56:77:0c:cb:
         89:5d:68:9f:f8:15:00:8b:87:97:5b:64:74:e1:76:3e:01:31:
         db:1f:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:27:49 2026 by rpki-client