Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File:                     L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier:          8GtjbZPvxAOq0sfDwq2U/LeC449dN7KKMFzqcqizUvc=
Subject key identifier:   C3:10:FD:E3:79:73:4A:C5:2A:91:EE:AB:23:C5:1C:E0:57:7B:B8:8C
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer:       /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial:       019EB544BC92DA33F78AE919C727163C149B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number:          1955
Signing time:             Thu 11 Jun 2026 06:00:41 +0000
Manifest this update:     Thu 11 Jun 2026 06:00:41 +0000
Manifest next update:     Fri 12 Jun 2026 06:00:41 +0000
Files and hashes:         1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: +c6o+ovNK8MeFnXGWW6ycd4ZDc7dr8CfdcWOqA2Sms4=)
                          2: W6FjOnvEDK4nIE1NTMn5BVz3fuM.roa (hash: 3HTrKjjRsVy1cVU/H1CFW3GVw/q8a/eXNoo6L1gCpFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:44:bc:92:da:33:f7:8a:e9:19:c7:27:16:3c:14:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
        Validity
            Not Before: Jun 11 06:00:41 2026 GMT
            Not After : Jun 12 06:00:41 2026 GMT
        Subject: CN=c310fde379734ac52a91eeab23c51ce0577bb88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:dc:12:26:7b:d9:e2:f1:6c:f4:b0:d6:e5:
                    e9:75:18:4b:d9:b9:f2:14:cc:17:a6:76:67:4a:10:
                    fc:8b:df:25:29:5c:f0:77:87:24:20:2b:22:77:03:
                    c0:81:c2:75:4b:f1:42:30:0e:b7:46:84:a6:e0:38:
                    61:99:16:1d:59:61:f7:4a:7e:47:ab:c1:2d:88:9b:
                    b2:fa:00:58:f8:45:ad:e0:2a:63:67:aa:17:62:cb:
                    09:04:2e:a1:55:9e:1b:27:98:40:b6:f0:10:59:a3:
                    2d:06:50:8c:3e:e3:c3:d6:0e:a4:10:5d:d6:5e:b2:
                    ad:0d:73:a6:17:78:b0:55:58:d9:fb:ff:0c:38:5b:
                    23:96:3b:4e:89:5f:2f:d5:1a:ff:cf:61:ed:a3:20:
                    1f:65:81:73:09:9d:a2:a7:23:c3:d5:97:df:41:ea:
                    a2:2f:e9:ab:65:61:c2:88:be:44:65:0b:e4:4d:17:
                    27:d2:1a:05:a4:a9:3c:a5:c6:bf:fe:5c:d8:15:7d:
                    6f:c8:4e:ae:3f:fc:f3:51:d3:43:68:92:61:86:26:
                    4c:45:ef:ed:dd:d3:fc:e0:98:ab:cc:54:85:5e:b8:
                    66:e4:37:2b:d4:42:b5:be:fe:3d:6a:09:15:56:eb:
                    bc:28:dc:e1:87:e0:f0:0d:f3:88:39:ec:e2:18:cb:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:10:FD:E3:79:73:4A:C5:2A:91:EE:AB:23:C5:1C:E0:57:7B:B8:8C
            X509v3 Authority Key Identifier:
                keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:77:5a:3f:52:62:39:5a:ee:d3:9e:02:5b:f5:55:93:37:
         b6:35:6d:07:3d:e5:10:1a:0f:09:59:07:f2:f8:34:58:96:53:
         91:51:2b:c7:3e:63:2a:8d:5c:c8:13:4b:ce:99:5c:cc:24:49:
         12:69:1c:77:09:4a:41:88:88:8a:a3:9a:23:e8:c3:2c:bd:0a:
         f1:35:ab:f9:66:62:6f:54:66:c4:b2:99:c6:79:77:80:72:93:
         c2:fc:9d:a3:2d:1f:46:46:7e:75:a5:72:e9:de:2d:e0:3f:e3:
         8f:ba:24:18:cf:c3:a8:b9:ce:73:05:8c:0c:3e:a1:0f:92:71:
         9e:b4:92:c0:9c:54:be:36:02:d4:4e:6f:f3:99:b5:96:de:4e:
         14:3f:9d:10:04:c3:66:f8:99:87:a2:00:1b:cd:72:cf:be:ef:
         bb:96:90:44:9b:0e:9f:d7:d6:63:63:ad:b6:93:1d:cd:d2:b5:
         5f:c8:ee:3e:23:5d:47:09:61:bf:40:2b:69:fd:b9:d7:a6:9b:
         0c:4a:ec:8d:63:ed:27:43:81:3a:88:50:8d:0a:e3:f1:d5:98:
         86:89:7c:bf:06:5e:db:23:90:4c:2a:37:96:84:14:01:ee:b9:
         2f:68:8f:cd:26:03:6a:7b:24:24:01:97:76:e2:8c:0e:f4:13:
         0c:c0:3f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:49:42 2026 by rpki-client