Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File:                     LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier:          Jkjkf6eew9l04geR/j4N/APZVab8NcstY230TO7M+MY=
Subject key identifier:   07:94:25:BB:69:5B:45:C8:4E:E7:53:BB:9E:43:89:65:48:1B:7B:12
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer:       /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial:       019FA184854B0C2B0DE6660911A66820DA8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number:          0FBD
Signing time:             Mon 27 Jul 2026 03:00:44 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:44 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:44 +0000
Files and hashes:         1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: pKZ/i1Kh38Fx/+wd+AfuK3VQfAzt/x6DS00V2vLaF88=)
                          2: y2taGqw2UEDAKG5TCLDBWFLjqEw.roa (hash: tK8h1c2C7RZoKF8ADN3Dd1e3mCsCEmC4/YVEGzes/WY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:85:4b:0c:2b:0d:e6:66:09:11:a6:68:20:da:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
        Validity
            Not Before: Jul 27 03:00:44 2026 GMT
            Not After : Jul 28 03:00:44 2026 GMT
        Subject: CN=079425bb695b45c84ee753bb9e438965481b7b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:bf:7b:ed:2b:33:d2:16:2b:08:7d:53:48:
                    6a:7b:48:7e:08:7e:b2:6a:f0:30:8e:3b:56:62:e7:
                    dd:82:23:b7:31:db:f5:86:7e:e7:04:a8:51:ba:de:
                    05:4d:37:42:dc:cb:ff:fe:1c:6c:0a:97:bf:12:72:
                    9d:e1:af:26:fb:ef:b0:4d:59:fd:11:42:7f:15:95:
                    a2:fa:94:4c:8b:84:92:92:22:a9:55:f2:9f:d2:69:
                    ef:5e:5d:ad:d2:85:75:3b:97:4f:00:33:e5:1d:95:
                    fc:ca:51:a5:b8:b9:d7:d5:ad:7f:1a:72:cf:12:1c:
                    56:42:bc:49:03:3e:68:95:c5:49:4b:65:a0:e7:6f:
                    fd:e5:96:70:6b:3f:12:ae:bb:34:00:16:f6:0e:76:
                    6d:f7:1f:f7:12:3c:38:28:7c:34:b1:b4:9d:d0:51:
                    98:e9:b3:a0:76:78:9b:f2:99:bb:18:8d:b0:ed:41:
                    ab:79:ca:99:b5:91:a5:18:e2:a6:1d:ff:15:43:62:
                    48:db:ba:e5:cd:58:f8:8c:71:58:7d:e6:5b:8a:b3:
                    e1:a0:00:dd:90:22:e1:f8:83:64:08:0e:a6:52:c9:
                    46:80:b3:72:ed:a2:fb:be:58:89:80:75:d3:4f:13:
                    44:5e:48:4f:68:ce:a6:91:65:01:b5:4b:73:66:93:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:94:25:BB:69:5B:45:C8:4E:E7:53:BB:9E:43:89:65:48:1B:7B:12
            X509v3 Authority Key Identifier:
                keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f1:e5:21:6d:67:2e:18:64:ce:e8:fd:26:82:44:54:57:b9:
         3f:58:eb:39:a0:c7:f4:85:11:1c:3c:31:66:57:91:af:8e:91:
         bd:1d:3b:7c:57:f6:52:1f:8f:4d:e8:61:d2:fc:f4:d2:ab:fa:
         e7:c0:7c:f9:6c:70:3f:cf:c8:d3:57:c4:3f:30:03:b7:10:9d:
         41:b3:8b:d0:20:b4:08:10:83:fa:05:d1:15:df:ae:86:a4:04:
         ac:da:f6:10:c4:15:79:28:31:2f:45:aa:03:a4:b4:54:d2:32:
         28:58:2a:e5:1e:8b:ae:1e:12:06:22:0f:6a:e2:7f:37:89:18:
         f5:4a:63:df:16:e4:27:b9:ee:69:eb:24:57:39:af:93:d3:fa:
         16:7d:12:a3:1e:95:15:01:dd:0e:f0:7c:1a:da:41:d7:44:6e:
         e0:41:0b:86:38:4c:47:d6:41:d4:81:50:7f:a4:04:b0:bc:0b:
         6b:c9:43:53:9e:9d:d3:a5:fc:3e:91:00:ff:b3:db:a2:f2:5f:
         19:46:44:47:ca:d4:5c:c8:44:aa:03:ff:b6:4f:4a:13:ad:d6:
         c2:14:fd:27:46:1c:ec:c5:e7:f0:b9:84:07:77:e7:87:28:f6:
         53:cc:ac:02:df:09:9a:a5:45:27:6e:c8:98:96:e2:85:59:84:
         67:98:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:24:58 2026 by rpki-client