Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
File:                     lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json)
Hash identifier:          /cZWXyV412ypsN92zmNMlgHr7pOnLjuP8HjXGYHG4vA=
Subject key identifier:   73:54:0B:47:F3:01:57:07:3A:72:4F:9B:9F:F4:3A:B7:38:BA:56:CF
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Certificate issuer:       /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial:       019D38D2CC6107408BABB66A5320C1556DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
Manifest number:          0574
Signing time:             Sun 29 Mar 2026 09:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:32 +0000
Files and hashes:         1: 0pi2CRh8v5FDGjuuAyr_ynjNU4M.roa (hash: gEFkbWU3I4/+RhLgSRyNGP/VSE7D27H+Iby5qJquk8k=)
                          2: 1eGYTZkzkTnzgcwMjAg4TYC4oMg.roa (hash: N0Pwrl6Apuf0Y0kUqHgS0KkfrpMsU0M2q1pXnEawL28=)
                          3: 56EYdVdPARTza2xcs8WALSYXTOQ.roa (hash: zmgqXldif1WCq/XR13fNKgAfLW2J2LNZ/H94SIzJybg=)
                          4: HTGpA29r_p96fZCnIs8rHPCaAWg.roa (hash: 0NEOZclYkdeZ3p/EmP0YoypOQ8XIb7jGpt4K1aPjz6Q=)
                          5: JDbJ4jj6LMlC-0bdOFoUGyLzn3o.roa (hash: YHGXUN1Q0a2Vx/s6owli3h6abJzr4EpARqQpGM7kkOI=)
                          6: Ny2iyxeuZXEsORd19mLonGlTc1o.roa (hash: IHzsSFmGLhjoSc5ovg8f9ByPO12qJhMupxXp5WM/rZs=)
                          7: YnuWSiECKs46KqAQH2-p7CjlQBQ.roa (hash: CGPSpK9CwDyzIaayrss+ySc2HPgoYOHHQO7gmEb9KdE=)
                          8: aHYCTQnedLqhGc1eCePJguTFgjA.roa (hash: T87S5Ags8vNBHX+M2V+S2A8cRf0mGsTOhPjCp5GuLK4=)
                          9: eRUram9FiygBh410Dn1i-De_Uv0.roa (hash: 0UT7pykP+ViP/ePf2YhJafI90nKn0use/xYGNVGDsGI=)
                          10: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: 0E9Z4xE45urTsw6SL+MKTP41Uik9z8nD7jn6/W37WSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:cc:61:07:40:8b:ab:b6:6a:53:20:c1:55:6d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
        Validity
            Not Before: Mar 29 09:00:32 2026 GMT
            Not After : Mar 30 09:00:32 2026 GMT
        Subject: CN=73540b47f30157073a724f9b9ff43ab738ba56cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f6:e7:f9:dc:bd:0b:72:cc:8a:a7:48:68:ae:
                    70:54:53:28:37:35:b9:0e:cc:e8:6b:65:5a:60:de:
                    4a:48:0b:13:44:3e:64:f4:8b:88:f5:4f:33:d9:d0:
                    6f:d3:1c:96:4b:4e:ee:a3:93:09:d1:19:6e:70:51:
                    83:9d:88:a5:76:85:d7:dc:4b:df:f2:e3:c7:80:94:
                    c4:95:f8:00:be:0e:83:ae:4e:e8:86:c7:ec:2b:cf:
                    a7:c0:0a:ec:4a:ec:80:77:f7:ed:6b:df:6d:0f:68:
                    29:71:e6:30:6d:69:4a:4e:e7:04:ca:ea:73:5f:e2:
                    6b:f7:5c:9f:05:66:40:65:10:e1:8d:49:13:e2:2e:
                    7e:bd:fb:03:24:0f:fb:3e:a5:c3:bd:2a:77:6e:3d:
                    f1:27:0a:ef:ed:28:e1:35:70:e7:00:6b:a4:61:6e:
                    0f:28:7a:a2:78:ee:47:9f:ae:bf:58:11:a3:70:48:
                    5c:d2:f3:8a:50:c6:f5:00:24:5a:df:a4:44:b1:30:
                    3d:91:2d:eb:d6:01:ba:77:2c:98:e4:6e:9f:f3:37:
                    ee:25:09:8b:ab:97:b4:33:63:50:c8:61:20:e5:de:
                    a7:39:4f:d5:e7:8c:e4:f9:b7:11:1e:5a:fb:95:9e:
                    30:45:31:79:66:d0:73:ad:7a:7b:99:93:fa:29:a7:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:54:0B:47:F3:01:57:07:3A:72:4F:9B:9F:F4:3A:B7:38:BA:56:CF
            X509v3 Authority Key Identifier:
                keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c0:c8:b9:01:f3:6b:7f:94:fa:d5:5d:46:45:7d:64:7b:b0:
         03:ba:49:6d:c8:cf:21:e7:4e:ef:36:24:25:a6:a7:2d:58:93:
         7b:67:20:62:03:cc:86:5a:49:b9:0b:e3:51:2d:c6:0a:b9:e5:
         4e:bd:a7:eb:37:9b:c7:1b:6f:14:16:9c:47:89:e6:fb:3b:a3:
         58:56:a2:62:dd:b4:dd:57:b4:df:2a:73:fc:a9:fa:7f:12:8d:
         c7:6b:d7:72:ec:23:7d:5e:1c:d2:d3:ce:70:df:ce:1f:e2:a5:
         09:16:55:7d:9a:56:b9:84:b3:10:47:8f:e5:c3:8f:93:10:b3:
         7c:8b:84:13:47:ca:44:df:90:ea:53:e2:66:99:5e:ef:50:50:
         ea:4a:37:cb:80:8b:e8:82:9b:3d:03:c8:c7:bc:12:91:80:58:
         d9:e5:90:ae:28:d5:59:3b:54:60:10:65:e9:51:53:04:7f:6f:
         f9:a8:e9:f0:aa:1a:64:3a:81:e2:21:68:3c:e4:c7:ac:b6:cb:
         4b:d7:b5:7d:f0:49:22:c4:d0:7b:7c:5e:8e:27:bd:70:ad:70:
         a8:a8:23:80:3d:33:24:5f:ee:7e:87:41:71:2a:26:36:a2:1a:
         be:7a:8c:5e:9e:4f:43:26:21:a3:56:cb:b0:42:ee:91:ca:b2:
         13:2e:59:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:46 2026 by rpki-client