Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File:                     ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier:          92Et2dBQxBFQawsWaHymzTv4HyP3KF1QNW4bfjGnlrM=
Subject key identifier:   A9:8D:09:7F:CE:34:45:15:3C:8E:C2:49:F8:50:86:99:82:D4:6F:FE
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer:       /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial:       01A08AFA3DBCCA77329FC2655E921D1437DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number:          19D4
Signing time:             Thu 10 Sep 2026 11:00:50 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:50 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:50 +0000
Files and hashes:         1: VTlRcNnwp5gbAntgQ6nLMgU1MSA.roa (hash: ngugrS9FOqnMnHH73cGn9uhwoCPbokxFByaxLpb4tLY=)
                          2: WMqtzsECKWwXCJIg2DonPUbpFnw.roa (hash: 5GfXNj8pVFfA55H0iZRmskGZ4d2ccQFECebszaJAMv4=)
                          3: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: 4hw54jGxHwTTuOSzoX305Z18+y7PzYI8c1KE/TmIUYE=)
                          4: moNBxLDkr7hyNWiWsQQXFSA8f68.roa (hash: Xbv2BjhxEJT++H7rJ3ZuNWYMKN46NfqnW7okEukq0/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:3d:bc:ca:77:32:9f:c2:65:5e:92:1d:14:37:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
        Validity
            Not Before: Sep 10 11:00:50 2026 GMT
            Not After : Sep 11 11:00:50 2026 GMT
        Subject: CN=a98d097fce3445153c8ec249f850869982d46ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:5c:d2:23:07:e7:9a:bd:ff:88:d0:0f:47:
                    e5:19:05:c8:9e:ef:dc:48:51:eb:7e:e1:5d:d1:b7:
                    a1:26:c7:88:0e:fd:d6:d8:d6:21:cd:89:6d:1b:c8:
                    fe:1b:2a:07:df:ef:10:73:ff:53:cb:27:92:f5:01:
                    95:13:5b:51:d3:e7:50:8d:08:ef:a0:14:d6:6e:db:
                    0e:a2:c4:70:4a:af:d2:ff:b5:c0:2a:dc:ad:18:36:
                    83:7a:39:07:40:03:df:d2:f9:52:00:f0:60:01:e0:
                    b4:23:a5:ea:20:27:ea:39:b0:43:04:17:13:b7:ac:
                    d3:bd:9f:60:7c:74:b4:62:87:e8:22:04:41:5e:06:
                    aa:e4:61:e3:db:91:7c:e6:0f:80:47:dc:6e:96:d7:
                    48:8f:0f:c0:58:55:f9:e0:f7:ca:df:ef:22:5b:f2:
                    c6:d8:03:15:da:9a:7e:dd:1b:cd:d5:57:d8:b6:b9:
                    25:d1:ed:1f:65:dd:cc:35:d4:b7:09:95:b5:7e:2a:
                    1b:a8:71:99:39:59:45:4b:46:34:1c:b5:e8:0d:5c:
                    38:78:a5:b0:ad:2c:6b:e2:b9:dd:ec:b2:03:f4:11:
                    f3:bb:10:fe:8a:5d:7b:9a:77:fa:93:75:c6:85:7d:
                    b0:a0:4e:c1:5d:88:42:88:25:df:fb:f7:36:40:cf:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8D:09:7F:CE:34:45:15:3C:8E:C2:49:F8:50:86:99:82:D4:6F:FE
            X509v3 Authority Key Identifier:
                keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ef:a9:42:ad:18:84:b3:59:bf:ac:62:00:37:4f:4c:bd:38:
         7e:15:6f:11:af:80:e1:24:df:8c:fe:06:66:56:9a:7d:51:ca:
         d1:fd:34:ed:d8:63:80:71:05:e7:74:80:9b:d9:88:fa:1f:b1:
         45:fe:f3:ac:f7:7d:b7:c1:f3:3b:5f:8d:45:78:8b:08:fa:41:
         15:f2:31:b6:37:7d:47:bb:f8:f3:0c:b4:8d:0a:f2:34:b2:8a:
         c1:af:1a:e0:e3:39:ba:81:ed:55:a1:df:55:84:f5:44:8e:71:
         79:de:0c:de:7f:ab:4d:a7:c3:62:d0:84:79:74:05:83:2b:02:
         a8:fe:95:a5:cc:60:38:18:0f:b2:e4:fc:ea:d1:d2:86:98:c3:
         16:4c:70:70:34:7b:35:d7:0c:15:b6:d7:a2:8a:b0:65:5d:b3:
         c9:6d:0e:f6:1b:e9:55:4b:9b:17:a4:89:ad:62:fb:01:e7:c5:
         37:f0:23:2f:11:fd:d1:f1:a2:d7:59:95:b0:32:b4:ca:4c:4f:
         f3:70:ea:78:6c:23:5e:63:f6:0e:b2:28:d2:a8:b5:4a:d8:a2:
         8f:fa:d0:ee:50:98:e2:80:48:49:6e:af:a0:42:a5:1e:00:24:
         31:04:c9:a8:68:9f:e0:f0:76:48:b2:a0:f6:26:ba:c8:ce:bc:
         7e:4f:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:36 2026 by rpki-client