Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
File:                     lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft (raw, json)
Hash identifier:          VlYG+lMEoIcf8a+JMAPWSommdOmk89QewtO2gJAgfcE=
Subject key identifier:   33:90:E7:F3:2F:69:14:F4:E8:46:FA:4A:F1:EF:F0:71:A4:FF:24:DA
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Certificate issuer:       /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial:       01A15D7A70ACBDEEA1C956F2BDDACC252122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
Manifest number:          0D40
Signing time:             Wed 21 Oct 2026 08:01:07 +0000
Manifest this update:     Wed 21 Oct 2026 08:01:07 +0000
Manifest next update:     Thu 22 Oct 2026 08:01:07 +0000
Files and hashes:         1: 5duaaoLxI2GH6cCYMPHCmMSHQ2A.roa (hash: pv7D776mN6xHh+aJuajkc1W+nQHEB1SubW6msOXjn6k=)
                          2: 5qo0L1TQGmfb0DZ40F5QQ1AXwt4.roa (hash: y83T+J2MWgz8Ab4dhxXSEXxv3P/YMscFEjT4/HScAVk=)
                          3: ACyMokyAcIhgnojfOOZk2Fp2M_g.roa (hash: RWgqlqxsw+gEGVmD//0j4E4TFF91yMaTTc+WhaSYKqM=)
                          4: lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl (hash: ZlKEH2eALgZkcWgOhxTRMBCmsEe5o7v9A1N4f7otV+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5d:7a:70:ac:bd:ee:a1:c9:56:f2:bd:da:cc:25:21:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
        Validity
            Not Before: Oct 21 08:01:07 2026 GMT
            Not After : Oct 22 08:01:07 2026 GMT
        Subject: CN=3390e7f32f6914f4e846fa4af1eff071a4ff24da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:7a:aa:f9:21:1f:27:89:d0:b7:e2:49:c9:
                    ce:fc:df:bf:7d:f5:15:1d:ab:eb:8f:d7:00:4b:e1:
                    21:30:88:30:39:46:9e:6d:bd:0b:0f:13:57:5a:e8:
                    7f:40:97:ae:74:5f:5c:75:3f:7b:f0:cd:b5:81:a8:
                    c0:ee:13:f4:4c:91:4e:e9:db:6c:3a:c3:ec:f4:22:
                    e6:f4:42:c3:73:dc:77:64:93:23:88:72:16:2a:42:
                    b9:e3:ec:18:3c:17:3f:05:89:24:ba:56:3e:ca:f0:
                    e8:54:d5:7d:57:2f:c2:0f:db:25:05:44:db:a0:ab:
                    66:16:ae:94:7c:51:c2:32:d2:8a:36:5b:e5:a6:dd:
                    12:a2:53:b5:4f:9b:98:70:40:45:f7:5b:cf:c1:0a:
                    43:f1:e6:8e:5a:e6:f0:9c:43:31:40:5a:37:98:b5:
                    4e:49:38:18:66:bb:48:7d:4d:a4:9a:28:3d:a3:9f:
                    44:65:89:ef:31:a8:a6:2f:cf:d1:b1:b4:fa:5f:2f:
                    44:71:66:43:ce:09:44:aa:d1:11:f9:f0:b7:be:01:
                    dc:b9:fd:c0:82:42:05:5a:b7:13:c2:7f:c5:6d:4b:
                    d3:9e:2a:50:44:bb:f6:74:83:85:f6:0a:82:79:99:
                    fd:63:bf:9e:20:31:d4:b3:45:15:11:09:c4:b5:f2:
                    dd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:90:E7:F3:2F:69:14:F4:E8:46:FA:4A:F1:EF:F0:71:A4:FF:24:DA
            X509v3 Authority Key Identifier:
                keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:87:df:7d:e4:d8:f9:ec:0e:0f:70:bf:09:40:a4:91:9b:e2:
         8e:fb:d7:42:9f:88:4f:b9:80:3a:2b:3a:ec:cd:bd:7b:9b:15:
         77:fe:38:87:ed:11:d4:6f:91:62:45:c4:d5:a2:67:44:fd:91:
         57:5a:1a:67:b3:5c:8c:5b:33:87:90:48:71:1e:52:33:d9:9c:
         22:a7:1b:4a:4d:99:e3:58:b9:8d:61:eb:0d:ba:42:c5:21:55:
         76:9a:5a:a7:f7:54:ad:09:2f:e5:04:9f:93:24:7a:6f:8f:88:
         3d:19:06:6a:37:0f:5d:fe:0b:7c:e8:52:99:74:b3:3f:67:ee:
         f0:02:e6:b2:a8:26:42:e0:20:3c:71:a9:e5:54:57:fa:89:79:
         a0:ce:06:b8:a9:53:d2:b1:92:fa:ce:f8:39:9f:1d:59:05:37:
         dd:b1:dc:3b:74:b1:74:f0:ea:a8:9a:d1:85:c4:db:a9:55:c4:
         43:c8:2f:8d:bd:6d:01:78:fb:10:55:49:51:09:7e:50:2c:92:
         79:f4:fa:e4:ca:0d:06:bb:ef:1d:f6:44:f3:22:4f:db:88:f7:
         46:0b:4b:e2:f8:fe:dc:35:57:06:ba:15:67:31:e4:89:7a:dd:
         6f:18:4e:28:1b:7b:c3:e6:f5:ad:a6:d3:fc:a9:33:c6:03:97:
         03:7c:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:50:58 2026 by rpki-client