Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File:                     lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier:          6DNkrHYagDEjLITWsWAWDWS5Qi+KNWnhmZrJlfpTScE=
Subject key identifier:   DD:FA:B1:3B:D8:AD:7C:1C:AF:2B:D4:7E:E5:68:83:BB:F2:93:19:90
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer:       /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial:       01A08AFA1E0B7BEF9C15A7A4CA7260C2C3EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number:          1362
Signing time:             Thu 10 Sep 2026 11:00:42 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:42 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:42 +0000
Files and hashes:         1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
                          2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
                          3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
                          4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: gNvmpNJQR6yJTKRUW22NlyMOqsjmfroNMpCBuNofql4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:1e:0b:7b:ef:9c:15:a7:a4:ca:72:60:c2:c3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
        Validity
            Not Before: Sep 10 11:00:42 2026 GMT
            Not After : Sep 11 11:00:42 2026 GMT
        Subject: CN=ddfab13bd8ad7c1caf2bd47ee56883bbf2931990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:d4:b8:36:16:ca:cb:aa:15:9a:1a:d6:7f:
                    b2:4d:c3:1f:ee:4f:87:91:55:4e:23:97:e8:98:a0:
                    15:9f:f4:7a:e8:96:f0:d9:24:8e:0f:4a:fb:ca:42:
                    72:18:00:41:d9:41:fd:73:63:d1:9f:13:9f:9d:e1:
                    70:12:0a:8b:88:35:c8:ec:82:bb:ce:7d:6f:e1:61:
                    de:35:1d:f3:0a:97:d3:06:97:19:de:95:25:56:c0:
                    6f:91:af:76:19:98:74:b5:e8:25:37:60:a6:80:d5:
                    a9:60:b8:64:e3:c2:8d:87:2e:5b:68:90:f5:25:42:
                    3e:19:ba:d1:6f:58:6c:87:85:5b:96:b6:4d:04:7f:
                    be:47:47:56:fe:d2:b2:68:8b:d7:8b:e1:62:86:e8:
                    f7:f7:e7:3e:4f:9e:be:ea:15:66:90:2d:37:26:50:
                    6a:77:b7:8d:c3:95:f8:ad:a9:db:17:62:10:66:4e:
                    e3:bb:3b:a7:ef:c6:fb:df:32:f0:b8:0f:8c:64:4a:
                    c1:12:93:b2:2e:89:da:30:65:46:98:d8:2f:ab:c1:
                    5f:c2:c7:91:08:f3:55:69:8a:9e:8a:63:3b:77:ad:
                    d6:28:74:c1:7b:4c:20:66:76:d4:ce:05:27:b8:ad:
                    33:d3:c6:99:0c:0d:ab:2a:01:39:10:3b:38:32:10:
                    50:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FA:B1:3B:D8:AD:7C:1C:AF:2B:D4:7E:E5:68:83:BB:F2:93:19:90
            X509v3 Authority Key Identifier:
                keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:14:8a:0c:3a:bc:31:37:f1:cc:0b:2b:7b:f8:22:3d:20:58:
         ca:cf:75:49:70:64:2e:ba:58:29:73:cc:4b:88:b7:43:b2:d1:
         04:b4:ad:53:36:f6:18:2d:f2:a0:0e:87:6d:d6:65:55:ed:9c:
         0d:55:04:78:fc:bd:d8:c5:29:ed:01:d8:03:bd:8f:28:1f:c4:
         21:aa:c7:e3:58:9c:56:70:c2:c5:b6:df:86:e8:62:2c:76:dd:
         b1:8e:2a:52:f4:7c:2d:75:77:54:ff:90:fd:0d:f7:a2:0f:d8:
         ab:04:c1:bc:bc:c4:1b:4a:75:6e:ee:ff:dc:90:68:56:da:69:
         cb:06:63:6d:b2:9c:1e:1c:6d:1a:05:11:0e:40:5f:e0:1e:e7:
         49:db:7f:78:03:08:b2:23:6a:37:2b:fa:ff:e0:4e:28:b0:8f:
         4f:15:76:77:fb:cf:4b:ff:e6:07:90:5e:e3:eb:f1:be:4d:88:
         cb:18:e4:37:a3:97:28:b2:a1:a4:7a:45:7c:e7:13:31:7c:aa:
         c7:68:0b:56:7a:07:f2:d1:69:f9:f5:70:b3:d4:1d:d0:ba:42:
         aa:57:34:93:20:b4:ac:f9:34:a7:71:41:9f:8f:b8:eb:30:73:
         13:4f:52:c9:ab:a0:15:32:cb:c4:25:4d:5d:f8:b1:8f:30:18:
         26:43:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:41:11 2026 by rpki-client