Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File:                     ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier:          uYPoO6YQyS8Qi7tNvxe0wpVUSvN1mgzoNR3N5xHbFm8=
Subject key identifier:   D1:E3:6F:5D:A3:4E:4D:93:B8:EF:47:4D:7D:13:B6:1D:B3:9D:5E:92
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer:       /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial:       019EB8B424182F8F143FF9F4403DAD56A9BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 22:01:13 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:13 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:13 +0000
Files and hashes:         1: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: Uj5HR/tegHAsdLK3RRqtwDP9WK//+c2SldUxM27wUUo=)
                          2: w73J2wKuabz6xF5h7oZy0LH-4cE.roa (hash: Rf9ykuk+l/JPt0H5ZkccxWBMK9ULnk1SQbpqnOL7oFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:24:18:2f:8f:14:3f:f9:f4:40:3d:ad:56:a9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
        Validity
            Not Before: Jun 11 22:01:13 2026 GMT
            Not After : Jun 12 22:01:13 2026 GMT
        Subject: CN=d1e36f5da34e4d93b8ef474d7d13b61db39d5e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:73:43:57:24:30:2a:4f:84:d0:07:1b:67:0d:
                    ab:6e:58:5a:80:11:ef:5a:36:f4:1f:2c:a4:0c:3c:
                    b5:7f:b1:35:fd:e0:c7:74:cb:22:84:54:88:2d:6a:
                    9a:49:4c:0c:dc:7e:44:4c:db:60:e6:50:58:17:0e:
                    ec:bb:1f:96:1f:4b:8b:74:c8:86:46:41:6d:1b:f4:
                    41:22:4d:dd:67:56:72:6c:86:83:7a:09:f8:2f:ba:
                    f6:65:e0:27:60:e1:51:70:33:db:5d:4c:17:3c:d5:
                    89:f4:5c:b5:2c:8e:57:f7:c6:7e:bd:74:fe:2f:4b:
                    ea:ef:8d:17:90:89:73:f9:7e:e3:f1:2c:3c:1c:77:
                    fc:11:f3:ff:40:df:fe:23:d0:8c:14:6c:ad:45:cf:
                    d6:a8:84:f1:91:8c:b2:ea:d4:3e:9d:74:41:14:fe:
                    04:80:ac:35:81:67:26:d0:ae:37:c7:d3:5e:3a:f7:
                    39:64:24:65:48:6e:d4:ab:08:b6:dd:96:da:a6:68:
                    88:3a:1e:2d:84:86:bd:62:2f:b3:c5:2f:3b:8d:e5:
                    32:f5:47:6b:a3:aa:81:17:4a:e8:b5:5d:71:e2:e8:
                    1d:fc:bb:de:06:ba:10:58:6c:89:10:f8:dc:13:b7:
                    8d:4f:61:0e:2b:65:0f:a0:f1:9b:f2:d6:35:8f:52:
                    24:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E3:6F:5D:A3:4E:4D:93:B8:EF:47:4D:7D:13:B6:1D:B3:9D:5E:92
            X509v3 Authority Key Identifier:
                keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:12:48:3f:b8:7c:e7:a2:11:89:f4:9e:80:66:9d:85:82:ab:
         69:05:2c:8a:58:90:45:59:64:d8:f3:8d:75:b5:1a:86:38:84:
         4d:86:db:02:03:a2:e6:d8:bf:0b:78:f5:89:1e:05:a8:5f:8e:
         44:92:80:16:0f:f4:1a:99:c2:4e:27:f4:01:3c:26:2e:a4:f8:
         fa:92:43:0f:91:9f:ba:b4:66:2e:b6:2b:f0:2d:01:9f:d0:dc:
         1d:48:30:41:8b:a5:4c:59:dc:d6:e7:d8:df:cb:b9:32:3a:34:
         cc:4f:9d:6b:16:0b:c9:db:54:b7:8d:44:98:a7:e9:cd:c5:10:
         88:31:63:21:38:02:0b:e3:7e:b4:7f:1a:f4:ac:de:ab:72:19:
         4c:62:c9:95:3a:a5:4f:c6:7b:20:da:bd:58:e0:27:d8:b8:cb:
         c0:f4:5b:ac:8b:67:83:9d:4a:f0:e8:a9:97:50:cd:a3:65:e5:
         4e:6a:1d:c1:92:75:5c:33:13:8e:90:04:8a:b0:fe:bd:9a:49:
         16:8e:32:05:55:ab:1c:84:b0:97:9e:c8:78:66:19:e9:6d:3d:
         3b:d0:e2:eb:d3:72:e2:55:66:22:83:a5:66:47:fe:00:10:91:
         ee:e9:e8:1f:18:08:29:11:6a:97:b2:ca:cf:a3:e9:ea:f0:1f:
         0b:24:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:49 2026 by rpki-client