Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
File:                     v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json)
Hash identifier:          p2EJTzUpczo3pZOgMZ9NLrQZlUZHDL8Pw5gN6gJSgxM=
Subject key identifier:   0C:3C:5F:80:00:D9:EA:BC:37:68:1A:01:07:2A:B7:1A:FC:76:E0:17
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Certificate issuer:       /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial:       01A003943BA187770D18A508CDDB2796F394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
Manifest number:          1993
Signing time:             Sat 15 Aug 2026 04:00:41 +0000
Manifest this update:     Sat 15 Aug 2026 04:00:41 +0000
Manifest next update:     Sun 16 Aug 2026 04:00:41 +0000
Files and hashes:         1: HkESZav4s-gaBhayorEKTs_dvWY.roa (hash: 4pdtiZ94ktcZKGQXEiN4JbBohEK0TkGQ1CIQ5Piq3Ns=)
                          2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: rOsRJPmvN0YjpIvZIbYps68CjH2xZYYC58+KLZpoVd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:94:3b:a1:87:77:0d:18:a5:08:cd:db:27:96:f3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
        Validity
            Not Before: Aug 15 04:00:41 2026 GMT
            Not After : Aug 16 04:00:41 2026 GMT
        Subject: CN=0c3c5f8000d9eabc37681a01072ab71afc76e017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:9e:41:b3:79:b4:c6:5e:0f:6c:1d:75:d2:
                    79:ef:88:e6:e6:14:f9:4c:c5:7d:a8:58:68:ac:67:
                    77:c0:e1:b0:24:55:50:e9:7e:f5:80:9e:08:26:9a:
                    8e:43:2b:54:01:1e:5d:aa:1f:62:47:fe:a6:3d:01:
                    f6:c4:91:a7:f1:87:c2:c1:16:59:e0:14:bc:23:51:
                    ed:1e:3b:42:34:3f:51:34:de:ed:d8:15:48:96:e6:
                    30:ad:92:58:a8:d0:b4:b2:08:10:d0:33:0f:a6:07:
                    23:ec:85:0b:e5:ca:a3:e5:37:e5:31:71:e4:c0:07:
                    45:b9:2f:59:4a:95:31:17:ad:ab:5a:45:58:8e:3c:
                    41:1c:b9:ee:20:28:9f:73:a1:80:50:c3:e6:44:14:
                    ca:4c:d5:ca:c6:7f:2e:69:62:9a:49:a8:85:9f:d0:
                    63:6b:84:9b:41:26:12:14:87:1b:f0:96:17:c4:18:
                    48:57:07:a2:eb:82:bc:e3:69:ef:cf:7a:bd:c7:5a:
                    6b:e4:ed:2f:9d:2b:b4:e9:34:3e:77:e5:41:e8:50:
                    9f:90:6d:78:8f:04:46:ff:ec:4b:73:97:ec:ff:d3:
                    74:2d:43:57:d0:3b:79:f8:fd:af:86:65:e8:80:bb:
                    66:77:b0:af:d5:ba:09:ca:f3:98:cc:2a:2e:d3:d2:
                    4a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3C:5F:80:00:D9:EA:BC:37:68:1A:01:07:2A:B7:1A:FC:76:E0:17
            X509v3 Authority Key Identifier:
                keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e0:e8:52:ed:64:e0:3d:8c:cb:13:6f:ac:46:2e:7f:ac:37:
         26:d1:2f:2f:6f:d3:be:65:d0:58:c7:b4:3f:36:b1:c1:3e:6e:
         6a:14:a6:50:49:ec:e3:fd:1d:db:2d:e2:f0:9b:e3:8a:a6:14:
         71:4f:b2:5b:c8:02:74:16:b4:4d:13:b1:ac:40:dd:bc:02:dd:
         3f:34:aa:50:cd:77:cb:51:51:bc:6b:0c:9d:0c:4a:a0:c3:fe:
         69:99:68:18:a2:fe:84:2a:e4:6f:1e:e8:23:21:45:1c:ec:92:
         7f:97:cf:5f:81:e8:21:93:b1:2e:67:8f:1f:f8:f4:45:bb:d6:
         6e:7f:ed:8d:65:de:c8:46:b8:54:dd:fb:39:89:29:0f:c2:b4:
         35:e4:fc:5e:9f:c6:5b:14:7f:bd:cb:0b:ab:9d:bf:61:c7:6f:
         ed:df:64:f7:da:76:e3:8c:e7:27:fd:b6:46:bd:38:b0:3f:8f:
         80:f2:9e:23:b8:79:6c:0a:e5:a3:92:2b:18:f7:56:22:03:7f:
         0f:51:25:97:26:fa:bc:20:a6:8a:b5:cb:c8:dd:4f:91:38:fb:
         5b:9e:9a:ac:a4:e2:6f:b2:1f:dc:0a:9e:6b:02:6c:89:92:2f:
         10:5e:9c:0d:87:d3:cf:88:46:4b:a7:12:a3:ac:17:93:d1:0a:
         99:7f:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:43:32 2026 by rpki-client