Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
File:                     LAe_O3M6XDpx2cqMNiaUjfcScFs.mft (raw, json)
Hash identifier:          Jts2g6hIKrSFTRYZlLtVnrOM4lA6//Ow9+tRzprDjWc=
Subject key identifier:   75:F7:A0:2F:81:10:78:AB:B0:F6:3A:7D:97:D5:87:89:47:7C:60:22
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Certificate issuer:       /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial:       019DF915CD69AE899A0D0D2213A396C45FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
Manifest number:          0129
Signing time:             Tue 05 May 2026 17:00:48 +0000
Manifest this update:     Tue 05 May 2026 17:00:48 +0000
Manifest next update:     Wed 06 May 2026 17:00:48 +0000
Files and hashes:         1: 7X8lCYsAS6GOEdR-ccHUOQIrvjc.roa (hash: r2glHg/T+YpYXCIT8+l4YxupOX2jMrXd200bHTuRVAA=)
                          2: LAe_O3M6XDpx2cqMNiaUjfcScFs.crl (hash: hYzF34gsbhMsra/Ip1m3cKBWH8UN730nhoEOTgCNrQo=)
                          3: LRekpy3pmbWbrUTdBMW6h9NfusY.roa (hash: YRTtibPalxJjAsU2gk0In2K8ISMEYHzWlsgl5P78tOI=)
                          4: SXH057UJKzS7rHzBDJcA4ENrOvM.roa (hash: xcKm9OrMnT6THeGkJMgEPYfZ1pZ8IIDbrRlbFdC0Bww=)
                          5: ajjWFLhMNU-QuF21tZ1GMQOJmmo.roa (hash: HwQXBdSljqHyOy0pToc7H06Y8W7GqL4m3uBiGpV22c4=)
                          6: tt7rXqmAYyRN__Anfgn9-2k-W3s.roa (hash: RREs/qSxo2zw08QHSwYOaPPgUpSMSoFcgi5dpAxZ4Qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f9:15:cd:69:ae:89:9a:0d:0d:22:13:a3:96:c4:5f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
        Validity
            Not Before: May  5 17:00:48 2026 GMT
            Not After : May  6 17:00:48 2026 GMT
        Subject: CN=75f7a02f811078abb0f63a7d97d58789477c6022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7a:b9:a5:fc:30:d6:d6:99:55:ea:50:b5:a8:
                    17:e1:df:e1:71:d4:af:5f:d9:63:ee:ec:43:d7:2a:
                    b2:5a:61:06:56:31:53:22:65:63:1e:33:4f:87:08:
                    eb:0e:aa:b8:c6:9c:30:9b:5f:6c:d8:12:c8:d0:90:
                    7e:a9:63:72:dd:7f:cb:34:54:b0:0f:45:95:70:8b:
                    40:8f:6e:6f:c6:f4:03:2c:d5:67:57:73:e5:7e:68:
                    dc:23:54:e2:5b:06:5f:01:5d:e4:bf:97:df:33:cd:
                    4d:a8:43:51:3f:4d:b7:41:ac:ef:48:e6:89:73:f9:
                    3c:b5:2b:d0:36:a4:e1:3a:e5:7a:6c:c1:83:0c:87:
                    b4:94:80:6a:9c:00:27:cf:78:4a:42:93:3b:ed:a8:
                    b2:7c:cd:c0:05:17:4f:28:96:b4:70:53:bf:33:84:
                    3d:74:55:70:3f:81:c0:04:bb:09:e4:59:f9:cd:44:
                    13:3a:94:f3:b3:a7:50:88:27:ae:f0:ae:fc:e5:38:
                    e6:48:4d:54:b2:9d:32:2b:c2:79:4a:77:8e:84:09:
                    51:23:63:21:5b:dd:3f:73:d7:df:98:1f:b9:a0:93:
                    aa:dc:7e:ff:89:aa:26:66:a6:26:43:93:bd:13:c8:
                    5b:33:4e:1b:d9:c6:a0:ca:fc:a8:4d:41:0d:81:28:
                    e1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F7:A0:2F:81:10:78:AB:B0:F6:3A:7D:97:D5:87:89:47:7C:60:22
            X509v3 Authority Key Identifier:
                keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:93:7c:01:8d:fb:0b:73:be:4a:f3:a7:76:56:83:9b:1a:98:
         fc:74:85:01:cd:97:57:dc:4b:e2:c3:a5:54:f4:4d:bf:78:7e:
         ad:66:00:b6:db:73:b8:34:73:8a:fa:d4:58:71:21:74:13:2b:
         fa:ed:94:7a:4a:1f:c9:f5:59:6d:ec:ac:1f:a0:16:4c:db:07:
         9b:a3:59:77:54:98:8e:fd:30:b2:26:a6:0b:80:3e:18:c4:64:
         78:e7:56:e0:c8:a0:9a:8f:9f:67:7f:27:a3:1e:4d:d3:93:4a:
         3f:88:eb:6a:78:06:84:0b:cf:40:b1:ad:91:76:fa:9c:4f:e1:
         f6:42:e0:1e:9f:91:1c:d8:8e:17:51:67:a8:d2:5d:67:44:25:
         5e:d8:5a:ee:9c:2b:d4:1b:58:5f:6c:35:85:3e:57:2f:2a:6a:
         3a:e0:83:f2:a1:d3:3b:d4:8a:4c:ec:b4:ae:67:ac:1b:18:a2:
         4b:fa:a9:e5:98:e0:45:a2:50:91:d7:89:10:03:f1:12:8f:93:
         86:96:22:ce:0e:da:89:06:3e:0f:34:91:ed:42:03:9b:cf:31:
         cf:94:ce:90:0a:f6:fb:9f:cd:bc:b6:31:0c:aa:c8:50:e6:b3:
         18:e3:11:d4:8d:c3:c5:47:02:29:3e:c1:cb:bb:30:4a:eb:5a:
         d2:03:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:27:50 2026 by rpki-client