Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
File:                     LuNT81A_m_8zgUUANWKOgaltkI8.mft (raw, json)
Hash identifier:          x+g5ThcbcM3y7CiZKVGPohhgfDsTwnVS7oh/7lIey90=
Subject key identifier:   EF:CC:62:24:BE:F7:37:4B:13:01:37:D4:E3:F9:5B:C0:47:0C:EB:03
Authority key identifier: 2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F
Certificate issuer:       /CN=2ee353f3503f9bff3381450035628e81a96d908f
Certificate serial:       019FF8A387A529F343D8666C480EE609F44C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
Manifest number:          19FD
Signing time:             Thu 13 Aug 2026 01:01:34 +0000
Manifest this update:     Thu 13 Aug 2026 01:01:34 +0000
Manifest next update:     Fri 14 Aug 2026 01:01:34 +0000
Files and hashes:         1: 19gKAdZ2OBELsSWbR0pBJyLvOhE.roa (hash: YWntgYAuHpdewYDi+xzegIxOR/YDZabzxqawWZHN2QM=)
                          2: LuNT81A_m_8zgUUANWKOgaltkI8.crl (hash: Vd25yfYJwF2PWfe0gR/OKZDnFVUDZUswOh39sf+zK+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:a3:87:a5:29:f3:43:d8:66:6c:48:0e:e6:09:f4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee353f3503f9bff3381450035628e81a96d908f
        Validity
            Not Before: Aug 13 01:01:34 2026 GMT
            Not After : Aug 14 01:01:34 2026 GMT
        Subject: CN=efcc6224bef7374b130137d4e3f95bc0470ceb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:56:98:fb:65:29:4e:6a:29:21:1c:7f:96:
                    f3:c7:33:7f:32:da:fc:64:d4:d1:2c:43:cf:04:fa:
                    96:9f:20:9f:43:90:70:02:4a:70:95:0b:ac:a3:13:
                    66:20:bc:8b:07:6e:b5:ce:d6:27:81:55:60:62:ce:
                    c8:e5:78:c4:15:2a:9f:ad:bb:c1:4e:9c:7d:12:24:
                    d6:a1:26:16:04:70:45:18:a5:7b:43:d1:29:41:73:
                    d3:33:ee:5a:c6:5e:f7:32:db:91:cf:f8:a6:2f:66:
                    c2:d9:6c:d5:d2:aa:03:60:96:6c:4f:91:e9:1e:d8:
                    cd:aa:c9:49:88:b8:cf:24:c3:33:24:70:cf:61:a7:
                    f9:0c:bf:ba:b8:01:d0:fa:85:f1:08:cf:72:03:14:
                    ae:66:43:57:13:a5:2a:e1:04:96:8f:22:eb:8a:3f:
                    dc:a0:9d:95:74:c3:2c:4e:04:69:ab:60:94:4f:7c:
                    9d:5f:a0:39:03:f4:76:9e:f7:c2:aa:ff:9d:d2:7b:
                    b5:cf:4c:de:97:8b:e2:fc:d3:2d:5b:1a:21:70:5d:
                    d6:f5:68:1a:a9:bb:3f:77:b6:61:04:fd:3a:0e:c8:
                    12:bb:71:35:05:67:3c:9f:6b:40:b3:8b:2d:48:2f:
                    07:eb:c9:de:c9:4f:a2:6c:03:0f:c6:9d:f1:d9:c7:
                    54:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CC:62:24:BE:F7:37:4B:13:01:37:D4:E3:F9:5B:C0:47:0C:EB:03
            X509v3 Authority Key Identifier:
                keyid:2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:7d:45:d5:c9:03:b3:4f:05:e2:34:63:db:8f:ce:96:7a:
         0d:43:05:8e:9f:6d:0e:cd:73:70:33:fb:05:88:4a:81:ae:e8:
         43:99:57:4f:ff:f4:6e:fe:4a:4e:d3:9c:60:df:6c:f0:90:98:
         c1:30:da:ff:75:c8:82:f9:ea:1c:c5:72:78:92:6e:9b:5f:b5:
         aa:ff:74:c6:64:ba:06:1e:cc:4d:1c:40:1c:74:c9:0a:6c:cb:
         0e:fb:cb:59:5a:31:f1:97:97:fe:eb:45:88:d2:a6:5e:af:b1:
         b1:30:ce:5f:db:ad:c1:83:b8:8d:fc:11:07:f5:7d:73:bf:4d:
         f2:3c:d7:f8:ad:92:53:2e:09:fa:3c:ca:f4:41:b7:b5:69:94:
         f1:6d:56:96:a8:47:17:ea:58:91:96:df:c5:a8:10:80:56:80:
         6d:0c:ab:5f:df:8a:51:17:64:ef:60:bd:55:04:3c:53:c8:2e:
         d0:ab:80:7b:85:7b:ac:ca:6c:50:bd:3a:50:08:85:83:ef:1b:
         e9:6d:c7:3d:33:aa:f7:f5:a6:36:83:f1:3b:15:72:b3:b7:67:
         d0:c7:90:46:ba:0a:c2:8f:50:44:5c:6c:ef:2b:6d:78:85:26:
         41:4a:18:91:df:6c:66:ee:46:f2:79:d2:65:2e:9b:69:59:c0:
         43:69:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:12 2026 by rpki-client