Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File:                     LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier:          0pPVYmAr6fnchOKY7UYCaqnsZQtnx9pU/JgPK9UsM2Y=
Subject key identifier:   04:8A:FB:9A:3C:58:E8:71:E5:FF:3C:6A:40:49:F9:B5:7C:61:29:76
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer:       /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial:       019DCED02DC2DE88432C32A51F1C8BCC2A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number:          158B
Signing time:             Mon 27 Apr 2026 12:00:42 +0000
Manifest this update:     Mon 27 Apr 2026 12:00:42 +0000
Manifest next update:     Tue 28 Apr 2026 12:00:42 +0000
Files and hashes:         1: 4C8f5FARcG-ZhuB-vuYks_uFiSM.asa (hash: W61wROGokL5bWdXjsmKXsKb3BR0ZpNI0VLQdgkpNYOY=)
                          2: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: 09zSpxqMu5Q8xiQyEUiyB09cfZmo+IOPXp+70eKcLAs=)
                          3: _Cfy9cb-oQbNsdjFWpTXAp0vykM.roa (hash: hIou1rSmsH9WYXgyvdfhrYuo3Ds/LLT4qC/64LFji2o=)
                          4: c3IMJ8kvBPg8CV-XvZgC7HFf7dg.asa (hash: 9NIofwcdGz5zeO6bax5mK7skNIAnSwQhXhWa+mJ1VWs=)
                          5: ddfQyL5mhD7mpFJJqGaZ3w97HDk.roa (hash: MOdMZ39n6c+DnqvSWvmRktnMqoezzAOZSZFQGziSyik=)
                          6: upplO1vsJUxfE9a6L-gXM6q4wxw.roa (hash: YDn3jYv0iMQlWNcNP2DzaLyq8GD8cqRsMXLAgOSsLHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:2d:c2:de:88:43:2c:32:a5:1f:1c:8b:cc:2a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
        Validity
            Not Before: Apr 27 12:00:42 2026 GMT
            Not After : Apr 28 12:00:42 2026 GMT
        Subject: CN=048afb9a3c58e871e5ff3c6a4049f9b57c612976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:05:e9:4d:c9:34:4e:2b:e8:9c:ed:5e:f6:
                    dd:fc:04:58:1d:87:c4:c3:5d:47:cd:cb:35:3d:41:
                    9d:85:9b:e0:85:85:91:11:b6:50:ad:02:96:fd:10:
                    68:5d:97:05:16:b5:5f:79:d5:af:9e:0e:41:5a:6b:
                    d7:06:43:10:54:61:c8:e7:ad:25:fd:ed:ca:f9:10:
                    a4:fd:85:57:9b:af:42:56:47:b0:d7:e3:d2:24:c7:
                    f4:7f:75:ec:b8:c2:98:97:80:6c:a4:73:b2:4f:f2:
                    47:9e:c1:14:99:45:1e:f5:89:73:20:73:86:69:a2:
                    ca:1e:ea:13:6b:4d:c0:df:71:1e:0b:ff:3e:5c:89:
                    43:fd:59:d1:47:d3:5d:70:26:ae:7c:c3:1d:c6:95:
                    ef:a2:d3:65:cb:0d:27:c8:10:ca:91:19:0b:63:f4:
                    96:f4:fd:8d:8e:f6:2b:8c:6c:df:37:27:39:94:c8:
                    36:5e:18:71:86:75:70:d7:be:8b:37:34:8c:88:7b:
                    43:45:3e:54:d4:61:3d:71:e3:40:95:86:98:da:4f:
                    b8:24:a0:fa:fb:e7:c8:d8:e0:c2:f4:c2:e4:58:0a:
                    d8:92:e0:48:1d:c2:49:6b:54:a5:16:a8:31:24:d0:
                    57:12:ca:d7:f8:b1:87:d3:58:9d:96:1b:41:e3:02:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8A:FB:9A:3C:58:E8:71:E5:FF:3C:6A:40:49:F9:B5:7C:61:29:76
            X509v3 Authority Key Identifier:
                keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:90:2d:e0:bb:31:0a:a6:8b:1e:c8:d7:48:e0:51:60:8f:c0:
         57:6e:35:30:f5:e9:c3:d6:ce:54:17:7d:4d:fe:63:e7:27:49:
         6b:25:28:5b:99:ff:e0:a0:a3:96:fb:27:08:6b:48:ae:e5:52:
         d4:b3:5f:67:3d:a5:80:33:43:d5:2d:4d:07:69:7f:53:78:80:
         bb:73:93:b0:51:24:aa:5b:7f:28:bb:97:e0:e0:12:d0:7f:98:
         fc:31:d7:da:56:73:1b:f0:3e:9f:1a:83:76:d8:27:35:65:f3:
         91:ba:d7:ff:8a:05:17:75:65:69:90:57:af:30:06:92:db:b1:
         0c:74:3c:3a:ce:d2:80:0c:9a:e7:03:72:64:76:45:65:b0:9f:
         45:8b:92:8a:4e:53:0e:5c:40:15:ed:b9:90:47:6b:1b:15:b4:
         51:f2:94:f5:dc:e6:84:dc:48:db:7e:00:9d:45:fb:ca:e9:99:
         51:e1:63:1a:17:45:64:c2:57:a5:06:4b:c3:5e:9d:db:60:a2:
         24:2c:c7:35:8c:a5:fc:a3:46:2d:dd:42:5a:c5:c4:a3:5d:23:
         f5:77:47:61:f6:26:00:a0:ec:8a:6f:96:55:aa:92:63:cb:ef:
         01:cf:21:c3:fd:91:7e:a1:47:2b:df:65:df:2d:09:23:26:4a:
         5f:45:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:40:51 2026 by rpki-client