Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File:                     LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier:          bhDfmFNbTfmy7If0veKdmRp7B5SSZHgJR5QCwtoyn7k=
Subject key identifier:   63:E1:28:11:3F:D2:61:89:6D:1E:31:C6:4A:C7:E2:40:0E:CD:06:EE
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer:       /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial:       019CE4EC36872B23C1F101D45E298A3DAFC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number:          0669
Signing time:             Fri 13 Mar 2026 02:00:11 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:11 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:11 +0000
Files and hashes:         1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: //S2hR5QDbWxSLnEHhCLnlgJQdzinzy6y3HDeqJDglM=)
                          2: v3xovZ6ex1RS8yXpvjTxnMF_a-4.roa (hash: x4aNx2jmSAXUPJWnM7IfmYiwoUK7G3tuxZu7KLeQ7ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:36:87:2b:23:c1:f1:01:d4:5e:29:8a:3d:af:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
        Validity
            Not Before: Mar 13 02:00:11 2026 GMT
            Not After : Mar 14 02:00:11 2026 GMT
        Subject: CN=63e128113fd261896d1e31c64ac7e2400ecd06ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:20:5d:4a:60:51:ba:db:a7:06:e8:91:83:
                    a1:df:af:ba:7c:56:f4:46:68:61:f3:cd:e6:d3:af:
                    90:ec:31:ff:38:80:18:ac:5c:1a:bf:18:03:c5:a7:
                    26:36:b2:7d:80:db:4c:b1:83:28:a6:01:b8:43:92:
                    46:d4:82:5b:91:6e:ca:a8:19:e8:df:99:9c:52:a8:
                    df:f4:74:b1:9f:b4:32:07:f4:72:0d:f9:b3:1d:5d:
                    24:57:a5:54:b4:18:37:a0:d3:40:6e:4f:76:15:ef:
                    da:03:27:ea:1e:c3:b6:45:93:47:fa:a8:f2:66:3b:
                    b4:06:a4:08:f1:7e:83:db:e2:e3:4d:a6:c0:70:be:
                    5e:2b:52:b9:af:24:5d:42:cb:20:7a:f8:6c:93:d7:
                    c8:de:e8:52:70:c2:8f:dc:57:0b:5b:00:ca:bc:9d:
                    4e:18:6b:be:44:9e:72:7d:af:99:45:15:b6:b0:aa:
                    88:3f:3a:9c:9d:ff:f0:a2:6b:c4:7d:f8:ab:94:7f:
                    d6:e9:a3:db:a4:ff:c9:5d:ac:ea:a7:76:c6:e3:3a:
                    09:5f:2f:e9:a1:14:1f:b7:1d:2e:99:89:c5:34:4b:
                    1b:9b:4b:9a:ba:be:ff:ef:d7:9d:4c:95:08:c6:ad:
                    9b:35:12:b3:d6:dc:af:be:31:b4:6d:b2:99:17:41:
                    a3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E1:28:11:3F:D2:61:89:6D:1E:31:C6:4A:C7:E2:40:0E:CD:06:EE
            X509v3 Authority Key Identifier:
                keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:cd:84:15:27:07:b2:a0:b0:a8:dc:27:14:f2:90:0e:97:12:
         7b:46:cc:60:7d:ea:95:8c:4c:2b:71:d6:20:6f:11:4d:d4:95:
         d9:57:7a:4e:48:79:18:0d:2d:40:db:01:23:27:4e:9a:a3:af:
         99:59:a5:50:59:de:8b:5f:3a:17:dc:fc:1d:e1:e4:b9:91:9c:
         29:97:b4:7f:a3:af:cc:de:b8:e7:c2:38:ab:ff:6e:eb:f4:7f:
         99:39:9e:ad:6c:77:f5:77:cb:a8:6a:70:31:68:3b:09:d1:15:
         f8:45:e3:50:6a:1c:85:c8:4e:65:6a:17:2a:f7:75:9c:05:63:
         f0:c2:a1:a8:48:27:72:1f:71:49:5a:f6:9d:79:9a:d9:24:16:
         1d:be:a2:b7:49:95:84:e6:9f:50:14:33:13:6b:c1:79:bf:d4:
         f6:75:81:f6:d7:78:f3:7e:7d:d8:e7:e1:e0:79:b5:6b:41:e2:
         e3:77:4d:03:0e:27:53:ad:f2:5e:5c:77:e7:f6:69:a4:9b:e0:
         3a:ca:37:06:c1:b7:cf:7c:a8:95:b5:23:06:85:c8:35:a6:18:
         66:07:9f:8f:85:35:6c:ea:3f:91:f7:1c:7b:bb:99:a8:d5:19:
         96:e5:84:c2:36:ff:7e:db:d3:17:c7:c5:17:44:a9:d1:5f:86:
         20:da:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:27:50 2026 by rpki-client