Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File:                     LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier:          FWegTK5R/2d7lRk+b/GZOQ1O6HBhKeXNBgRmYachrEM=
Subject key identifier:   94:E9:C2:81:D6:39:1C:DE:7D:80:EC:48:0A:FB:B4:B8:F4:19:7D:C6
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer:       /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial:       019EB8EAA9E2DA3C2897C0DB2148EA53DDAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number:          1665
Signing time:             Thu 11 Jun 2026 23:00:47 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:47 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:47 +0000
Files and hashes:         1: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: b7BNUGa6gRnHWo9g+vdcGiWlaybB8byGtNIdRXBKBu8=)
                          2: g6y_C3GI08K-f3_sqQmbIIeCsaY.roa (hash: 8xFD9S8CkZPQNdyonHuQIqDDCHQLXi5Cn9ISvZJR0NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:a9:e2:da:3c:28:97:c0:db:21:48:ea:53:dd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
        Validity
            Not Before: Jun 11 23:00:47 2026 GMT
            Not After : Jun 12 23:00:47 2026 GMT
        Subject: CN=94e9c281d6391cde7d80ec480afbb4b8f4197dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0e:67:5f:65:d8:63:95:cb:df:41:1b:b2:d7:
                    de:6c:a0:ed:2c:c1:e3:03:9b:b1:aa:9e:35:1b:27:
                    e4:c5:f2:82:bd:6a:49:8e:db:50:71:15:6c:cf:b8:
                    ec:57:22:e0:f6:a1:8f:e1:8b:53:d8:ba:80:bc:65:
                    d7:b5:ba:4d:2e:f9:ec:e3:94:73:cc:cc:39:26:53:
                    47:c5:3b:19:0e:25:7f:98:b9:70:76:c5:7c:e0:99:
                    1a:d2:f8:1d:1e:94:cc:e7:e2:ac:bf:82:42:be:af:
                    91:87:9a:78:c4:69:51:15:41:d4:12:7c:30:0e:a6:
                    7b:bf:70:35:3d:b2:a2:a4:9a:79:c5:08:1d:ce:94:
                    11:21:0d:b6:ad:88:3e:cc:81:06:84:b9:43:dd:36:
                    8b:22:a7:34:51:ed:db:13:37:d8:24:36:39:56:b5:
                    d9:a1:cc:25:fe:90:ed:c8:29:71:14:85:d2:a3:07:
                    c8:0b:83:89:47:0e:74:d5:65:a7:e0:f9:c6:4b:33:
                    d9:9c:fd:ef:dd:7e:fa:8d:c7:ea:fd:20:9c:33:5a:
                    39:35:51:b5:be:4a:6e:75:a4:a9:1d:5a:50:11:db:
                    de:14:82:cc:33:f4:40:90:cd:16:f3:9c:2e:6b:e3:
                    c3:fc:8d:2d:79:de:62:31:fe:fa:23:25:b7:b3:81:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E9:C2:81:D6:39:1C:DE:7D:80:EC:48:0A:FB:B4:B8:F4:19:7D:C6
            X509v3 Authority Key Identifier:
                keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:37:e5:d6:b5:3e:36:e6:1e:d1:71:5e:c3:63:19:5f:d5:
         72:e7:62:44:d3:31:c5:65:0c:48:48:6b:e9:f2:0a:d1:73:f3:
         f7:a0:57:02:02:2d:22:75:3a:e7:ed:da:55:c2:7c:a9:4d:99:
         10:59:92:74:f5:86:9a:c2:a3:e8:4c:7a:13:d0:83:4c:ba:8b:
         6d:bc:49:71:b8:cd:6a:45:88:22:31:e6:45:6e:9a:97:67:49:
         ad:ed:ba:c1:ee:45:da:90:ae:80:43:17:0a:d2:ca:34:3b:f8:
         f7:99:2f:e4:97:38:d3:88:47:ec:29:2c:b3:93:41:21:9c:27:
         46:02:bc:ac:3a:72:8e:ae:10:73:58:9a:6c:87:fa:74:1a:2b:
         7c:8a:83:a8:8e:0c:f9:f8:c3:cc:fb:37:f9:3c:89:2e:5d:88:
         30:ea:69:5b:f4:cc:88:d0:a7:0c:c7:94:a5:b0:2d:aa:f3:27:
         8a:27:ca:cc:5e:70:18:4e:1e:9f:c5:b5:bf:5e:d7:4f:93:58:
         42:b8:07:60:9a:ee:1d:43:1d:6b:59:d2:98:1a:50:62:71:b4:
         39:04:11:14:3d:73:0e:5a:50:e1:a6:dc:24:aa:61:f5:6f:ee:
         2a:c5:8b:35:0a:b7:a6:3e:08:fb:97:86:d5:2f:42:83:a5:3b:
         60:07:07:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646qni2jwol8DbIUjqU92rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTFhNTNmNmRmNjMwMGI0OTEyY2UxM2Y2ZmE5YjEwMGZj
ZTI0ODgwHhcNMjYwNjExMjMwMDQ3WhcNMjYwNjEyMjMwMDQ3WjAzMTEwLwYDVQQD
Eyg5NGU5YzI4MWQ2MzkxY2RlN2Q4MGVjNDgwYWZiYjRiOGY0MTk3ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g5nX2XYY5XL30EbstfebKDtLMHj
A5uxqp41GyfkxfKCvWpJjttQcRVsz7jsVyLg9qGP4YtT2LqAvGXXtbpNLvns45Rz
zMw5JlNHxTsZDiV/mLlwdsV84Jka0vgdHpTM5+Ksv4JCvq+Rh5p4xGlRFUHUEnww
DqZ7v3A1PbKipJp5xQgdzpQRIQ22rYg+zIEGhLlD3TaLIqc0Ue3bEzfYJDY5VrXZ
ocwl/pDtyClxFIXSowfIC4OJRw501WWn4PnGSzPZnP3v3X76jcfq/SCcM1o5NVG1
vkpudaSpHVpQEdveFILMM/RAkM0W85wua+PD/I0ted5iMf76IyW3s4E31wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTpwoHWORzefYDsSAr7tLj0GX3GMB8GA1UdIwQY
MBaAFCwRpT9t9jALSRLOE/b6mxAPziSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJHbFAyMzJNQXRKRXM0VDl2cWJFQV9PSklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xZGY4ZTEtNmU4MC00NDNjLWI2ZTgt
ZDlmOTA1ZmRjODlhLzEvTEJHbFAyMzJNQXRKRXM0VDl2cWJFQV9PSklnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xZGY4ZTEtNmU4MC00NDNjLWI2ZTgtZDlmOTA1ZmRjODlh
LzEvTEJHbFAyMzJNQXRKRXM0VDl2cWJFQV9PSklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKI035da1
PjbmHtFxXsNjGV/VcudiRNMxxWUMSEhr6fIK0XPz96BXAgItInU65+3aVcJ8qU2Z
EFmSdPWGmsKj6Ex6E9CDTLqLbbxJcbjNakWIIjHmRW6al2dJre26we5F2pCugEMX
CtLKNDv495kv5Jc404hH7Ckss5NBIZwnRgK8rDpyjq4Qc1iabIf6dBorfIqDqI4M
+fjDzPs3+TyJLl2IMOppW/TMiNCnDMeUpbAtqvMniifKzF5wGE4en8W1v17XT5NY
QrgHYJruHUMda1nSmBpQYnG0OQQRFD1zDlpQ4abcJKph9W/uKsWLNQq3pj4I+5eG
1S9Cg6U7YAcHCg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:32:50 2026 by rpki-client