Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File:                     LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier:          jtexkm+JZKLB57HmPKBLQfxUVV6aJmqNzzc7ncfremM=
Subject key identifier:   10:2B:2B:12:9C:0B:D9:F1:0D:09:A0:6C:1E:09:FA:60:55:DB:CE:96
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer:       /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial:       019F2848238366C2ED6D9ECA0E565D415CB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number:          0597
Signing time:             Fri 03 Jul 2026 14:00:44 +0000
Manifest this update:     Fri 03 Jul 2026 14:00:44 +0000
Manifest next update:     Sat 04 Jul 2026 14:00:44 +0000
Files and hashes:         1: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: m8Upyy+xRWEp71EBKelQfZXenbQ/BhwF2GqiP+D63VQ=)
                          2: pz4XEwrMbdg_cx_AdmXuju5dUJo.roa (hash: oHNUzHLoaTml1g0VmhwxJ9UogXzKrXPobmrpdng65ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:28:48:23:83:66:c2:ed:6d:9e:ca:0e:56:5d:41:5c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
        Validity
            Not Before: Jul  3 14:00:44 2026 GMT
            Not After : Jul  4 14:00:44 2026 GMT
        Subject: CN=102b2b129c0bd9f10d09a06c1e09fa6055dbce96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:a2:63:00:10:f9:63:b4:4e:95:cf:25:fb:
                    40:3e:e9:23:4d:7d:6a:c0:6d:66:91:ab:f8:3f:7e:
                    28:7c:85:60:a4:96:72:f8:83:e7:39:ef:79:2a:28:
                    29:34:dc:d7:22:fe:76:f6:e0:62:89:f8:a7:7e:00:
                    66:56:f9:7b:f9:2e:1e:eb:89:93:ad:3d:8f:d2:23:
                    d7:2a:c6:8c:a6:6c:63:8a:be:85:63:fb:e5:dd:34:
                    eb:28:da:be:7a:a0:2c:ff:44:64:73:5f:5a:bc:93:
                    a0:74:ac:d7:29:f6:91:41:ce:79:e6:86:6b:67:e7:
                    e3:a8:68:35:e3:a6:99:5f:96:0a:75:b3:3b:41:b4:
                    7b:f7:23:cc:bf:90:a5:0b:2b:97:7f:8f:d4:44:06:
                    b7:6c:61:81:7e:1e:f9:ee:76:08:97:0e:46:d1:cd:
                    41:00:0b:9d:81:4a:f7:7c:9a:20:93:16:50:48:9d:
                    f3:af:4f:ab:b5:2c:d3:bb:d8:e2:10:f9:01:b7:c1:
                    5e:40:88:56:33:15:89:fc:69:c1:01:c2:0c:12:e0:
                    f8:6b:32:4b:30:fd:07:c7:a1:9c:ef:cd:f2:b3:d4:
                    b0:f6:fd:21:6b:61:7e:44:4f:25:96:10:01:3d:cd:
                    59:11:4b:40:3d:38:42:f6:50:a3:2b:02:c2:b6:8e:
                    12:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2B:2B:12:9C:0B:D9:F1:0D:09:A0:6C:1E:09:FA:60:55:DB:CE:96
            X509v3 Authority Key Identifier:
                keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:bd:a7:d3:8a:3e:10:bf:52:a0:9d:19:a7:4c:95:07:38:b1:
         c4:62:b4:71:0f:02:49:30:bb:ef:ea:cb:14:9c:b4:96:03:80:
         7a:91:52:07:8b:0e:25:a3:9c:15:c2:1e:54:51:39:f0:0c:db:
         78:ff:6f:08:dc:37:a7:8b:04:67:9d:d2:73:64:c6:17:4e:06:
         53:2f:0a:25:d1:50:2d:91:c5:df:ee:ad:b6:01:27:fd:3f:8f:
         ed:fd:93:72:d4:dc:61:8f:7e:4c:1a:1e:36:33:bc:c5:38:b9:
         58:73:5f:ff:9b:17:46:78:83:4c:49:ad:e8:ff:fb:73:ef:54:
         8e:3b:ac:d4:5e:7d:a1:5e:01:b1:f6:84:2d:fa:e7:5e:b1:5b:
         9a:01:7d:45:66:d1:37:4d:3d:02:fe:17:23:47:b9:a5:e4:94:
         d8:13:9c:7b:f1:81:44:7c:35:7b:06:7b:43:1b:c7:99:dd:bb:
         90:25:01:6d:8b:4a:5e:0a:e6:62:c9:b6:5f:1b:2f:04:ef:f9:
         71:fa:7c:29:fc:49:ce:ed:25:e0:33:8a:fc:47:9c:cf:00:2c:
         32:9d:23:21:fe:4b:da:44:84:eb:94:0f:61:94:a9:39:d1:8b:
         b1:52:f5:7a:29:55:cd:36:61:db:bf:86:4a:9c:3e:27:7b:48:
         0a:8a:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:26 2026 by rpki-client