Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File:                     lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier:          2XWnvJ7kho1oEqiH2KLYJxIk1P+xjR3OwpxfCnwjP9w=
Subject key identifier:   6A:0F:A8:F8:24:62:E4:CF:C5:4C:F8:D2:ED:FE:2F:EE:CB:2B:E3:21
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       019CE2C6EFC80B67874E8082F1F11EE8742A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number:          114C
Signing time:             Thu 12 Mar 2026 16:00:14 +0000
Manifest this update:     Thu 12 Mar 2026 16:00:14 +0000
Manifest next update:     Fri 13 Mar 2026 16:00:14 +0000
Files and hashes:         1: 0DUJcdpv-70K2I2pApN-2y0bFD8.roa (hash: IK8mSj+BVFz2D1LxDiQjQX/83kI7ub1AwIT2Qy6hem4=)
                          2: 1MHACm3CK4K5v6slEGmHX_yIXgA.roa (hash: jyb5sPD8LD1eGThstTkyE234Q0o3Q3uPEdFki8TgD8g=)
                          3: 23BJoNFdDlJ_93-a2ClIHAl6nKA.roa (hash: DjII82sTDDN6cpbOsiwqWIzILpschG7hs7d+wN7zZZY=)
                          4: OiHi4XdG_nsVHJ-IGiDHCI1Ql8U.roa (hash: grLRhHnueZh7gzEQiA6eYsh+YGNS0SKjSwsxs5fjsw8=)
                          5: PLDsjI7Wmaq58KIKEGRRN4moVVE.roa (hash: 3wRa5a25r/pnr6Zd/j1/wfiEfAkg172TdyhdPsGElRs=)
                          6: hofeGE10wLSzhspMEfttKnwUIKY.roa (hash: jPJmbLC2hvl/zc20INUHfXqO8ECxV9ktdK0LUMAhKIE=)
                          7: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: EAqRZK3NlNFYrGuQpCaw80d1CaLYYIwC5tFhf5oNPU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 16:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:c6:ef:c8:0b:67:87:4e:80:82:f1:f1:1e:e8:74:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: Mar 12 16:00:14 2026 GMT
            Not After : Mar 13 16:00:14 2026 GMT
        Subject: CN=6a0fa8f82462e4cfc54cf8d2edfe2feecb2be321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:74:11:a7:75:92:b1:eb:8e:c7:2b:4d:92:
                    51:e1:32:7d:43:4c:a4:43:ed:ce:9d:95:7d:f8:c2:
                    5b:c3:f8:7d:99:2f:ec:3a:e2:a4:cd:06:dc:00:3c:
                    a4:eb:9f:23:4a:be:82:e4:17:0e:30:c8:7e:0e:2c:
                    6a:d6:a2:dc:a8:4d:db:29:44:18:5b:75:8b:6d:aa:
                    bc:b6:dc:67:f7:c0:48:07:06:21:75:3b:8f:06:40:
                    d8:d3:6d:77:c0:3b:35:2a:45:8b:1d:8e:22:15:95:
                    24:68:85:5b:cf:b0:c3:a5:07:dc:6a:3c:a6:5d:ee:
                    a5:64:27:63:b3:50:87:f3:00:33:2e:81:8a:ec:ae:
                    5d:4b:09:73:86:81:16:9b:87:bc:3b:fe:31:39:0c:
                    fe:9c:7e:cf:97:05:47:56:85:f5:4f:ad:b2:bb:20:
                    f0:27:f2:15:6a:88:a5:1d:cd:5f:9b:c5:e9:79:25:
                    8f:69:4a:9d:5a:6a:b0:45:33:83:1f:74:a7:8c:b5:
                    ac:11:44:8d:ac:61:b4:60:87:cc:f2:fa:88:e7:66:
                    79:f8:d5:17:91:60:e5:44:a6:4c:a9:81:df:a2:21:
                    d2:f4:69:f9:d1:35:23:f4:b7:da:38:76:e4:3f:98:
                    39:be:5d:55:ae:22:43:11:ac:7f:c5:8f:b4:7b:b9:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0F:A8:F8:24:62:E4:CF:C5:4C:F8:D2:ED:FE:2F:EE:CB:2B:E3:21
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d0:0d:21:cf:f0:51:71:9e:43:b2:5e:14:9c:61:95:e8:56:
         c5:e7:e4:3b:e3:36:6d:25:f2:32:38:4b:3d:1b:84:64:01:25:
         ec:18:cd:8a:11:01:c4:5a:1d:03:70:4c:e6:4b:2c:18:92:6b:
         bd:e7:e7:a9:b7:2b:c5:27:8b:bd:d2:05:6b:af:a4:c3:2b:ad:
         cb:1b:b2:57:70:06:86:fb:ec:41:3f:e1:6b:e3:0d:44:e3:b6:
         a1:a3:62:f9:b5:c8:3c:54:c7:c8:b1:45:4d:12:6c:52:29:be:
         f4:b9:69:d8:c0:7b:28:45:fa:ad:b0:bc:19:00:3b:b1:13:1e:
         c1:d8:a4:6e:c4:f4:65:c0:50:2c:d1:55:76:7b:85:32:ba:f1:
         16:77:a1:20:5b:65:dd:7b:c5:22:df:bc:f8:6d:02:3d:86:6a:
         e9:7f:61:dc:ed:da:4b:36:1e:18:fd:ce:51:bf:78:90:ef:5c:
         e4:b9:2a:3f:05:0d:46:54:34:10:17:d4:bd:6a:39:4d:eb:e8:
         b2:f0:dd:24:23:88:2c:c2:66:17:91:89:ee:e9:89:68:e6:86:
         ab:ff:7a:90:21:cf:d8:71:f2:4b:f6:16:ad:ec:48:88:21:e0:
         96:8d:df:a5:4c:43:27:34:7b:9c:52:49:03:4e:4b:82:fe:d5:
         47:d2:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:31:10 2026 by rpki-client