Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File:                     lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier:          R27ErKWYLqEte26TehrkwuKUB6o0437pU/TXEBhqkZ4=
Subject key identifier:   18:D6:9C:EB:49:AC:A4:97:A3:EB:FE:83:56:C3:A3:EC:E1:32:A0:A6
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer:       /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial:       019EB80EC358E4B75F94C3B6451129D3C6AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number:          07AF
Signing time:             Thu 11 Jun 2026 19:00:35 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:35 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:35 +0000
Files and hashes:         1: 9lZ-yzBoTL2Q3tEfTGvAJ31AkaI.roa (hash: mZ5mTYqzMf+60QDXA/A80xWmGAZGWKbUo1eAsowQ3Ow=)
                          2: Yha1UjCg0bYTT2iIVJMZtFAgxEU.roa (hash: dVgYPXPBCxJJox+uQJ6Z0WgrgA/2WvOp6YXY7a/W6os=)
                          3: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: iZM/xCNrzeUGBB5boOyJc1q/oKHm0jUYnkHzdR4cIag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:c3:58:e4:b7:5f:94:c3:b6:45:11:29:d3:c6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
        Validity
            Not Before: Jun 11 19:00:35 2026 GMT
            Not After : Jun 12 19:00:35 2026 GMT
        Subject: CN=18d69ceb49aca497a3ebfe8356c3a3ece132a0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:23:5c:ee:86:31:10:23:ac:62:ad:7d:93:
                    ce:34:38:01:85:e5:61:3d:b8:ce:59:7b:08:3a:ca:
                    ec:e9:f3:97:45:86:a8:82:a7:af:65:d3:5b:20:bb:
                    7b:b0:97:65:c7:cd:aa:d7:9b:63:46:c4:e6:5a:37:
                    7c:13:b4:9c:ca:f5:3e:30:c2:be:9f:0c:45:f9:7e:
                    63:ee:52:f8:73:5f:39:cd:29:cb:ec:42:bf:74:e7:
                    bc:38:82:32:dc:b3:19:d3:53:fc:a5:6b:01:17:06:
                    70:bb:20:14:4b:d8:a3:19:6a:75:56:8e:9d:c7:16:
                    c8:01:ee:40:0a:49:c5:37:b6:39:ce:ab:db:89:e4:
                    97:19:50:ed:6b:9f:dd:b5:3d:ee:17:b5:f1:66:63:
                    9d:ec:2e:85:99:41:2e:86:1f:fc:59:10:37:ce:c0:
                    05:ff:38:c1:81:dd:11:93:45:b5:a1:3c:18:5a:92:
                    1e:d5:8c:23:57:43:14:48:d3:95:10:8c:a4:f8:bf:
                    1c:7d:c6:6e:66:db:78:34:22:b2:50:6d:a4:fa:11:
                    0e:d0:76:3a:10:83:b1:75:a3:b0:6f:58:53:b1:ed:
                    55:48:6e:96:4a:15:71:9a:88:2c:89:98:60:36:63:
                    c0:bb:bd:30:56:bb:01:9b:c8:ef:31:07:f6:87:14:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D6:9C:EB:49:AC:A4:97:A3:EB:FE:83:56:C3:A3:EC:E1:32:A0:A6
            X509v3 Authority Key Identifier:
                keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2a:b5:5b:2d:cc:2f:0a:7d:e9:c2:ef:3f:bf:40:d3:bf:36:
         b3:4c:25:ae:27:2e:b6:2b:b8:ad:72:69:03:6e:8d:a9:01:bd:
         5a:cd:72:21:98:59:d6:d2:b3:9d:b7:c6:48:fd:25:16:d1:cd:
         16:c1:60:9e:b7:4a:ea:87:d9:39:be:ec:96:b9:79:cb:ff:8d:
         cb:ee:f2:69:fb:d6:93:20:0a:08:b3:75:8a:14:70:cd:99:20:
         bf:73:ff:03:3f:d7:b7:e1:80:c0:71:07:b2:ef:82:60:18:5f:
         d2:f0:e2:cf:f7:59:70:7e:df:2f:dc:1d:97:74:70:b4:64:b7:
         ea:1c:dd:fb:3b:9b:a1:a1:fb:a8:5d:d2:8b:ec:cb:ed:56:a0:
         ef:88:c3:4b:5d:e4:f3:9c:f6:74:c3:31:76:30:78:91:3b:b8:
         2e:bc:77:0f:01:eb:45:1f:ea:21:33:1f:1d:ec:b0:f0:da:a0:
         91:1f:46:86:8e:35:09:a8:03:b5:c0:2e:af:64:dd:ec:03:3a:
         59:f9:54:a8:d8:b8:10:f8:89:1f:fc:ca:5d:5e:1b:44:51:fd:
         a9:79:80:0b:78:cd:75:f7:ed:2b:5e:ac:d4:00:76:05:66:a0:
         9e:cc:d6:ae:22:c2:16:a4:99:31:00:79:e9:26:24:6d:cd:f1:
         25:93:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:39:20 2026 by rpki-client