Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File:                     LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier:          7az2EGTJac/a5IYB5ZKd84k4ZF6Wt0XXBuHTEOTjbLg=
Subject key identifier:   E1:4E:1D:2B:E8:DC:8F:2F:CE:F2:30:64:01:76:76:55:9C:3A:1B:62
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer:       /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial:       019EB8458AFAAB2078FC2F5962E04EC907CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number:          075B
Signing time:             Thu 11 Jun 2026 20:00:25 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:25 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:25 +0000
Files and hashes:         1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: /loK8q/MyH/arFgRxG8PgIQDNMoMkrKMFUCzJTbzFks=)
                          2: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (hash: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:8a:fa:ab:20:78:fc:2f:59:62:e0:4e:c9:07:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
        Validity
            Not Before: Jun 11 20:00:25 2026 GMT
            Not After : Jun 12 20:00:25 2026 GMT
        Subject: CN=e14e1d2be8dc8f2fcef23064017676559c3a1b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:70:53:1c:8b:11:54:84:a0:aa:a6:b8:32:
                    be:10:ab:47:da:87:df:9a:e7:19:a5:e6:96:cb:40:
                    5b:9f:05:a8:78:fa:5d:5e:80:b2:36:b7:c5:a7:59:
                    9d:85:62:6e:08:46:d5:90:0f:dd:27:33:97:3d:05:
                    d9:79:07:73:de:7c:fc:79:12:19:73:82:4b:53:26:
                    77:2a:1e:2f:4b:ad:89:ba:a9:75:7c:ae:ff:1b:96:
                    9b:dd:56:00:ff:be:f8:ce:77:cd:10:74:40:20:da:
                    7c:b3:e4:6d:ab:d7:81:15:e9:2e:61:fd:72:4b:e1:
                    f1:ba:09:c7:12:6a:e1:c8:b9:53:2c:df:1f:c0:96:
                    f2:a3:71:1f:e8:8f:e7:b1:c5:00:31:2f:1b:fa:50:
                    f1:a1:f2:e6:d3:4f:4b:d3:bd:63:4e:7f:05:7a:e0:
                    a2:41:61:7f:b7:23:19:ab:8d:d5:c3:ba:11:7d:29:
                    b7:53:2f:dd:60:4d:88:57:33:96:f3:35:44:3b:10:
                    03:b0:f4:38:38:22:4e:b5:8c:c7:e2:d6:df:bd:1d:
                    75:5a:9e:04:6b:af:1a:ae:28:d9:8e:0d:4d:b4:e1:
                    35:a0:06:e4:ea:e2:55:db:a0:34:d5:6e:bd:77:ac:
                    37:be:d2:8a:77:f2:e7:22:eb:69:7c:de:6a:23:82:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4E:1D:2B:E8:DC:8F:2F:CE:F2:30:64:01:76:76:55:9C:3A:1B:62
            X509v3 Authority Key Identifier:
                keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:22:0e:8e:f4:55:5c:0c:b9:b8:28:c9:e4:71:53:08:4c:56:
         fe:97:9b:b3:48:e4:19:cb:2a:9d:13:30:e1:77:8f:0f:c7:dc:
         c6:d8:16:96:d1:c6:3f:83:13:c5:fc:eb:07:f0:59:df:bb:2d:
         f1:c4:3e:72:92:cd:44:ee:d5:cd:c1:47:a4:9e:63:ba:50:bb:
         98:d6:2b:25:c3:9c:a8:a7:56:15:e6:fe:78:5d:05:6f:59:0c:
         be:f7:f5:3e:9c:00:60:3d:36:ff:81:0d:11:89:17:5d:4c:02:
         4f:76:18:4e:64:7f:96:43:69:cb:c4:86:66:a5:5c:5c:21:21:
         f2:1e:72:29:f7:31:a9:06:8f:5a:23:e0:9c:55:17:30:f3:f6:
         f1:2a:bf:66:e3:38:5c:08:f1:58:09:a3:ff:eb:73:e0:a3:24:
         84:e2:ba:df:41:ff:ec:4b:19:04:01:e7:be:e5:d9:4c:68:ea:
         7d:9c:b7:67:94:03:6c:12:74:f7:5c:bc:89:08:62:38:2b:05:
         0a:9c:0c:da:33:1c:bf:85:2c:7f:4d:19:d1:22:95:dc:df:3e:
         d0:25:a0:72:f8:cd:6a:6a:52:3e:65:ff:82:07:61:c2:34:d3:
         24:af:53:8e:42:85:c4:7e:1d:01:2c:45:fe:41:18:26:c7:84:
         f5:44:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:43 2026 by rpki-client