Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File:                     lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier:          SUiSUi3LKBR01Bdz4Kg8SVZBRb7aymoGwgf8LhCFHlg=
Subject key identifier:   9A:53:C8:C6:0B:78:E7:27:CC:DF:13:04:BA:C4:63:58:FA:98:1B:E3
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer:       /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial:       01A0016F2FEC4291A7AE52704284AAA02CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number:          0719
Signing time:             Fri 14 Aug 2026 18:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:58 +0000
Files and hashes:         1: 1teBGWyrdeMcfN_5PnazQXWLD1E.roa (hash: WrL5v9AFdVY6509NouX1fyjcl0G8QjZ4sA1Zzo1jtEc=)
                          2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: nkTvYeMcr1K7HCUZipujHBsXEGHxy5AI9StyrHeo5Tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:2f:ec:42:91:a7:ae:52:70:42:84:aa:a0:2c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
        Validity
            Not Before: Aug 14 18:00:58 2026 GMT
            Not After : Aug 15 18:00:58 2026 GMT
        Subject: CN=9a53c8c60b78e727ccdf1304bac46358fa981be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:12:d9:9d:88:22:26:46:ce:66:57:c9:1d:3f:
                    3c:af:f6:16:ac:81:1c:5e:35:87:9a:e3:d7:b6:31:
                    fe:be:d4:b3:91:29:e9:67:61:ea:fd:35:08:76:88:
                    67:44:b4:7b:de:b4:ec:a0:d1:92:7d:0f:30:51:da:
                    ef:3b:1a:3e:64:56:6b:6e:d5:b0:19:d3:43:32:19:
                    d4:1a:32:85:79:1e:7c:13:52:9e:47:ca:93:db:60:
                    f7:07:11:50:65:7f:07:51:80:f7:6d:50:1f:3d:c5:
                    23:47:f6:7c:81:6d:f4:fc:b3:76:6e:b8:e3:4d:c5:
                    6b:72:73:98:cb:2b:38:b1:64:d4:60:04:e1:39:fe:
                    79:3e:d4:4a:1f:01:b2:aa:44:19:9c:de:4b:6e:80:
                    78:4e:c2:98:33:6d:40:32:a1:c9:6e:d8:26:70:7c:
                    79:55:19:ba:7f:eb:e9:f4:74:f2:cc:18:1e:64:20:
                    f2:b2:33:f3:5f:67:88:5d:36:61:2f:a3:b6:1c:ff:
                    33:5f:03:81:3d:ab:f5:30:f9:80:58:e2:6b:ea:83:
                    fe:28:74:de:d7:66:9e:82:e4:13:a4:e3:78:3a:83:
                    71:b9:a9:c4:23:82:4d:a7:da:0c:82:94:d6:90:f7:
                    fc:10:84:7a:71:dc:24:d5:b1:d7:8e:3d:ea:00:72:
                    ee:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:53:C8:C6:0B:78:E7:27:CC:DF:13:04:BA:C4:63:58:FA:98:1B:E3
            X509v3 Authority Key Identifier:
                keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:96:28:06:43:6d:b4:19:60:a3:3f:c2:80:da:e3:e4:bb:
         5a:f3:96:3c:8b:3a:cd:45:ab:9d:ef:95:41:77:90:b4:d5:a3:
         96:66:32:59:0d:6c:b1:a2:08:ce:fa:74:b4:cc:40:60:30:a9:
         26:bb:52:d6:c1:54:67:ec:a7:72:7b:99:9d:3d:bc:61:9b:36:
         82:7e:b8:02:ac:04:b9:ec:af:e7:59:00:14:4f:99:16:95:4b:
         79:7d:82:9d:8f:00:d7:55:17:f7:30:22:98:ae:63:ce:3d:f0:
         dc:4f:ec:db:33:66:2f:e1:09:94:af:e6:f9:2c:6c:27:82:77:
         4e:3a:1b:c5:04:1b:f6:da:44:23:88:61:20:76:07:1e:e3:d5:
         27:df:46:5f:99:7c:64:1c:23:c9:0c:65:18:18:8e:69:77:bf:
         3a:30:47:4a:82:1a:a9:e5:3c:26:66:57:00:8c:bb:23:e3:92:
         fd:d6:45:42:49:03:e7:60:64:51:dc:fa:9d:01:83:56:63:e0:
         d7:fd:ae:a2:34:75:67:c6:60:b4:84:09:81:41:fc:e8:e9:ef:
         16:91:fc:86:d5:5a:c5:34:df:c9:ac:97:f8:87:f5:f9:da:d6:
         61:bf:e2:c9:68:4d:ea:a7:39:f4:2a:0e:e7:2a:77:06:f7:00:
         a0:e2:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:33:32 2026 by rpki-client