Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
File:                     lbPIfnB0hTyRg_FnosJbAuNBdIA.mft (raw, json)
Hash identifier:          Av+xBXWr1QcqbCBtdzLwUx2Ha0V/G1ETT5mn1cT2uNA=
Subject key identifier:   30:54:25:82:0B:CF:F1:D0:7E:19:A9:EF:90:34:EB:B4:FD:13:29:EE
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Certificate issuer:       /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial:       01A06D949BDE11E5D21FD0A938EFBFDDA96E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
Manifest number:          B2
Signing time:             Fri 04 Sep 2026 18:00:50 +0000
Manifest this update:     Fri 04 Sep 2026 18:00:50 +0000
Manifest next update:     Sat 05 Sep 2026 18:00:50 +0000
Files and hashes:         1: 1-8e6_0FbPvAXJgx01t7ARbBFfAc.roa (hash: CthKGsR5rP9kW/VUDaY/MBae0sF4z9YzQpaj0QH82Ik=)
                          2: 1-SU8SHnANaDD0VYlFf9Hpx5DMBc.roa (hash: smSsjE+AzeRu3/D9QdEFU+aHS0vNv5m9EyZtmYRjqZ8=)
                          3: 3R0Yxl6kEU6pvSgQ-sIBt7_ZX24.roa (hash: yaZClV2N6KJOhOcRmYXgjmVx6NMZGfMoAMrjVHPIHQ0=)
                          4: 3xaFim0SGUOhqh2f2EtSifTUM_c.roa (hash: O1ADycx84QWxmLprGvzt1AvfH4PGqy4iVqQ9rd+n9Ow=)
                          5: 4kDUwYcFfXVURDuSV-TCLrbE-Sc.roa (hash: A+C1HWWgrEoVh8S1UWH5eBFsLS2ObhPfgvCLRfHxAVU=)
                          6: CmNz7wBcSO6S5kY9fiiU3S-n6Z8.roa (hash: JDuuWYqi288rBIEpYgn3i+cUgxGJJxYAvOKEt6CJa9s=)
                          7: D0YcMPOnrSPV7ASIyczMje58jk0.roa (hash: Is1vr91+FB4C4ZqWVmY3m9n+tl9WokJiTH6COjiU6fc=)
                          8: D5KXW9fykA4D2kkau-Hvj4ncfkI.roa (hash: 2YFVOViFfFs7vK318hzQBHl3F/L33hmlhwDuKQW2ado=)
                          9: EmaHkN4PwghzXlxJKLnJoSQYQS4.roa (hash: M7GjgagdSvn/s11yZM1uY9CZiXGc766ZPfNroiq0yUw=)
                          10: O4NMqZLOORFev6MNDuTBAV0i9i0.roa (hash: yFb+imFb3YpJlSZCKwhYAdkCmVo6U4X0OVsZzrQhuYc=)
                          11: PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa (hash: AtEVBryEU+0QaV9AVKbszJgM2w291RiX7wwevVc0Kpc=)
                          12: RfnQ2GSXRNmd5tgPFMvO0k_fmSU.roa (hash: lU6TT8C4YLLk9wdZrkEDLd51HljO1TGhWxAw/mqY+1w=)
                          13: X7DeWmIh751ahxsaFVz2zkdKKCc.roa (hash: IXEs+MmuMikSpeDhMH7eEj5LIfv44DMx+zGcEOzh2FE=)
                          14: ZNnLiyaUkDsW-jQcjbhAHKh8lPM.roa (hash: wE4gqY4aNVDXTiKJ4lZkuzt8RrFPCx2HN9rmT8v0O3A=)
                          15: hCUwEVQFkHAHS1ND_WColb8GNDQ.roa (hash: EXg2wBfKWOo0l6CcOVqolcA8vFL03jMqU9pr6Gmv5ns=)
                          16: lbPIfnB0hTyRg_FnosJbAuNBdIA.crl (hash: n4WxlmtC7dQcHF0ePO5TLyaFJxRjIj3S9BX0ZFTutzk=)
                          17: pSdUwJDFDwRI9dUX1o7-AEBKFJ4.roa (hash: yf7UMs7TaL+tARugPzQ5wUgFzgFz5SS2mVJi3OrvF2s=)
                          18: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (hash: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=)
                          19: snxe_w3IKkhLIe7EgkGi3Sltxa8.roa (hash: by5CuoYCbG9kkbc8t3grQ6D6kwW4sZmGfuNZlP82FOA=)
                          20: tumc2U0ueawjQmyhq2TbwEHEvII.roa (hash: oSgEHJFz2FIBd47b6uaPoT90omu3i9HEM2qcnwvI7cg=)
                          21: ufRes8Nqob9X-LbpoNirtnnM0Bg.roa (hash: ijVGBDbmWH17EvrwQkxNuSqhaxL0E9xhqTrvLRBfUsY=)
                          22: wR1usNodUuK6XHhDdVcRc5TfXWM.roa (hash: 1r4Dh3PyEx2gFXDbQ/FX1ps1UiBmg9mqACZcvahzVak=)
                          23: yjo-DKyB6upn-q8jOq2YNWMm_7w.roa (hash: PKTXGqrxOZbFJDyMmjyPry7t1DdNVYa8O7YWz5OT3qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:94:9b:de:11:e5:d2:1f:d0:a9:38:ef:bf:dd:a9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
        Validity
            Not Before: Sep  4 18:00:50 2026 GMT
            Not After : Sep  5 18:00:50 2026 GMT
        Subject: CN=305425820bcff1d07e19a9ef9034ebb4fd1329ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8f:94:14:a0:b3:8e:6d:1f:6f:87:f4:83:96:
                    0e:60:26:eb:a0:36:9c:8f:d7:1a:a5:12:f9:5d:8d:
                    ae:0d:ba:53:d4:d1:d4:51:6a:42:5e:e5:be:3c:c5:
                    3b:26:b1:9a:1d:d9:0a:7f:24:25:da:24:fc:50:a5:
                    f0:53:0e:f4:3f:9f:7b:8f:96:2c:1d:37:df:b4:57:
                    72:83:ee:93:a3:a3:12:8a:5f:c1:bc:27:29:06:1f:
                    91:e5:e8:36:b7:45:50:14:35:45:f9:a1:e3:58:c9:
                    2f:68:b2:08:27:16:62:88:ca:c7:70:2a:9f:e7:04:
                    c6:af:42:56:96:aa:86:4d:c1:93:4c:4e:d9:97:eb:
                    02:ea:b8:80:41:a3:fc:61:ba:2f:6f:5a:fa:32:c5:
                    f6:b7:2d:ba:33:53:86:f6:e9:57:12:12:cd:2f:89:
                    88:69:3a:bf:45:23:95:35:aa:45:2c:df:96:cd:96:
                    c7:c6:ed:9d:e3:56:15:9c:2b:54:4b:84:9f:2d:29:
                    08:94:55:96:51:02:48:3c:e1:f0:e1:aa:5b:49:94:
                    ae:d9:33:66:c9:7c:5e:98:5a:15:cb:a9:e3:76:f8:
                    cf:6d:d8:10:35:c3:43:c1:a3:ba:91:ab:52:4a:b8:
                    74:57:e9:ca:c6:32:3f:3e:86:7b:3d:2e:e3:77:18:
                    ce:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:54:25:82:0B:CF:F1:D0:7E:19:A9:EF:90:34:EB:B4:FD:13:29:EE
            X509v3 Authority Key Identifier:
                keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d0:ec:75:7e:22:b6:ae:a3:df:61:cf:40:12:a5:65:44:c9:
         bc:20:36:4a:05:02:f2:ff:7a:04:a1:78:63:67:72:fb:a0:ce:
         cb:d6:48:0f:e0:7d:c4:4b:93:2e:30:78:40:29:07:04:88:d2:
         33:16:9a:b0:8f:34:f4:7e:a1:a3:e4:63:5f:da:29:8f:80:68:
         8f:ca:a7:cf:c3:f0:c7:0a:5a:27:f2:ee:66:3f:f5:04:1e:9b:
         15:f9:6b:e4:5c:18:9c:36:25:e5:00:89:cf:9d:9d:9d:6e:f8:
         41:78:c5:1a:12:ec:ad:26:8b:2d:46:79:07:29:44:43:dc:00:
         19:56:1c:e4:be:fb:f1:ca:b9:cf:36:ec:37:c1:12:9e:4c:76:
         43:c8:1f:ef:95:68:a2:76:88:99:fa:72:b8:fa:f9:a8:ff:75:
         e9:ee:a3:32:af:82:9c:ba:91:26:72:1c:02:13:d8:b3:b8:e9:
         8b:68:72:4d:e1:29:87:45:f8:ea:72:5f:0b:fe:ee:8a:5a:71:
         5c:b1:91:4f:f8:c5:3c:39:22:9c:ec:32:c7:84:67:bc:0c:75:
         e1:77:56:59:10:6e:66:86:c9:0b:9b:2f:a0:d1:b3:1f:ea:9e:
         9b:fe:19:29:a2:49:98:a6:eb:9a:da:cb:dc:36:a9:4e:73:91:
         2f:46:d5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:54 2026 by rpki-client