Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File:                     LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier:          eXQNPO8u8EJlcGg0HuxbBHa2ybQ2K0uMQNEn5t3spUo=
Subject key identifier:   D3:F1:2C:22:8D:AC:E5:38:B4:3E:EC:B7:1C:F5:ED:9A:7C:43:8E:57
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer:       /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial:       019D85A56AFEF9B69C972C0ED6EEF282D8A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number:          11EB
Signing time:             Mon 13 Apr 2026 07:01:43 +0000
Manifest this update:     Mon 13 Apr 2026 07:01:43 +0000
Manifest next update:     Tue 14 Apr 2026 07:01:43 +0000
Files and hashes:         1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: a49Aruc8gUfaAGjnVFt8BkObcIKnvRWjSQAgwWyLldU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Apr 2026 07:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:85:a5:6a:fe:f9:b6:9c:97:2c:0e:d6:ee:f2:82:d8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
        Validity
            Not Before: Apr 13 07:01:43 2026 GMT
            Not After : Apr 14 07:01:43 2026 GMT
        Subject: CN=d3f12c228dace538b43eecb71cf5ed9a7c438e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4e:a2:95:7a:bf:75:a5:2c:b5:81:2f:b4:c7:
                    37:1b:30:3f:b8:b6:5d:fe:2f:67:31:2a:93:70:12:
                    1b:eb:a9:08:ab:c1:90:7f:ca:07:56:5c:c6:8c:8f:
                    7b:f2:23:1d:9c:a1:bc:c0:ad:80:f5:67:e0:c6:7b:
                    ba:7d:43:1c:8f:e7:e3:94:15:8f:07:fc:67:5f:64:
                    70:61:54:06:a8:5a:8f:4e:d2:ac:de:39:bc:c7:36:
                    43:e3:f3:77:03:4d:bb:ca:56:39:97:70:b2:0d:4d:
                    3b:70:29:ad:44:d1:1c:10:b9:87:42:17:e9:c5:d4:
                    a9:fe:b4:56:2d:c3:b9:f5:1a:42:aa:37:a4:db:66:
                    ef:e7:4a:06:06:95:a0:a9:b5:1b:71:43:51:d6:55:
                    fa:eb:eb:0d:07:2e:8f:10:07:c2:c5:b4:2b:6f:c8:
                    00:5f:d7:16:0e:81:0f:4c:a4:b2:bc:6c:43:96:a6:
                    c2:81:66:74:e5:f6:f8:f9:a3:44:48:b3:f7:b0:97:
                    28:4d:cb:c2:ab:aa:64:ee:ee:fb:6b:f9:48:d9:65:
                    7a:e3:1a:d4:65:5a:53:f1:b1:e6:25:e2:c6:3d:43:
                    46:cd:f1:48:e4:5f:b0:72:6b:32:55:68:b5:a7:70:
                    22:1e:bd:3c:fd:0a:68:3a:53:92:b4:f2:ec:72:1c:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F1:2C:22:8D:AC:E5:38:B4:3E:EC:B7:1C:F5:ED:9A:7C:43:8E:57
            X509v3 Authority Key Identifier:
                keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:5b:7c:09:03:cc:5c:f8:72:7b:ec:c2:59:bd:d1:2a:41:54:
         6c:58:85:bd:a7:55:fd:cf:a6:7c:52:7e:00:d6:9b:84:c2:18:
         40:b3:c7:fa:64:d7:52:ae:01:a7:f0:ed:c1:4d:bd:5d:86:a1:
         15:b8:c3:f8:01:cd:42:7e:69:08:17:4c:a8:c9:4c:94:ef:66:
         05:50:ae:f2:b2:94:96:12:28:c1:a0:7f:df:67:9d:ce:4c:9f:
         62:25:2f:bf:ea:e7:9d:92:21:a8:1f:ef:5b:c6:ce:a0:90:06:
         df:88:39:89:6f:ae:e7:89:f0:09:a5:2e:8c:c4:ce:f0:69:a2:
         cc:67:4a:8f:97:f8:c5:4d:b8:8d:09:d2:4f:1b:ba:da:69:3d:
         41:42:7d:3b:52:de:fa:8a:78:ef:95:3b:a6:a2:ef:af:1b:4b:
         1f:03:c6:fd:bd:27:ad:66:3b:2c:ee:c6:28:6c:72:28:54:b6:
         c6:15:cf:d0:a4:66:78:0a:c4:79:cf:5c:ed:42:a2:e5:83:ec:
         29:40:31:da:cb:f7:9f:52:ac:11:b5:30:9b:0b:29:e4:ec:42:
         62:62:d6:88:e2:34:75:3c:2a:cb:d4:56:b7:20:38:78:83:07:
         5e:61:2a:21:2f:19:da:40:07:dd:95:3b:7b:45:0b:96:18:c3:
         bc:e5:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----