Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File:                     LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier:          f8lBZ4DOe4DKZ0YIeVcBykYibmy9k3ctyDK1fFR7+uI=
Subject key identifier:   EF:C4:C5:44:1F:80:84:3C:F4:1F:A1:2A:0E:C7:5E:6B:C7:F7:17:B9
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer:       /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial:       01A001A67470060D4306E3E5DABFCE192DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number:          153C
Signing time:             Fri 14 Aug 2026 19:01:20 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:20 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:20 +0000
Files and hashes:         1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: +NRUSG0XonOA57/+qLV13K6j/35jeVXvIw82vr4Pjq0=)
                          2: mFiXzHrxbxRLCdJjqMjDV1qXsf0.roa (hash: xj8BfUXzJ6HgdFsCYVaF06L0rsBxHlnBN9flZ6X2gpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:74:70:06:0d:43:06:e3:e5:da:bf:ce:19:2d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
        Validity
            Not Before: Aug 14 19:01:20 2026 GMT
            Not After : Aug 15 19:01:20 2026 GMT
        Subject: CN=efc4c5441f80843cf41fa12a0ec75e6bc7f717b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:fa:a3:86:cd:c3:ba:aa:10:13:90:8b:65:
                    66:ef:60:1e:f1:d5:7f:d3:c1:57:b0:97:8a:ce:cb:
                    ba:5e:49:31:c7:ac:08:4c:34:a1:46:33:cc:f1:0e:
                    10:e4:51:4f:83:57:a3:06:07:ad:43:4b:94:6e:da:
                    be:a3:31:ae:69:e0:1a:cd:83:72:c0:b3:b2:00:07:
                    f5:1a:8d:92:39:50:67:c8:98:ff:a4:6e:e9:19:af:
                    6d:93:cd:54:ec:55:c0:ab:00:47:a0:91:7c:b7:b9:
                    ea:31:b6:a6:81:43:1a:71:81:7b:e1:f8:1a:70:f4:
                    91:af:01:44:0b:04:ce:11:07:33:5f:b5:9f:18:93:
                    bd:9d:27:c9:62:4d:65:a9:35:d9:8f:b7:37:a3:8a:
                    b9:88:6d:e3:e0:10:f9:98:53:55:fe:47:62:a0:cc:
                    5f:d0:01:cd:17:0c:6c:3a:62:65:65:3e:56:c7:93:
                    59:b8:1f:08:fa:2d:24:be:92:53:86:99:ad:62:e3:
                    e2:87:b1:82:50:8d:c8:e5:68:a1:1d:7b:7b:dd:5a:
                    8e:1a:a6:c3:5a:08:d3:16:05:cb:26:e4:17:7f:37:
                    e5:8d:cc:aa:6a:ff:14:ad:1b:07:c5:b5:1f:ed:a0:
                    c6:dc:d5:2a:01:27:aa:0a:af:45:87:b9:c9:6f:e6:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C4:C5:44:1F:80:84:3C:F4:1F:A1:2A:0E:C7:5E:6B:C7:F7:17:B9
            X509v3 Authority Key Identifier:
                keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:14:f7:ff:80:ee:30:98:0f:f6:a3:40:65:e5:30:ca:7d:a5:
         31:02:22:15:94:d4:b0:1a:0b:f3:0f:8f:e0:16:cb:a1:fe:a5:
         21:06:94:cc:5e:8c:b7:6d:f7:ed:cf:2d:ae:d4:00:b1:be:cc:
         9f:0d:66:63:8e:90:f6:1b:8b:c9:97:25:e6:aa:c5:95:58:3c:
         77:b8:18:2f:ce:2a:1f:30:72:0d:c9:1f:c5:27:52:c0:b8:74:
         c9:52:be:23:42:40:49:79:99:8d:02:28:ff:6c:be:4c:9b:f4:
         ae:4b:3b:0a:e6:72:39:a8:95:22:8a:78:12:6b:dc:75:b8:8c:
         eb:b9:55:50:9e:2c:25:57:b8:e6:92:53:51:12:d7:bd:ce:e2:
         cb:6f:fc:db:84:10:07:6c:39:08:ad:09:58:a6:65:d6:5b:aa:
         52:11:c5:c0:8f:52:0b:3a:ad:c9:87:0e:e5:56:cb:73:c9:fd:
         dc:f6:27:90:65:6f:59:d4:62:fb:f6:f3:b3:9c:8d:c0:be:e0:
         46:51:b1:47:5a:f4:80:97:8e:40:9b:fd:29:3c:0d:a1:a8:4d:
         9c:1a:4d:dd:e6:3c:5e:d3:8f:c9:88:c1:a5:db:75:1b:df:c9:
         f8:5f:34:b8:c5:99:c9:38:94:b7:f6:4b:03:99:8d:5e:7d:c5:
         22:7b:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:01 2026 by rpki-client