Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File:                     lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier:          dh2B+NLiZjcDG2IBoARuNuEnPNDtHu+7G1L+CwQ5gMI=
Subject key identifier:   E6:B0:79:F6:B8:6D:89:DC:96:74:4A:85:5F:E8:4F:31:AB:60:CE:95
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer:       /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial:       019EBA6AE76B8FA0F8B8396E6F58FD6CAC92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 06:00:28 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:28 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:28 +0000
Files and hashes:         1: LWvq7pLhMy-PN5vUVHp1gTDrkpg.roa (hash: tizgLykrZfe0HsgjC7gUJhP13B/6k81gtOYYeh2hEWo=)
                          2: N3Nyt4Ek1PnmJMu7E3VIjuLxr70.roa (hash: Sn50iCRfjS3DuTRB7OzC5uLuhGadJioDHeYI0k2FZBI=)
                          3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: ScE6EE7Ww3tP2r7nlCWLepzUsv1GrEMHFFfENZ4HRSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6a:e7:6b:8f:a0:f8:b8:39:6e:6f:58:fd:6c:ac:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
        Validity
            Not Before: Jun 12 06:00:28 2026 GMT
            Not After : Jun 13 06:00:28 2026 GMT
        Subject: CN=e6b079f6b86d89dc96744a855fe84f31ab60ce95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6c:de:2d:c9:4a:30:0f:39:40:be:f4:28:76:
                    5b:48:6c:ac:ef:ed:4f:08:41:3c:c6:60:e2:72:79:
                    5c:24:03:aa:c6:83:68:ff:95:62:96:fd:bd:e5:e1:
                    45:85:f5:41:b1:e7:3a:97:02:85:44:8e:2f:b8:ff:
                    7a:6a:c2:b2:81:75:55:4e:6e:8a:ee:23:43:98:a0:
                    cd:09:d0:b2:d8:b2:56:21:21:29:cc:8d:b2:df:86:
                    21:62:0b:75:b8:2f:e6:00:09:93:0b:ae:e7:e2:84:
                    52:92:75:29:42:77:c4:7b:5f:4a:dd:c4:2a:02:59:
                    43:76:32:6d:e9:4e:b7:e8:f0:bb:0c:fc:45:d2:e0:
                    6a:47:dd:a1:62:d0:da:b3:b8:c9:f4:64:0e:61:e9:
                    e2:c0:29:c7:7f:be:3a:c6:a9:e7:29:4e:2c:37:61:
                    18:4f:0f:ac:0d:cb:8b:6b:25:3b:13:9f:3c:ff:a5:
                    8c:c6:3d:fd:44:29:1f:03:7b:34:37:35:67:d4:d3:
                    a1:fc:70:51:1b:7a:52:39:9c:08:88:5f:f5:7b:53:
                    35:86:8d:2e:be:f9:b0:ec:2c:85:eb:b4:81:70:4b:
                    bd:05:ba:5e:ff:d8:52:95:88:94:5c:80:13:a9:99:
                    e7:ff:37:be:b4:de:20:79:72:ca:d0:32:01:7e:63:
                    65:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B0:79:F6:B8:6D:89:DC:96:74:4A:85:5F:E8:4F:31:AB:60:CE:95
            X509v3 Authority Key Identifier:
                keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:e6:ea:db:1c:75:da:af:3f:fc:c8:9a:79:60:8f:51:70:
         fe:c1:35:6a:e8:03:0e:58:8a:f2:f4:e6:50:a3:21:be:dc:e6:
         a7:76:f3:50:af:98:98:22:43:c5:19:72:fc:d2:fb:b2:93:c4:
         42:16:ee:7f:50:9b:44:fc:05:4b:6b:d1:3a:83:91:36:7c:cf:
         67:43:f4:a9:5a:b5:df:84:eb:f5:79:16:b2:a4:e4:72:28:d1:
         a8:7f:e0:58:c7:53:b7:11:01:e6:62:d9:c7:46:84:d9:bc:4b:
         52:b1:d0:47:6f:19:31:4f:b4:d2:a4:2c:34:9f:34:79:1b:fc:
         2d:b1:0f:79:51:be:f4:f1:42:bb:1e:82:dc:25:4a:a7:56:70:
         8d:bd:b5:72:fd:3c:cd:b5:e0:f0:c6:78:0f:45:a3:3c:a8:75:
         92:8c:c5:91:d2:67:4d:e5:56:80:5e:d9:c4:a6:26:80:a7:b6:
         59:c7:2b:3e:34:ff:ac:4a:a9:7a:75:24:91:bd:1c:2a:e0:2d:
         18:e6:e4:f8:86:64:63:36:5b:85:48:f9:87:65:a3:52:20:8c:
         43:96:cd:f5:e0:92:73:d2:43:81:36:46:2a:4c:de:43:04:6c:
         a6:21:8e:8d:14:61:a1:21:91:72:e4:f5:92:41:0e:71:08:0a:
         66:0e:91:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:08:00 2026 by rpki-client