Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
File:                     l-z7s1UL8sdnTMUunLvzqTP153g.mft (raw, json)
Hash identifier:          Ipsr3cuqIOjhh2JAtFT6wqOFhQ5UY2R59uUPrJM9+ik=
Subject key identifier:   E5:25:CC:A4:E2:35:3D:6F:1D:CB:F9:42:59:0F:87:59:89:93:F6:D0
Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
Certificate issuer:       /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Certificate serial:       019EB98F80573D28C04AAC8186BE39D989E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
Manifest number:          1956
Signing time:             Fri 12 Jun 2026 02:00:49 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:49 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:49 +0000
Files and hashes:         1: hrnLYiX_lMVabWsaWy1YNdnH5lo.roa (hash: A8isPHXQiSnhKMitypfxPpvT5h+QDttKZkJpOSldfqg=)
                          2: l-z7s1UL8sdnTMUunLvzqTP153g.crl (hash: 0yZnqmQB1UIvynlp2wEjnRomkg5LxrChEKGk08T3Ju8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:80:57:3d:28:c0:4a:ac:81:86:be:39:d9:89:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
        Validity
            Not Before: Jun 12 02:00:49 2026 GMT
            Not After : Jun 13 02:00:49 2026 GMT
        Subject: CN=e525cca4e2353d6f1dcbf942590f87598993f6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:c5:ca:47:cc:74:a4:7b:3e:3a:ac:26:d6:
                    81:b7:d7:07:70:77:7c:44:e6:65:11:ee:c0:62:61:
                    0f:59:28:e1:27:1b:20:35:34:fb:8f:cc:e1:09:86:
                    a6:2b:f7:46:85:9a:88:53:f6:7a:da:64:68:66:4a:
                    8d:8f:c5:94:42:a6:7f:9f:52:fc:d4:00:cc:dd:dd:
                    6f:e8:a8:81:72:7e:7d:7f:94:46:fd:78:f3:a9:89:
                    d4:72:24:e3:16:73:b0:0a:02:a0:4a:01:8d:ec:9b:
                    05:a7:73:cd:6a:e2:59:0f:1f:88:c7:f8:91:81:07:
                    a9:cd:ac:b2:a4:e3:90:c3:2a:0c:69:4d:9f:30:3a:
                    0e:2c:56:e4:ab:47:16:99:d4:57:af:59:1c:31:85:
                    97:d1:e0:a3:51:1e:15:32:19:b5:b9:96:54:90:ca:
                    69:94:31:44:7e:a5:ec:c8:d6:23:9e:a5:30:86:5f:
                    a4:9a:1e:f6:66:0d:e4:6f:52:eb:9c:59:59:00:c7:
                    8d:ac:fe:fe:9e:58:af:c8:f4:b9:c9:d1:7b:3a:31:
                    3f:ee:50:ea:03:7e:0e:9a:9f:55:e6:26:64:5b:68:
                    da:3d:7b:8f:48:95:a2:b0:fb:eb:31:c5:e3:65:16:
                    41:91:97:19:cc:72:a5:61:8d:ba:30:5f:3f:27:93:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:25:CC:A4:E2:35:3D:6F:1D:CB:F9:42:59:0F:87:59:89:93:F6:D0
            X509v3 Authority Key Identifier:
                keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ee:1e:6b:27:72:69:59:35:e1:b2:04:f7:09:52:f3:7c:7f:
         52:ab:87:78:23:ef:7a:83:79:74:1a:f2:19:43:42:3b:35:af:
         20:e0:2a:88:4b:12:80:9a:d4:ac:86:fe:91:d0:7b:8b:9c:a3:
         c1:1b:77:98:cd:8d:61:7e:75:0a:2f:d8:a7:b4:c2:6d:4c:ec:
         41:e2:22:d9:a8:fa:d5:48:24:59:64:f4:0d:e8:35:85:35:41:
         6a:93:e2:81:95:cb:98:12:8e:9f:13:b2:81:9c:45:8e:cd:58:
         3d:a9:d2:68:78:6c:5b:f5:92:bb:de:01:19:99:b4:e7:06:d0:
         dc:44:60:76:39:be:a9:a0:71:a9:a2:1e:2f:db:51:1e:c3:cc:
         cb:48:1c:10:a7:d5:72:cb:06:ad:e4:f1:1d:4e:81:d4:5c:38:
         46:56:80:e5:22:91:93:db:02:40:fb:00:c0:83:ec:7a:4c:11:
         a5:52:aa:90:ed:d0:fe:1e:65:cc:89:f7:c5:67:50:19:57:69:
         7f:e9:c9:16:18:0e:1d:e7:85:b6:4f:2c:7f:9c:90:4a:44:fc:
         73:b4:65:be:54:bf:d7:3b:11:ef:82:a8:4d:eb:b7:fc:95:8c:
         d0:f9:33:63:be:48:17:df:16:9c:ea:24:95:b1:f4:a6:8b:a7:
         bd:7a:60:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65j4BXPSjASqyBhr452YnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWNmYmIzNTUwYmYyYzc2NzRjYzUyZTljYmJmM2E5MzNm
NWU3NzgwHhcNMjYwNjEyMDIwMDQ5WhcNMjYwNjEzMDIwMDQ5WjAzMTEwLwYDVQQD
EyhlNTI1Y2NhNGUyMzUzZDZmMWRjYmY5NDI1OTBmODc1OTg5OTNmNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJjFykfMdKR7PjqsJtaBt9cHcHd8
ROZlEe7AYmEPWSjhJxsgNTT7j8zhCYamK/dGhZqIU/Z62mRoZkqNj8WUQqZ/n1L8
1ADM3d1v6KiBcn59f5RG/XjzqYnUciTjFnOwCgKgSgGN7JsFp3PNauJZDx+Ix/iR
gQepzayypOOQwyoMaU2fMDoOLFbkq0cWmdRXr1kcMYWX0eCjUR4VMhm1uZZUkMpp
lDFEfqXsyNYjnqUwhl+kmh72Zg3kb1LrnFlZAMeNrP7+nlivyPS5ydF7OjE/7lDq
A34Omp9V5iZkW2jaPXuPSJWisPvrMcXjZRZBkZcZzHKlYY26MF8/J5NltQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUlzKTiNT1vHcv5QlkPh1mJk/bQMB8GA1UdIwQY
MBaAFJfs+7NVC/LHZ0zFLpy786kz9ed4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xYzBlYTYtYTZkZi00NTIyLThiYzkt
OGM1MTE2OThmY2FlLzEvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xYzBlYTYtYTZkZi00NTIyLThiYzktOGM1MTE2OThmY2Fl
LzEvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHu4eaydy
aVk14bIE9wlS83x/UquHeCPveoN5dBryGUNCOzWvIOAqiEsSgJrUrIb+kdB7i5yj
wRt3mM2NYX51Ci/Yp7TCbUzsQeIi2aj61UgkWWT0Deg1hTVBapPigZXLmBKOnxOy
gZxFjs1YPanSaHhsW/WSu94BGZm05wbQ3ERgdjm+qaBxqaIeL9tRHsPMy0gcEKfV
cssGreTxHU6B1Fw4RlaA5SKRk9sCQPsAwIPsekwRpVKqkO3Q/h5lzIn3xWdQGVdp
f+nJFhgOHeeFtk8sf5yQSkT8c7RlvlS/1zsR74KoTeu3/JWM0PkzY75IF98WnOok
lbH0pounvXpgFg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:52 2026 by rpki-client