Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
File:                     lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft (raw, json)
Hash identifier:          g6G/ebqD3o77nq1V4dZ5iByb8yTv2kDlHKFYA9EE+as=
Subject key identifier:   7B:35:FA:28:2C:27:87:65:E2:B6:DE:C1:6C:17:E6:1B:2D:B5:2A:2B
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Certificate issuer:       /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial:       019F111C588EF43C9FAE788BA425ADB9A0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
Manifest number:          198F
Signing time:             Mon 29 Jun 2026 02:01:38 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:38 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:38 +0000
Files and hashes:         1: 3lueYa4cGAq4U9ivFZ8-mTJKeUs.roa (hash: yo8hQ3SuLYgiKWGisWTt5R1HgigntwJ6UO6bodCaAnE=)
                          2: 868VkIZTeEk8g8K-nc-GYk4GNqA.roa (hash: mAkolD9i09Q2h4MCniDyPs0rmf1iQU6A0FPOG2LgFwE=)
                          3: lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl (hash: PRShsWcseF6Dmey4dRv06VsYCtMrir2efJQiwuYdn4Y=)
                          4: q05mb8KRpZC-dZjSk2rMKN2gE_Y.roa (hash: eotOUqJ53rWQxs9/sn9KK6XM4STngZxv7oKNTVxb9eI=)
                          5: xY0yzyzGKETMGEPdBnrDX84itWs.roa (hash: avsQpG9VhWpkE114IUXSkSxZIAsU+MHzryCiy/ZPdtw=)
                          6: yQDR4RXyJipBGIGaXf0hpmvg9MI.roa (hash: Gz9z3oldgWaZnVSRtfCqMKiqcH9Ia6S6jLOD4nomWR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1c:58:8e:f4:3c:9f:ae:78:8b:a4:25:ad:b9:a0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
        Validity
            Not Before: Jun 29 02:01:38 2026 GMT
            Not After : Jun 30 02:01:38 2026 GMT
        Subject: CN=7b35fa282c278765e2b6dec16c17e61b2db52a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:58:bd:62:0c:8a:38:81:8f:2e:a7:0a:38:
                    a7:ea:aa:85:68:08:4e:3d:a7:0a:78:a8:0d:1c:27:
                    27:65:e3:65:57:63:73:ee:5e:2b:90:f3:29:5b:f9:
                    c5:62:72:26:8e:28:6a:06:0f:9d:24:0c:94:ee:2b:
                    13:40:06:04:2e:56:ce:65:86:5e:46:7d:a5:0e:7a:
                    11:03:46:e1:a9:6f:32:84:69:99:ba:d0:37:d7:ed:
                    21:04:0b:66:82:3e:a1:27:7f:2c:8c:e3:d1:dd:28:
                    09:f7:0c:5c:75:bc:b5:7f:da:44:30:4c:9f:3f:46:
                    95:15:ab:09:f9:e8:63:ed:45:fe:57:14:cc:d7:d8:
                    de:28:4f:d8:73:1f:ed:2c:9a:85:1d:64:67:d3:29:
                    08:9d:38:40:a7:84:80:e2:80:f8:31:4a:aa:90:38:
                    f4:c4:ea:82:f9:ef:ee:3b:1e:22:9d:1c:75:05:ba:
                    c3:68:68:02:1a:1b:42:ab:86:f8:11:34:fc:7f:bb:
                    2d:f8:dd:17:d0:b3:93:b0:ae:05:78:b0:13:06:1b:
                    d6:33:ce:1b:10:19:de:79:00:96:ee:65:58:71:f3:
                    7f:55:63:c7:d5:59:a4:52:19:6e:5c:40:dc:c0:42:
                    cf:39:97:88:9b:c7:7a:1f:14:4c:89:43:d7:2d:36:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:35:FA:28:2C:27:87:65:E2:B6:DE:C1:6C:17:E6:1B:2D:B5:2A:2B
            X509v3 Authority Key Identifier:
                keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:da:a2:ca:63:f8:64:b5:71:b4:a2:df:6c:5d:41:98:9c:a8:
         a7:4c:ad:d3:a6:da:95:db:3f:10:82:98:8e:72:cd:58:3f:b3:
         c2:2d:b3:a7:5f:3c:ee:4c:e0:95:f3:ea:5b:2f:5f:36:ef:ab:
         85:60:99:ac:4d:3a:77:36:66:22:5f:c0:9e:50:46:f0:f4:bb:
         11:9d:94:46:23:a9:34:55:f4:66:cd:fd:cc:f7:a4:38:34:f0:
         74:72:49:81:a3:e3:8a:e9:5a:41:d4:2f:ea:b5:36:81:ce:70:
         36:6e:5f:40:02:e0:0d:73:99:72:4a:11:43:e3:a2:4d:ee:bc:
         a8:47:52:41:ac:25:60:34:1b:c5:8c:6b:ff:24:b1:5c:46:91:
         60:57:c6:04:24:46:06:3b:59:e8:c8:3e:ba:dc:85:e2:e3:17:
         12:7f:a0:a9:a2:e5:41:5b:41:31:72:7e:ef:ad:eb:88:9f:6a:
         d2:d7:b6:bc:00:31:8e:50:f1:a9:10:c8:c1:8c:c7:5f:8b:1b:
         fe:73:b4:9d:9e:84:4c:1a:c9:5d:7b:b5:73:15:bd:d5:65:63:
         ec:db:23:8d:e4:b2:35:31:11:29:e0:0e:67:12:a1:7d:0c:11:
         c7:00:cc:fc:6e:d9:ee:24:f7:fb:fe:ad:6e:2f:95:a0:40:df:
         5e:f4:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:05 2026 by rpki-client