Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
File:                     LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft (raw, json)
Hash identifier:          SX/B4WyyI7zuZ6ox8JNnuIAbP+FcGbIyJRohwwQWxZw=
Subject key identifier:   E9:53:00:68:48:D2:01:AE:08:B4:CC:BB:09:4C:B4:B5:75:51:D8:63
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Certificate issuer:       /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial:       01A002140630E743DCA9265D5D92DFF54851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
Manifest number:          1914
Signing time:             Fri 14 Aug 2026 21:01:01 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:01 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:01 +0000
Files and hashes:         1: 9JptdLDcntQOv_LPrBMUCpvGPBk.roa (hash: 73iAqO8mI3K+RtQqfMbur8DNuJybJKZQrci5eZb7C2c=)
                          2: LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl (hash: VYZT6GRxIQzgCle9OIvgDpZwQ08+pr7gIh/puax7K/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:06:30:e7:43:dc:a9:26:5d:5d:92:df:f5:48:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
        Validity
            Not Before: Aug 14 21:01:01 2026 GMT
            Not After : Aug 15 21:01:01 2026 GMT
        Subject: CN=e953006848d201ae08b4ccbb094cb4b57551d863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:51:ac:b0:bd:25:f9:4b:18:6e:5d:f4:9c:
                    42:25:4a:87:8d:99:ab:43:70:97:d6:07:31:4f:a8:
                    5f:ab:57:f2:5d:16:cf:a6:7e:23:94:18:35:91:f2:
                    47:55:ae:df:86:e7:eb:ea:5d:33:b9:62:e7:5e:52:
                    47:8b:3c:a9:41:8d:63:0a:2b:ad:6f:30:57:5c:99:
                    1b:a7:18:f7:01:c5:2f:7b:92:c9:83:54:94:5e:8f:
                    c2:1b:d6:f4:1d:16:82:9b:4b:9b:e6:25:9f:90:dc:
                    fc:02:20:64:37:36:d2:4e:df:2b:5a:22:99:2c:0f:
                    89:36:9d:6c:af:d2:f8:0f:a4:db:ae:fd:6b:1a:10:
                    3e:11:e5:e3:cd:bb:68:9e:0e:2c:21:68:eb:ef:70:
                    c0:15:66:bd:a9:c8:0b:94:54:84:19:00:7f:62:97:
                    10:54:56:74:ed:fd:e1:f6:e5:50:c2:b7:f0:e5:16:
                    ad:92:bb:07:3f:3c:60:51:86:7d:e7:b2:11:01:93:
                    ae:86:b8:82:85:2f:70:cc:84:81:cf:04:01:c1:54:
                    6f:e5:27:c2:9b:05:9e:29:83:79:b8:d8:bc:6a:fa:
                    b8:b7:f5:9f:39:65:6b:bc:0d:e5:82:67:1a:88:42:
                    c7:8b:7d:78:3a:93:0f:9a:84:65:35:76:b4:01:e3:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:53:00:68:48:D2:01:AE:08:B4:CC:BB:09:4C:B4:B5:75:51:D8:63
            X509v3 Authority Key Identifier:
                keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:08:b4:45:af:a2:77:70:d1:29:e7:b9:41:b4:3f:ec:23:75:
         b7:ed:aa:f7:f1:22:e1:61:8b:b7:09:fc:34:7f:38:da:1e:71:
         5d:2b:c8:f1:13:ba:11:f8:4f:4f:ba:e9:0c:10:94:ab:6b:65:
         78:cc:52:87:80:f7:b4:60:07:9f:a4:f9:17:8c:5f:06:0b:6c:
         9c:15:c6:77:b4:e5:ce:d4:0c:4d:10:4e:bb:6f:4d:20:a7:68:
         1b:7f:d5:ef:27:ec:47:f6:3d:28:40:05:d5:df:b1:c3:1c:7a:
         84:cc:4a:86:b9:ed:83:fe:59:19:bd:2b:9a:83:72:bb:82:bc:
         56:0c:71:c7:46:22:1e:d0:4b:5a:e8:40:41:36:f9:74:b5:b8:
         77:a5:92:6c:50:b4:3c:f1:33:14:a2:b1:d0:9e:00:01:ea:f6:
         50:ec:3e:ef:52:6c:87:62:b9:c1:24:89:1f:9e:c3:f1:c2:69:
         fb:61:6c:12:bd:9e:cb:b6:b2:9d:34:48:fc:93:5c:05:94:a7:
         7c:52:27:95:92:1a:31:cf:69:95:be:76:57:3e:8e:bc:88:14:
         1d:6a:ad:49:b6:80:1d:a8:3b:f0:aa:2c:1d:0a:dc:c9:90:f8:
         0e:ad:dd:a7:86:7c:1c:c6:f0:dd:d7:b0:ce:79:a7:df:1e:8f:
         73:f2:73:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:41 2026 by rpki-client