Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
File:                     lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft (raw, json)
Hash identifier:          GljvjwSoDL4bdHvoq31P7aVriAApADzgAeUvFaLAfJw=
Subject key identifier:   0B:35:BC:6C:F0:DF:00:60:F3:A3:2D:DE:38:0D:8F:C3:8F:87:D6:A9
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Certificate issuer:       /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial:       019E9AA967B7C4A6C88E3FBFBF83BB80762B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
Manifest number:          0BD2
Signing time:             Sat 06 Jun 2026 02:00:53 +0000
Manifest this update:     Sat 06 Jun 2026 02:00:53 +0000
Manifest next update:     Sun 07 Jun 2026 02:00:53 +0000
Files and hashes:         1: 5duaaoLxI2GH6cCYMPHCmMSHQ2A.roa (hash: pv7D776mN6xHh+aJuajkc1W+nQHEB1SubW6msOXjn6k=)
                          2: 5qo0L1TQGmfb0DZ40F5QQ1AXwt4.roa (hash: y83T+J2MWgz8Ab4dhxXSEXxv3P/YMscFEjT4/HScAVk=)
                          3: ACyMokyAcIhgnojfOOZk2Fp2M_g.roa (hash: RWgqlqxsw+gEGVmD//0j4E4TFF91yMaTTc+WhaSYKqM=)
                          4: lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl (hash: BKnpyt7Nomh4ZrIWzP/kwX/TTILR1E9MT0f2SOSwdsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:a9:67:b7:c4:a6:c8:8e:3f:bf:bf:83:bb:80:76:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
        Validity
            Not Before: Jun  6 02:00:53 2026 GMT
            Not After : Jun  7 02:00:53 2026 GMT
        Subject: CN=0b35bc6cf0df0060f3a32dde380d8fc38f87d6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:a7:3d:91:6b:4f:e7:25:a4:12:ca:92:c7:
                    af:ac:6c:0d:b6:10:41:38:a7:82:e5:d8:68:b0:79:
                    2d:21:fd:ec:65:fb:fb:0f:7b:2b:b5:08:48:24:55:
                    88:57:25:5e:10:b7:ef:b4:b1:70:06:81:5a:d3:94:
                    88:41:00:05:d3:1a:f0:41:0c:6e:19:99:19:02:18:
                    44:1e:6b:88:c3:fc:8b:eb:ce:5c:fb:15:a5:38:f5:
                    46:4c:c1:73:f4:eb:e8:55:8e:6e:4d:43:43:2e:ae:
                    11:8e:c9:5f:95:f0:10:03:29:7a:56:59:cb:7e:71:
                    63:1b:75:d4:e3:e8:0b:aa:c8:e5:04:9d:c6:66:25:
                    83:d5:87:63:48:2c:b2:5c:35:59:69:0f:fb:f1:62:
                    f8:a9:1d:05:8a:7e:d6:90:af:8b:98:28:cf:a6:cc:
                    71:87:de:2d:89:5b:35:b6:e3:30:41:09:02:b4:5f:
                    98:34:b2:20:74:18:91:8e:01:b2:e1:18:40:2f:b9:
                    ef:1e:c5:ff:98:0f:ac:8f:28:ed:0c:45:03:a0:67:
                    8c:d8:82:34:bc:86:05:50:94:fc:3c:7f:46:30:1f:
                    b5:fc:3b:33:a3:91:ac:6d:46:82:4d:47:1f:18:d4:
                    c3:88:10:44:ee:d8:de:ad:0a:8a:23:7a:2e:41:58:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:35:BC:6C:F0:DF:00:60:F3:A3:2D:DE:38:0D:8F:C3:8F:87:D6:A9
            X509v3 Authority Key Identifier:
                keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:7d:69:0f:8f:c4:52:b5:8d:a3:5c:ab:87:0f:de:52:a8:f3:
         f7:c0:2b:be:6e:1b:c6:2f:cc:61:7e:cb:fd:83:e6:4c:21:23:
         94:90:ef:47:bb:ee:30:f2:35:e2:56:1e:92:04:0d:8b:6f:f0:
         c9:d9:09:22:ba:98:07:a9:35:96:d5:0a:b3:52:3b:75:b2:77:
         e1:90:9c:26:b1:0c:7e:f8:9c:29:bf:27:41:9a:ec:f2:4e:b4:
         47:5a:6b:4e:99:5d:48:e3:de:e5:8b:b6:52:9f:01:c1:99:ae:
         bb:da:d3:a2:f6:93:1c:8a:dc:52:cd:74:ea:30:00:65:35:4b:
         7a:73:5a:80:b4:88:a7:06:17:9b:21:1f:29:ad:2d:5d:75:15:
         4b:a5:28:ab:9f:58:94:08:56:c2:62:1f:0c:41:12:7b:24:9b:
         09:b2:4d:1d:00:1e:f7:c0:03:bc:d2:dc:b5:42:ae:ba:e5:6e:
         b8:c9:12:c3:24:e6:f9:b3:ec:73:09:c7:3a:ec:df:7f:04:40:
         e8:9a:5d:a3:92:b6:01:a6:fa:13:19:79:18:b4:0b:c4:5e:f8:
         f9:be:0f:03:46:8a:1c:79:ce:ef:69:d5:df:0c:27:5c:e2:bb:
         f0:ef:cf:0f:76:ef:f9:4e:32:89:46:6b:29:3f:fb:67:07:20:
         af:50:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:58 2026 by rpki-client