Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File:                     Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier:          DZbe8fdu0CiTsfYROb5Wk0FCBJtBS+JxcCX5uj+BHUY=
Subject key identifier:   76:92:89:E9:AE:21:2F:C4:87:F4:39:88:29:EB:52:88:54:06:FE:4B
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer:       /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial:       019F190CED52FE6598680BB71AFACDC7AFFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number:          035B
Signing time:             Tue 30 Jun 2026 15:01:45 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:45 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:45 +0000
Files and hashes:         1: 6ShqfJ4w0dhyyxOTeWA4pIn8v2I.roa (hash: G2k5PxWvX5HN6A9EHs0dHdescyeu5uV2PhXpcj9QkhU=)
                          2: 6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (hash: FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=)
                          3: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: /WEi4VDeQZSjUsbNqlWPu5nf30tPKhlZmFhBOPoXR2M=)
                          4: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (hash: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:ed:52:fe:65:98:68:0b:b7:1a:fa:cd:c7:af:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
        Validity
            Not Before: Jun 30 15:01:45 2026 GMT
            Not After : Jul  1 15:01:45 2026 GMT
        Subject: CN=769289e9ae212fc487f4398829eb52885406fe4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:0d:25:c6:6c:66:6a:51:c9:ef:45:61:ba:
                    cf:f3:c1:1c:72:38:4b:ee:97:7a:c3:de:97:d7:e6:
                    6f:7b:eb:19:ed:58:9a:72:d5:c3:3c:b4:4e:24:35:
                    0a:bd:a3:35:7b:3c:d1:af:cc:30:b6:73:51:be:06:
                    68:a3:1a:d7:8d:40:31:e7:c0:1c:ef:56:06:a3:6e:
                    73:c2:3d:ad:c0:53:17:f8:f9:c7:9d:12:c3:e7:f6:
                    07:cc:e2:08:c5:4b:46:1d:11:1c:da:25:fa:50:0c:
                    3e:33:ae:c4:7d:07:d7:75:2e:62:c3:29:92:7f:9f:
                    80:17:53:33:bd:14:8e:bf:2a:1a:44:18:34:8b:1e:
                    37:c8:39:ce:79:0a:39:36:6f:b3:54:90:37:bf:81:
                    ee:6c:72:ae:6d:20:f0:a0:4c:05:b3:0d:0a:73:9d:
                    0e:3c:57:18:bd:45:9b:4e:23:73:a1:e7:c0:ef:2e:
                    45:e3:98:ed:19:04:85:4a:82:1d:a7:8e:16:f5:83:
                    42:9a:99:5f:6b:03:06:8b:9d:28:f0:3c:3c:b5:b8:
                    84:0f:f8:54:79:06:0b:67:a3:fb:43:fb:9c:f7:cf:
                    7a:45:63:3a:a0:6b:14:5e:f0:0c:19:a1:ba:c5:e6:
                    51:97:16:23:51:2f:9a:da:b8:46:38:f1:e0:e3:34:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:92:89:E9:AE:21:2F:C4:87:F4:39:88:29:EB:52:88:54:06:FE:4B
            X509v3 Authority Key Identifier:
                keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:1b:e6:68:15:3f:a2:e4:93:e6:12:70:78:01:a6:9a:b6:
         75:5e:aa:46:21:f1:04:2d:ce:47:7e:20:2b:ab:a1:1f:d3:5c:
         03:42:44:bc:46:2b:a3:a8:75:7f:a8:44:04:06:aa:59:32:59:
         a9:79:5a:68:c5:60:8d:dd:f9:2c:f4:94:47:91:f0:45:c7:b5:
         8b:64:5e:9f:b5:1e:13:74:1f:1d:34:59:56:a8:13:98:c3:1a:
         1d:79:8e:bc:be:fb:bf:0c:8c:ac:a8:b7:b4:fe:9a:13:f1:e6:
         5b:6f:6d:d0:8b:fc:7a:4c:72:91:87:42:2e:2e:3d:0a:7b:49:
         c4:8e:6a:eb:81:e7:28:c3:04:35:8c:a5:2f:5d:ab:9d:2f:51:
         3f:6f:3b:a5:a0:84:ba:f7:3b:6a:d4:2d:15:9d:c8:c4:c0:74:
         e6:4b:76:39:f0:51:53:e3:da:9a:33:83:42:60:cb:b9:56:f8:
         4c:eb:cf:8f:4c:60:64:3d:16:3a:17:e5:a3:bd:73:b4:fa:ab:
         be:c4:aa:5b:34:23:0e:63:6a:4a:2c:1f:6b:83:78:91:c1:2c:
         0b:24:79:41:17:76:3c:66:7a:a7:61:a1:78:69:2a:9c:28:68:
         2c:25:c5:8a:2b:76:7b:a1:f2:23:5c:e8:e2:ec:5c:f2:28:d6:
         70:b1:0a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:45 2026 by rpki-client