Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
File:                     LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json)
Hash identifier:          yoERj7P+imneEqKwwrg9FY8CHHjgLsMhI0AqJcbaGBA=
Subject key identifier:   E6:56:89:78:F9:1B:9D:AC:8C:95:34:90:27:7A:DD:15:D5:50:9C:BA
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Certificate issuer:       /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial:       019E9C978B2CEC6A9639846921AEC531E122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
Manifest number:          1724
Signing time:             Sat 06 Jun 2026 11:00:37 +0000
Manifest this update:     Sat 06 Jun 2026 11:00:37 +0000
Manifest next update:     Sun 07 Jun 2026 11:00:37 +0000
Files and hashes:         1: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=)
                          2: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=)
                          3: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=)
                          4: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: 4PtrtpgQnabPpekFvfVzAs4TwWLTUonId9qjpTLtZZw=)
                          5: LjwLBkukbLxUFkuTIfR9w1snMls.roa (hash: 4nFYoBbwhfsOo2OK62wk4BJ40HPGWDvHaokQJOEAsAE=)
                          6: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=)
                          7: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=)
                          8: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=)
                          9: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=)
                          10: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=)
                          11: c0F1tCgxfTqqtecEpLhL2Yzgotc.roa (hash: kcc7SOAkVdEZqliKSy982SiY2cxq/54ffuzbxdOylbI=)
                          12: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=)
                          13: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=)
                          14: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=)
                          15: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=)
                          16: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=)
                          17: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=)
                          18: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=)
                          19: tw6AZDGGpP9NxVAB2it1NsPBTW4.roa (hash: IMxXE5hLU1Mm0BQGKqcA2AkFFX2OTXDF0EUw7x9FubM=)
                          20: xYkYZOmCV58rTJJEdIAsjdVBGXM.roa (hash: eCJXn/CSFpM/78IXFQ7tMZnEX10POhy3RCQh+Y88gTU=)
                          21: yJoN1VaNgltdfpP-maVQQcOYy_8.roa (hash: DoE5yzS7wJT/6cfhAeXgd5cw2cfQnuSELoHqvY9h2n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:97:8b:2c:ec:6a:96:39:84:69:21:ae:c5:31:e1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
        Validity
            Not Before: Jun  6 11:00:37 2026 GMT
            Not After : Jun  7 11:00:37 2026 GMT
        Subject: CN=e6568978f91b9dac8c953490277add15d5509cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:f4:63:82:d3:33:fb:9d:dd:13:fa:a2:d8:
                    c1:5f:1b:03:d8:bc:b3:57:ee:44:8e:f8:e5:09:0d:
                    d7:5a:cb:19:c5:52:1c:93:c1:9d:53:86:7e:66:4e:
                    63:58:49:e8:b8:c3:fb:4b:34:62:c9:1d:0c:ae:d6:
                    1d:0e:dd:9e:76:ec:49:2d:ab:03:22:ca:f3:7c:e1:
                    70:5c:80:d5:77:79:e4:31:e5:1f:1f:37:6b:7f:29:
                    6a:8e:11:ce:9c:20:7d:5e:92:c1:7e:b8:cb:9c:a2:
                    dc:a8:67:09:a5:5c:dc:e9:fe:64:02:ba:56:83:02:
                    4f:e3:11:08:f4:40:75:73:bd:c4:75:18:a8:1c:93:
                    15:3b:7f:3a:b2:2c:cd:ca:41:93:84:bd:59:64:6b:
                    cd:13:c5:21:6d:cf:dc:92:32:19:62:6c:64:00:6d:
                    5e:63:54:ad:cc:49:be:c4:8c:62:13:b9:e2:d7:d7:
                    03:87:61:01:bc:a0:c8:8c:67:fd:ea:ae:5c:6f:3a:
                    2e:1e:a9:30:d8:02:5f:30:03:7c:e2:2b:82:5e:5f:
                    f7:d0:db:96:c1:59:c6:8a:2a:9f:cc:0e:69:44:36:
                    9e:9c:9d:55:5c:9d:4d:14:d0:d9:26:21:e2:19:c1:
                    be:21:d4:83:83:c0:4a:64:7a:13:20:e7:de:9d:30:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:56:89:78:F9:1B:9D:AC:8C:95:34:90:27:7A:DD:15:D5:50:9C:BA
            X509v3 Authority Key Identifier:
                keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:49:d5:c7:fd:2b:f2:cc:b8:f5:89:e1:71:6c:9a:18:0d:0d:
         6d:c2:06:18:4b:6a:2f:b0:3c:ee:14:61:87:e4:8e:7d:42:ff:
         9a:6f:1b:58:ed:96:b9:62:72:25:59:6f:3e:e9:fe:cf:83:20:
         48:bf:be:8f:98:7f:3d:dc:32:cb:5b:20:b1:85:e5:d0:15:1e:
         e9:16:64:6a:54:84:b4:de:fe:6c:4b:9f:1d:a7:e9:71:83:53:
         5e:52:f4:53:8b:64:e4:e4:1a:34:ac:63:b5:f5:2f:25:d2:50:
         ec:33:a0:9a:98:bf:dc:97:bb:68:10:60:1b:69:39:db:86:ef:
         81:ba:3a:63:ba:58:c3:d2:6f:50:3e:0e:4d:dc:fb:9f:b6:44:
         5e:ca:6f:b2:b9:85:b7:5a:65:fb:d4:e3:2f:bc:0f:7b:af:64:
         cf:ec:e2:52:a7:76:81:22:65:1e:73:9c:f9:50:72:ee:0b:b4:
         55:1f:31:30:53:49:e6:81:05:6c:7d:39:4f:86:04:bc:a4:14:
         fd:08:e1:45:a3:ff:94:69:52:26:90:fd:39:39:a7:4a:0c:a9:
         ef:0c:b6:4f:81:a0:bd:77:4d:b9:9a:b6:3f:2c:04:5d:74:60:
         88:fd:67:24:62:56:a5:d6:8c:69:6f:7b:85:7f:b3:9f:7e:aa:
         1e:85:11:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6cl4ss7GqWOYRpIa7FMeEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2
ZTMxYTcwHhcNMjYwNjA2MTEwMDM3WhcNMjYwNjA3MTEwMDM3WjAzMTEwLwYDVQQD
EyhlNjU2ODk3OGY5MWI5ZGFjOGM5NTM0OTAyNzdhZGQxNWQ1NTA5Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4D0Y4LTM/ud3RP6otjBXxsD2Lyz
V+5EjvjlCQ3XWssZxVIck8GdU4Z+Zk5jWEnouMP7SzRiyR0MrtYdDt2eduxJLasD
IsrzfOFwXIDVd3nkMeUfHzdrfylqjhHOnCB9XpLBfrjLnKLcqGcJpVzc6f5kArpW
gwJP4xEI9EB1c73EdRioHJMVO386sizNykGThL1ZZGvNE8Uhbc/ckjIZYmxkAG1e
Y1StzEm+xIxiE7ni19cDh2EBvKDIjGf96q5cbzouHqkw2AJfMAN84iuCXl/30NuW
wVnGiiqfzA5pRDaenJ1VXJ1NFNDZJiHiGcG+IdSDg8BKZHoTIOfenTA2vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZWiXj5G52sjJU0kCd63RXVUJy6MB8GA1UdIwQY
MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt
N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy
LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQknVx/0r
8sy49YnhcWyaGA0NbcIGGEtqL7A87hRhh+SOfUL/mm8bWO2WuWJyJVlvPun+z4Mg
SL++j5h/Pdwyy1sgsYXl0BUe6RZkalSEtN7+bEufHafpcYNTXlL0U4tk5OQaNKxj
tfUvJdJQ7DOgmpi/3Je7aBBgG2k524bvgbo6Y7pYw9JvUD4OTdz7n7ZEXspvsrmF
t1pl+9TjL7wPe69kz+ziUqd2gSJlHnOc+VBy7gu0VR8xMFNJ5oEFbH05T4YEvKQU
/QjhRaP/lGlSJpD9OTmnSgyp7wy2T4GgvXdNuZq2PywEXXRgiP1nJGJWpdaMaW97
hX+zn36qHoURrw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:19:08 2026 by rpki-client