Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File:                     LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier:          QU0nsBEiIIhQkY1UAsIbQ57LttwTfH/QvtSwhfhmbSw=
Subject key identifier:   6E:CC:94:A1:28:71:81:A7:BC:DE:76:84:0C:D6:74:D0:C9:2C:38:F8
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer:       /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial:       019EB7D77B1428AEA398D5F49CDEDCDDAF28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number:          1604
Signing time:             Thu 11 Jun 2026 18:00:12 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:12 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:12 +0000
Files and hashes:         1: 4C8f5FARcG-ZhuB-vuYks_uFiSM.asa (hash: W61wROGokL5bWdXjsmKXsKb3BR0ZpNI0VLQdgkpNYOY=)
                          2: 7zX_66DzWbNab47LnWkuxaI2ZeU.roa (hash: wy9qem7nqDqqjQsxYwFug1iQNRjmqIRNbrnoyYQEvNU=)
                          3: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: E9fM4FYHKdax+PL76BKMO4r26vrO4xS0pY6M6cdCfkg=)
                          4: _Cfy9cb-oQbNsdjFWpTXAp0vykM.roa (hash: hIou1rSmsH9WYXgyvdfhrYuo3Ds/LLT4qC/64LFji2o=)
                          5: c3IMJ8kvBPg8CV-XvZgC7HFf7dg.asa (hash: 9NIofwcdGz5zeO6bax5mK7skNIAnSwQhXhWa+mJ1VWs=)
                          6: ddfQyL5mhD7mpFJJqGaZ3w97HDk.roa (hash: MOdMZ39n6c+DnqvSWvmRktnMqoezzAOZSZFQGziSyik=)
                          7: upplO1vsJUxfE9a6L-gXM6q4wxw.roa (hash: YDn3jYv0iMQlWNcNP2DzaLyq8GD8cqRsMXLAgOSsLHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:7b:14:28:ae:a3:98:d5:f4:9c:de:dc:dd:af:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
        Validity
            Not Before: Jun 11 18:00:12 2026 GMT
            Not After : Jun 12 18:00:12 2026 GMT
        Subject: CN=6ecc94a1287181a7bcde76840cd674d0c92c38f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:3c:a9:f7:1c:60:e1:75:bb:55:0b:6d:f1:
                    fc:80:1f:33:d9:3a:62:f2:89:21:a1:b5:26:da:66:
                    b4:da:30:b7:b0:73:61:11:c2:54:1c:b4:ef:af:16:
                    92:b7:68:bb:9b:c3:90:29:1c:b8:cf:88:46:06:66:
                    a4:28:8f:62:c2:17:8f:90:b0:78:67:da:ce:a8:b4:
                    96:ee:36:d6:23:42:ed:6c:81:4d:03:9c:92:78:0f:
                    f3:5f:55:a9:0b:96:34:97:b7:a7:63:8f:2b:62:9c:
                    42:9c:cc:70:f7:ec:fd:8e:39:7f:43:94:97:a0:bb:
                    cd:a1:35:12:af:a2:48:23:ca:af:4c:35:39:86:01:
                    de:d2:0c:e7:98:cb:61:dc:e1:fb:bd:e3:d8:b8:af:
                    96:6c:06:9b:7e:0b:51:7f:10:a3:2c:36:06:6e:79:
                    18:32:39:02:0f:2a:ed:87:06:a7:81:47:52:c4:58:
                    79:73:ab:13:7c:98:a1:cd:b7:9f:2f:c4:2b:f9:d5:
                    b4:12:37:ee:b2:47:e0:c8:b4:9b:66:90:f9:f3:56:
                    6e:0d:3b:55:e3:0a:ff:0c:11:61:20:2d:de:c1:3c:
                    eb:61:29:03:00:3c:d0:49:08:1b:08:bc:4c:3c:19:
                    72:c4:78:e6:ac:35:7c:f0:a2:f8:16:84:a0:f6:ee:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CC:94:A1:28:71:81:A7:BC:DE:76:84:0C:D6:74:D0:C9:2C:38:F8
            X509v3 Authority Key Identifier:
                keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:b4:33:19:38:1b:b0:85:95:be:5d:db:63:55:39:77:07:
         61:61:0b:3d:6a:95:57:bf:20:b6:af:3d:97:6e:44:47:88:20:
         cc:aa:37:9d:42:c2:8a:71:23:f1:5f:e1:9b:19:49:d9:6b:64:
         bc:af:ff:a6:8d:c7:fd:0c:62:b5:11:e6:8f:db:cf:56:f1:09:
         68:64:6b:08:8e:81:20:aa:1d:06:aa:d9:76:a9:04:2f:36:a4:
         c2:62:d3:61:d0:8f:46:7b:0b:5b:7b:6b:b3:b3:e6:e1:af:c8:
         93:2f:c5:bd:76:e3:11:ec:75:f6:62:41:77:ee:b7:b8:e9:41:
         7c:28:58:2f:35:a2:93:d9:9c:25:56:15:79:4f:bd:92:2b:70:
         ed:cc:78:68:d7:7d:7b:51:ad:2c:ea:8a:d3:01:28:40:a5:ce:
         a3:99:07:e0:4a:17:b6:51:95:17:08:c2:b9:f6:80:bd:d0:20:
         39:c3:58:b6:ab:0e:4e:7a:42:e5:0e:33:62:35:eb:c6:7c:2c:
         8b:4f:5a:e4:8d:6e:42:30:3e:2e:c0:2c:44:8b:a3:a8:e7:05:
         f5:48:8e:78:c5:6b:54:ee:fb:fc:7f:b8:7d:7c:2c:66:4e:c6:
         3b:2b:5c:bd:92:03:86:f1:98:08:83:71:71:1f:20:bb:bb:75:
         2b:1b:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:26 2026 by rpki-client